Edit tour

Windows Analysis Report
cbIcBAgY5W.exe

Overview

General Information

Sample name:	cbIcBAgY5W.exe renamed because original name is a hash value
Original sample name:	902337bbf17ac4e015e03d12e79b60b8dd5a8362496da3291a39e9124c58d9ff.exe
Analysis ID:	1451641
MD5:	1b1ecd323162c054864b63ada693cd71
SHA1:	333a67545a5d1aad4d73a3501f7152b4529b6b3e
SHA256:	902337bbf17ac4e015e03d12e79b60b8dd5a8362496da3291a39e9124c58d9ff
Tags:	185-43-220-45exe
Infos:

Detection

SystemBC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected SystemBC

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after checking mutex)

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Machine Learning detection for dropped file

Send many emails (e-Mail Spam)

Tries to detect virtualization through RDTSC time measurements

Tries to resolve many domain names, but no domain seems valid

Uses dynamic DNS services

AV process strings found (often used to terminate AV products)

Connects to many different domains

Connects to several IPs in different countries

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to communicate with device drivers

Contains functionality to launch a program with higher privileges

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Executes massive DNS lookups (> 100)

File is packed with WinRar

Found decision node followed by non-executed suspicious APIs

Found evasive API chain (may stop execution after checking a module file name)

Found evasive API chain checking for process token information

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Suspicious Outbound SMTP Connections

Sigma detected: Use Short Name Path in Command Line

Uses Microsoft's Enhanced Cryptographic Provider

Uses SMTP (mail sending)

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

cbIcBAgY5W.exe (PID: 7424 cmdline: "C:\Users\user\Desktop\cbIcBAgY5W.exe" MD5: 1B1ECD323162C054864B63ADA693CD71)

cmd.exe (PID: 7532 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7540 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

work.exe (PID: 7588 cmdline: work.exe -priverdD MD5: 405B7FBE8C0ED98620064F0CD80F24C4)

jergs.exe (PID: 7628 cmdline: "C:\Users\user~1\AppData\Local\Temp\RarSFX1\jergs.exe" MD5: C661A77C31F83C413A96B5537AD31989)

ealfvjp.exe (PID: 7660 cmdline: C:\ProgramData\ooxxi\ealfvjp.exe start2 MD5: C661A77C31F83C413A96B5537AD31989)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
SystemBC	SystemBC is a proxy malware leveraging SOCKS5. Based on screenshots used in ads on a underground marketplace, Proofpoint decided to call it SystemBC.SystemBC has been observed occasionally, but more pronounced since June 2019. First samples goes back to October 2018.	No Attribution	https://asec.ahnlab.com/en/33600/ https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders https://blog.talosintelligence.com/2022/08/modernloader-delivers-multiple-stealers.html https://blogs.vmware.com/security/2023/06/8base-ransomware-a-heavy-hitting-player.html https://community.riskiq.com/article/47766fbd	https://malpedia.caad.fkie.fraunhofer.de/details/win.systembc

Malware Configuration

Threatname: SystemBC

{"HOST1": "clwtumberaero.cyou", "HOST2": "185.43.220.45", "PORT1": "4001", "DNS1": "5.132.191.104", "DNS2": "ns1.vic.au.dns.opennic.glue", "DNS3": "ns2.vic.au.dns.opennic.glue"}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
C:\ProgramData\ooxxi\ealfvjp.exe	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000000.1359592703.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000004.00000003.1358655589.000001E3D0E21000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000006.00000000.1365821763.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000005.00000002.1363866088.00000000004EB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000006.00000002.2603847749.0000000000401000.00000020.00000001.01000000.0000000C.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000005.00000002.1363751487.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: work.exe PID: 7588	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: jergs.exe PID: 7628	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: ealfvjp.exe PID: 7660	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Click to see the 4 entries

Unpacked PEs

Source	Rule	Description	Author
5.0.jergs.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
6.0.ealfvjp.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
5.2.jergs.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
6.2.ealfvjp.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security

Sigma Signatures

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 76.223.84.192, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\ProgramData\ooxxi\ealfvjp.exe, Initiated: true, ProcessId: 7660, Protocol: tcp, SourceIp: 192.168.2.7, SourceIsIpv6: false, SourcePort: 50040

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" ", CommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" ", CommandLine|base64offset|contains: , Image: C:\Windows\System32\cmd.exe, NewProcessName: C:\Windows\System32\cmd.exe, OriginalFileName: C:\Windows\System32\cmd.exe, ParentCommandLine: "C:\Users\user\Desktop\cbIcBAgY5W.exe", ParentImage: C:\Users\user\Desktop\cbIcBAgY5W.exe, ParentProcessId: 7424, ParentProcessName: cbIcBAgY5W.exe, ProcessCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" ", ProcessId: 7532, ProcessName: cmd.exe

Snort Signatures

ET TROJAN Win32/SystemBC CnC Checkin - Source IP: 192.168.2.7 - Destination IP: 185.43.220.45

Timestamp:	06/04/24-12:42:38.299475
SID:	2031599
Source Port:	49706
Destination Port:	4001
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 00000004.00000003.1358655589.000001E3D0E21000.00000004.00000020.00020000.00000000.sdmp

Malware Configuration Extractor: SystemBC {"HOST1": "clwtumberaero.cyou", "HOST2": "185.43.220.45", "PORT1": "4001", "DNS1": "5.132.191.104", "DNS2": "ns1.vic.au.dns.opennic.glue", "DNS3": "ns2.vic.au.dns.opennic.glue"}

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\ooxxi\ealfvjp.exe	ReversingLabs: Detection: 81%
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	ReversingLabs: Detection: 81%

Multi AV Scanner detection for submitted file

Source: cbIcBAgY5W.exe	ReversingLabs: Detection: 36%
Source: cbIcBAgY5W.exe	Virustotal: Detection: 31%			Perma Link

Machine Learning detection for dropped file

Source: C:\ProgramData\ooxxi\ealfvjp.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Code function: 5_2_004022F3 VirtualAlloc,DecryptMessage,		5_2_004022F3
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Code function: 5_2_004021BE QueryContextAttributesA,VirtualAlloc,EncryptMessage,		5_2_004021BE

Source: cbIcBAgY5W.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE

Source:

Binary string: D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb source: cbIcBAgY5W.exe, work.exe.0.dr

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76407B190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	0_2_00007FF76407B190
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF7640640BC FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	0_2_00007FF7640640BC
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76408FCA0 FindFirstFileExA,	0_2_00007FF76408FCA0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E99440BC FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	4_2_00007FF6E99440BC
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E995B190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	4_2_00007FF6E995B190
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E996FCA0 FindFirstFileExA,	4_2_00007FF6E996FCA0

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2031599 ET TROJAN Win32/SystemBC CnC Checkin 192.168.2.7:49706 -> 185.43.220.45:4001

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: clwtumberaero.cyou
Source: Malware configuration extractor	URLs: 185.43.220.45

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: securesmtp.nh.freeinet replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.gmbol.cem replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.sd151.k12.id.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.mt.universal.org.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: expertonlinedigital.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.getlife.indi replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.configsite.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.smart-core.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.vardhamancomputers.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.response-team.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.idac.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.zwoho.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ldias.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.jeanettelund.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.goaheadit.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.egba.ba.gov.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ch.adp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.mandela.ac.za replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.fieldnetwork.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.quigleyssmokehouse.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.adrianheuer.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.naseems.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.gladiusfencing.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.webpagesoftware.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.tu.ac.kr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.clad.co.kr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.kbiinc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.scopemail.nl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.jeparma.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.vilamatilde.dom.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.uniforja.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.reecon.eclipse.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.acoulson.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.kreisschule-surbtal.ch replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.panelel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.chartwer.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.versioncraft.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.roncoroni.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.tallero.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.pasteur.gr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.wessel-3d.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.sanshin.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gmil.nz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.leslilathrom.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.baamrecscsonsulting.co.tz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ehes.co.inn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.cenr.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.craig-cooper.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.marinehealthfoods.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ipfoundation.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.radiokurzschluss.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jr77.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.bpviz0xvp4.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.teenawilliams.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.herpain.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.bhfh.rn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.melodypicture.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.americanprecisionmach.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.jaleomantenimiento.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.cascadeschools.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.mearingsmith.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aspexpos.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.primrose.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.fotografanna.se replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.angyy.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.sdfgsd.sdffd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.trutta.f9.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.evcofoods.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.simplesbandalarga.page replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.eoopy.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.novalisadvisors.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.executivebshop.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ipoint2.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.pmhobbycraft.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.stmmediastore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.stmmediastore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ham.org.tw replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: out.kingedwaracademy.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.asnatec.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.thebfagroup.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.liderancacobrancas.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.mcboe.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.firestw.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.namtrieu.com.vn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.kevinrush.plus.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.technomade.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.octaviomartin.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.pop.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.eastc365.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.epieletroeletronicos.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.egyptemploymentbraux.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.caledonian.ac.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ethanlaffan.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.avantticomunicacao.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.srcharlessd.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.rutonworking.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.feldkamp.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gitc.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ecountrystore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.matehuala.tecnm.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.cardinal.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.rolimconsult.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.bbwgroup.cn replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.bpkpenabur.sch.id replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.deltaeurofridge.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.luckyadmin.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.bos-kaufbeuren.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.resolution-air.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.fiorentinimoveis.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.gauss00.math2.nat.tu-bs.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.erlenbaugh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.o2rise.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.rapidbikes.com.au replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.sebr.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.bribaxe.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.chugach.ak.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.kitchenbarn.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ag.netyou.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.foxhiver.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.birobar.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bradlo.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.super-bijin.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.poliziadistoto.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.motadata.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ouellette.homeip.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.saeys.nl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: chicasconperroparapracticarsexoconelperro.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.atrgroup.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.imcod.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ag.wakwak.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.abbak.karoo.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jewks.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.albinosquirrel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.yamouni.id.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.carmelacarnes.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.entrepreneurthemovie.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.retailwarenhuis.nl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pcftp.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.a3proyectos.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.jsw.pl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.bridgoconstructiongroup.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.schreiner-schnitzenbaumer.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.bmwnet.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.boditech.co.kr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.rmc98.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.constructel.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.mail.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.nds.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.departmentofforeigneducationaffairs.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.kaera.co.kr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ufpa.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.dalyatur.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.callitltd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ofenschulte.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.institutozuriel.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goldcrestchemicals.co.uk replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.nova-space.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.walshfence.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.bigcarnes.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: itelefonica.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.rogowindustries.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.tmssas.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: candidatarosana.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.g-e.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.media24.co.za replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.sp8.net.pl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.estudante.sed.sc.gov.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.web.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.reckkommunikation.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.omibyarnetwork.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: heilige-garde.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ctlcloud.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.email.mayville.k12.wi.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.fba8b04559.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.stylo.pk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.mingeo.hu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.ccn5.aitai.ne.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.bluebooks.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.trends360.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.mansell.plc.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.hermeil.her replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ominet.net.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.mexonexc.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.linuxonly4u.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.keiaisha.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.speters.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.agate.plala.or.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.malora.ch replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.sousolution.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.campbelllee1.plus.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.giardinodiandrea.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.webmanagers.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.baovetaybinh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.sgmcclan.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.mikromess.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.students.arh.ukim.mk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.kaufland.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.saludbc.gob.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lquinngroup.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.anagataitsolutions.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.8418f58be3.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.hotmbyail.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.kartmagic.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.p6comunicacao.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.insean.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.wecand.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.grupoats.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.janimation.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.internacionalmaritima.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.credishop.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.nixonnyc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ianthegg.cf replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.freee.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.muench-hahn.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.rtschmidt.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.sorrentonet.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.yatesfamily.me.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.brauliolopes.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.monplaisircollege.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.lpajc.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.kokillo.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.eighty8fiji.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.mapsolution.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.kp.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.smpn17bdg.sch.id replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.tncolombia.com.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.equpointproperty.co.tz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.mueblesocram.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmbnetworks.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.unither.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.com.wwdfe.goog.wizardingworld replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.education.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.yjudovlkxard.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.shahsolutions.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.acwebcreation.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: svalios.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.ugecamne.fitech.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.prion.ucl.ac.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: costa.com.br replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.microwebnet.com.br replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: secure.jrf.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.carrollfoodservice.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.datisa.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.tele2.se replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: masingresos.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.localaccess.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.jdajdj.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.yildirimlarnakliyat.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.sea-radio.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.gollygumdrops.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.kingsofcomedy.be replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: urbanusroad.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.goophone.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.plan316.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.display.nl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.unicredmg.coop.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zalliedimpex.com.pk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.institut-gmk.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.leveragesports.ng replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.mahlabmedia.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.adfacility.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.cweng.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.ssgn.by.lo-net2.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.copperfio.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 5f798dfe5f.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.mbipools.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.freehandsdesing.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.asgatech.com.sa replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.stertzbach.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.allevialiving.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.laregionalsa.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.andima2.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.lebrede.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.eventelite.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.disparco.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.chandela.co.id replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.umoncton.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.langeweile-hh.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.knightstone.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.nilopolis.rj.gov.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.leiaute.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.dmt.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.duede.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.uva.eg replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.558dcfb5e7.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.lowhosting.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.telrad.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: digimail.in replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: mail.ppski-kaltim.indobelajar.id replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.kohlercia.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.evalink.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qdteopw5mf.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.cfreight.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.archificio.eu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.mbst.uni-rostock.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.martys.com.au replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.javamountaincoffee.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.displayd.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.brsist.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nyakko.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.epikureerna.se replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.hipnosesemsegredos.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.scuoledueville.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.bits.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.pc1expert.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.rhenus.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.priveesport.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.organiccounty.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.tecnopoloti.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.ulmipu.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.trako.arch.rwth-aachen.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.lete.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.expertasset.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.rahsiakambing.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.atrgroup.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.uddie.fsnet.co.uk replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: securesmtp.jeanneyoung.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.nationwide.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.asd5.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.arezzocentrokiaikido.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.novapack.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: starfunevents.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: grifoncapital.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.sherkhen.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.imprint.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ziragold.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.city.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.magiclife-es.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.privfit.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.glow.demon.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.tabarcaperitaciones.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.kdbrindes.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.e-structures.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.satmaster.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.rapid-mails.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.sepiaconsultants.co.za replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.vestbykommune.no replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.thomas-schoedl.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.i.hosei.ac.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.happyprinting.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.line.no replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.sheepwingkocorozashi.co.jp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.mecpreci.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.marronetransportes.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.michellelowe.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.saintys.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.highservers.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.matx.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.cross-stitch-corner.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.equpointproperty.co.tz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.feb.upr.ac.id replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.riovaradero.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.eds.dd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.smany.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.sportlounge.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.zacharyschools.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.amerique.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: elahost.pl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.sunpackaging.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.sr-f.dk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.oscola.kl2.fl replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.6fvbvb.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maebars.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.tekun.co.id replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.86.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.campingcasadicaccia.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.engmaterialslab.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.nakedforsatan.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.vivelacinq.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xbarnet.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.mybce.catholic.ede replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.saintys.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.longaecugini.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.haggerston.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.diyanetvakfi.org.tr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.chaos4x4.co.za replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.5f798dfe5f.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.adoramidia.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.fairhoperealtygroup.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.quikefoods.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.potschadel.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.edu.uni-klu.ac.at replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ifollowing.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.estudioborasi.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.rwfxstudio.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.9a869680ce.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.rts.net.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.eturecup.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.semikron.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.jjstoragesystems.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.tahoo.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.turazza.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.majcherczyk.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.jeitler.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.francetv.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.topdevelopers.co replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.arthurfrancia.ammuca.eu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: email.tst replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.deutschgames.tv replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.djcyren.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.isdial.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ptwilad.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.reimo.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.corby-cats.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.busschaertparket.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.arcontemp.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.gruppounica.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.recruitmentsystems.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.rohr.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.nordialog.no replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.timolang.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.rhythmuswege.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.libang.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.course-shelton.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.hostlocation.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.bronchick.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.malte.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.gabrielevilla.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.franmetal.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.firehousejerky.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.kentcollege.kent.sch.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.videa.hu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.kenwood.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.cesgengenharia.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.offthetrucks.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.dpsw.onmicrosoft.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.kongsviktoppen.no replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.rollspack.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.steas.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.vctormelo.com.ar replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.alleader.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.riviera-productions.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.mv-hallstadt.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.jespersen.se replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.compolar.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.chest.or.kr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.albap.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.aetnahhl.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.sterling-m.co.za replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.gnsmail.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.santen.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ag-mj-kty.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.avanteam.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.tinkerbox.com.sg replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.cm-photography.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.fhv.at replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.cherrysports.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jq-informatics.be replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.ondeon.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.thecedarsacademy.org.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.iesmariabellido.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.ring-of-light.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.fwcd.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.obiettividarte.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ammann.whitney.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.caslondon.on.ca replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.desbrown.karoo.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.poly-vac.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acsu.buffalo.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.jeffrutherford.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.zairlock.fr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.kaeler.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.arecadesign.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.asoberway.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hot.pop replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.renovamaquinas.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.svasti.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.saintmarkschoolethiopia.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.aak-schubert.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: soleforma.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.readinessconcepts.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.hargreavesphotography.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.synack.mckinsey.id replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.thelabarber.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.porto.adv.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.printincclothing.co.uk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.tsacargo.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.before.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.expressivapublicidade.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.rosellestudent.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.x-pert.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.koski.gov.tr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.chopsley.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cecon.coc.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.travel-associates.com.au replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.modaviva.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.agaron.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.reallocadora.com.br replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.gdjenkins.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.theminitiger.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.cofibox.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bniya.store replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.drrd.gov.mm replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: securesmtp.chartwer.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secure.marti.com.mx replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.killfreetimes.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.beybi.com.tr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: out.cosmetics.gr replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.c3presents.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.johnhuxham.com.au replaycode: Name error (3)

Uses dynamic DNS services

Source: unknown

DNS query: name: mx-caprica.zoneedit.com

Source: unknown

Network traffic detected: DNS query count 1867

Source: unknown

Network traffic detected: IP country count 25

Source: global traffic	TCP traffic: 192.168.2.7:49706 -> 185.43.220.45:4001
Source: global traffic	TCP traffic: 192.168.2.7:50040 -> 76.223.84.192:587
Source: global traffic	TCP traffic: 192.168.2.7:50043 -> 185.71.61.14:587
Source: global traffic	TCP traffic: 192.168.2.7:50044 -> 195.32.69.33:587
Source: global traffic	TCP traffic: 192.168.2.7:50045 -> 168.0.132.203:587
Source: global traffic	TCP traffic: 192.168.2.7:50049 -> 103.145.30.229:587
Source: global traffic	TCP traffic: 192.168.2.7:50050 -> 66.226.70.66:587
Source: global traffic	TCP traffic: 192.168.2.7:50051 -> 187.6.211.40:587
Source: global traffic	TCP traffic: 192.168.2.7:50053 -> 204.11.56.48:587
Source: global traffic	TCP traffic: 192.168.2.7:50054 -> 84.2.43.67:587
Source: global traffic	TCP traffic: 192.168.2.7:50055 -> 117.50.20.113:587
Source: global traffic	TCP traffic: 192.168.2.7:50056 -> 52.223.34.187:587
Source: global traffic	TCP traffic: 192.168.2.7:50057 -> 23.81.68.43:587
Source: global traffic	TCP traffic: 192.168.2.7:50061 -> 194.19.134.85:587
Source: global traffic	TCP traffic: 192.168.2.7:50062 -> 84.116.6.3:587
Source: global traffic	TCP traffic: 192.168.2.7:50063 -> 52.96.111.82:587
Source: global traffic	TCP traffic: 192.168.2.7:64328 -> 188.114.96.3:587
Source: global traffic	TCP traffic: 192.168.2.7:64329 -> 120.50.131.112:587
Source: global traffic	TCP traffic: 192.168.2.7:64335 -> 142.93.237.125:587
Source: global traffic	TCP traffic: 192.168.2.7:64336 -> 142.250.153.26:587
Source: global traffic	TCP traffic: 192.168.2.7:64337 -> 194.19.134.66:587
Source: global traffic	TCP traffic: 192.168.2.7:64339 -> 160.119.252.132:587
Source: global traffic	TCP traffic: 192.168.2.7:64341 -> 108.177.15.108:587
Source: global traffic	TCP traffic: 192.168.2.7:64344 -> 173.194.76.27:587
Source: global traffic	TCP traffic: 192.168.2.7:64345 -> 81.236.63.162:587
Source: global traffic	TCP traffic: 192.168.2.7:64346 -> 77.75.77.165:587
Source: global traffic	TCP traffic: 192.168.2.7:64347 -> 94.102.6.76:587
Source: global traffic	TCP traffic: 192.168.2.7:64352 -> 65.20.63.172:587
Source: global traffic	TCP traffic: 192.168.2.7:64353 -> 195.130.132.10:587
Source: global traffic	TCP traffic: 192.168.2.7:64355 -> 104.153.0.33:587
Source: global traffic	TCP traffic: 192.168.2.7:59716 -> 74.208.236.198:587
Source: global traffic	TCP traffic: 192.168.2.7:59717 -> 208.91.199.225:587
Source: global traffic	TCP traffic: 192.168.2.7:59718 -> 191.252.112.195:587
Source: global traffic	TCP traffic: 192.168.2.7:59730 -> 193.81.82.81:587
Source: global traffic	TCP traffic: 192.168.2.7:59731 -> 213.209.1.145:587
Source: global traffic	TCP traffic: 192.168.2.7:59733 -> 210.59.228.45:587
Source: global traffic	TCP traffic: 192.168.2.7:59734 -> 216.239.32.21:587
Source: global traffic	TCP traffic: 192.168.2.7:59735 -> 5.135.40.30:587
Source: global traffic	TCP traffic: 192.168.2.7:59738 -> 104.18.2.81:587
Source: global traffic	TCP traffic: 192.168.2.7:59739 -> 77.75.78.173:587
Source: global traffic	TCP traffic: 192.168.2.7:59744 -> 188.114.97.3:587
Source: global traffic	TCP traffic: 192.168.2.7:59748 -> 163.44.185.233:587
Source: global traffic	TCP traffic: 192.168.2.7:59750 -> 108.167.188.20:587
Source: global traffic	TCP traffic: 192.168.2.7:59751 -> 107.155.89.162:587
Source: global traffic	TCP traffic: 192.168.2.7:59753 -> 199.59.243.225:587
Source: global traffic	TCP traffic: 192.168.2.7:59754 -> 62.149.128.166:587
Source: global traffic	TCP traffic: 192.168.2.7:59761 -> 52.101.73.24:587
Source: global traffic	TCP traffic: 192.168.2.7:59762 -> 109.234.161.75:587
Source: global traffic	TCP traffic: 192.168.2.7:59765 -> 208.80.204.162:587
Source: global traffic	TCP traffic: 192.168.2.7:59766 -> 97.74.81.106:587
Source: global traffic	TCP traffic: 192.168.2.7:59769 -> 217.76.151.9:587
Source: global traffic	TCP traffic: 192.168.2.7:59770 -> 87.242.0.7:587
Source: global traffic	TCP traffic: 192.168.2.7:59774 -> 142.171.118.47:587
Source: global traffic	TCP traffic: 192.168.2.7:59775 -> 34.160.157.95:587
Source: global traffic	TCP traffic: 192.168.2.7:59776 -> 2.207.150.234:587
Source: global traffic	TCP traffic: 192.168.2.7:59777 -> 79.170.40.4:587
Source: global traffic	TCP traffic: 192.168.2.7:59782 -> 199.34.228.151:587
Source: global traffic	TCP traffic: 192.168.2.7:59785 -> 80.158.67.40:587
Source: global traffic	TCP traffic: 192.168.2.7:59786 -> 3.64.163.50:587
Source: global traffic	TCP traffic: 192.168.2.7:59790 -> 142.251.9.27:587
Source: global traffic	TCP traffic: 192.168.2.7:59794 -> 40.85.218.2:587
Source: global traffic	TCP traffic: 192.168.2.7:59795 -> 109.168.108.106:587
Source: global traffic	TCP traffic: 192.168.2.7:59796 -> 62.24.202.42:587
Source: global traffic	TCP traffic: 192.168.2.7:59801 -> 81.169.145.90:587
Source: global traffic	TCP traffic: 192.168.2.7:59806 -> 154.53.51.218:587
Source: global traffic	TCP traffic: 192.168.2.7:59808 -> 175.135.254.129:587
Source: global traffic	TCP traffic: 192.168.2.7:59809 -> 114.179.184.189:587
Source: global traffic	TCP traffic: 192.168.2.7:59813 -> 204.141.43.44:587
Source: global traffic	TCP traffic: 192.168.2.7:59819 -> 87.238.28.12:587
Source: global traffic	TCP traffic: 192.168.2.7:59820 -> 208.91.197.132:587
Source: global traffic	TCP traffic: 192.168.2.7:59821 -> 50.116.87.133:587
Source: global traffic	TCP traffic: 192.168.2.7:59827 -> 167.172.23.243:587
Source: global traffic	TCP traffic: 192.168.2.7:59830 -> 89.39.182.172:587
Source: global traffic	TCP traffic: 192.168.2.7:59832 -> 107.180.3.104:587
Source: global traffic	TCP traffic: 192.168.2.7:59833 -> 52.101.73.22:587
Source: global traffic	TCP traffic: 192.168.2.7:59834 -> 75.102.22.71:587
Source: global traffic	TCP traffic: 192.168.2.7:59836 -> 89.40.173.57:587
Source: global traffic	TCP traffic: 192.168.2.7:59837 -> 54.39.244.15:587
Source: global traffic	TCP traffic: 192.168.2.7:59838 -> 85.10.159.54:587
Source: global traffic	TCP traffic: 192.168.2.7:59841 -> 203.114.168.20:587
Source: global traffic	TCP traffic: 192.168.2.7:59848 -> 103.235.106.10:587
Source: global traffic	TCP traffic: 192.168.2.7:59852 -> 144.76.112.115:587
Source: global traffic	TCP traffic: 192.168.2.7:59855 -> 103.224.182.246:587
Source: global traffic	TCP traffic: 192.168.2.7:59857 -> 213.33.87.55:587
Source: global traffic	TCP traffic: 192.168.2.7:59858 -> 64.136.44.44:587
Source: global traffic	TCP traffic: 192.168.2.7:59860 -> 109.61.0.142:587
Source: global traffic	TCP traffic: 192.168.2.7:59861 -> 104.131.176.42:587
Source: global traffic	TCP traffic: 192.168.2.7:59865 -> 168.119.150.59:587
Source: global traffic	TCP traffic: 192.168.2.7:59869 -> 133.237.129.136:587
Source: global traffic	TCP traffic: 192.168.2.7:59871 -> 149.13.75.27:587
Source: global traffic	TCP traffic: 192.168.2.7:59872 -> 93.115.28.104:587
Source: global traffic	TCP traffic: 192.168.2.7:59873 -> 222.124.219.187:587
Source: global traffic	TCP traffic: 192.168.2.7:59874 -> 194.158.122.55:587
Source: global traffic	TCP traffic: 192.168.2.7:59883 -> 35.214.249.211:587
Source: global traffic	TCP traffic: 192.168.2.7:59884 -> 116.202.134.231:587
Source: global traffic	TCP traffic: 192.168.2.7:59885 -> 27.124.113.33:587
Source: global traffic	TCP traffic: 192.168.2.7:59890 -> 185.111.97.36:587
Source: global traffic	TCP traffic: 192.168.2.7:59895 -> 193.181.34.163:587
Source: global traffic	TCP traffic: 192.168.2.7:59901 -> 129.232.148.154:587
Source: global traffic	TCP traffic: 192.168.2.7:59905 -> 91.195.240.13:587
Source: global traffic	TCP traffic: 192.168.2.7:59906 -> 49.213.103.199:587
Source: global traffic	TCP traffic: 192.168.2.7:59907 -> 41.193.157.227:587
Source: global traffic	TCP traffic: 192.168.2.7:59908 -> 64.91.253.60:587
Source: global traffic	TCP traffic: 192.168.2.7:59909 -> 52.45.199.183:587
Source: global traffic	TCP traffic: 192.168.2.7:59912 -> 94.177.209.28:587
Source: global traffic	TCP traffic: 192.168.2.7:59913 -> 108.167.151.68:587
Source: global traffic	TCP traffic: 192.168.2.7:59914 -> 202.138.49.32:587
Source: global traffic	TCP traffic: 192.168.2.7:59916 -> 79.143.126.202:587
Source: global traffic	TCP traffic: 192.168.2.7:59923 -> 195.15.132.130:587
Source: global traffic	TCP traffic: 192.168.2.7:59924 -> 193.120.143.144:587
Source: global traffic	TCP traffic: 192.168.2.7:59925 -> 40.99.150.66:587
Source: global traffic	TCP traffic: 192.168.2.7:59932 -> 46.255.231.19:587
Source: global traffic	TCP traffic: 192.168.2.7:59934 -> 199.224.64.207:587
Source: global traffic	TCP traffic: 192.168.2.7:59937 -> 47.43.18.10:587
Source: global traffic	TCP traffic: 192.168.2.7:59938 -> 74.125.200.27:587
Source: global traffic	TCP traffic: 192.168.2.7:59944 -> 23.227.38.65:587
Source: global traffic	TCP traffic: 192.168.2.7:59946 -> 211.29.132.105:587
Source: global traffic	TCP traffic: 192.168.2.7:59947 -> 208.215.218.15:587
Source: global traffic	TCP traffic: 192.168.2.7:59950 -> 94.100.132.8:587
Source: global traffic	TCP traffic: 192.168.2.7:59955 -> 200.147.36.31:587
Source: global traffic	TCP traffic: 192.168.2.7:59957 -> 187.86.131.25:587
Source: global traffic	TCP traffic: 192.168.2.7:59960 -> 163.173.128.32:587
Source: global traffic	TCP traffic: 192.168.2.7:59962 -> 104.19.239.228:587
Source: global traffic	TCP traffic: 192.168.2.7:59963 -> 180.55.189.114:587
Source: global traffic	TCP traffic: 192.168.2.7:59965 -> 213.186.33.4:587
Source: global traffic	TCP traffic: 192.168.2.7:59968 -> 190.8.176.9:587
Source: global traffic	TCP traffic: 192.168.2.7:59973 -> 91.189.182.67:587
Source: global traffic	TCP traffic: 192.168.2.7:59974 -> 77.78.119.119:587
Source: global traffic	TCP traffic: 192.168.2.7:59979 -> 52.63.237.70:587
Source: global traffic	TCP traffic: 192.168.2.7:59980 -> 142.250.150.27:587
Source: global traffic	TCP traffic: 192.168.2.7:59982 -> 150.214.40.4:587
Source: global traffic	TCP traffic: 192.168.2.7:59988 -> 108.177.15.109:587
Source: global traffic	TCP traffic: 192.168.2.7:59989 -> 189.124.16.18:587
Source: global traffic	TCP traffic: 192.168.2.7:59994 -> 209.202.254.90:587
Source: global traffic	TCP traffic: 192.168.2.7:59996 -> 147.182.189.184:587
Source: global traffic	TCP traffic: 192.168.2.7:59997 -> 67.219.246.213:587
Source: global traffic	TCP traffic: 192.168.2.7:59999 -> 52.101.68.39:587
Source: global traffic	TCP traffic: 192.168.2.7:60001 -> 3.140.13.188:587
Source: global traffic	TCP traffic: 192.168.2.7:60005 -> 195.110.124.132:587
Source: global traffic	TCP traffic: 192.168.2.7:60012 -> 45.174.184.3:587
Source: global traffic	TCP traffic: 192.168.2.7:60015 -> 209.133.207.180:587
Source: global traffic	TCP traffic: 192.168.2.7:60016 -> 141.138.137.88:587
Source: global traffic	TCP traffic: 192.168.2.7:60017 -> 194.153.145.104:587
Source: global traffic	TCP traffic: 192.168.2.7:60019 -> 46.16.236.27:587
Source: global traffic	TCP traffic: 192.168.2.7:60021 -> 194.181.93.175:587
Source: global traffic	TCP traffic: 192.168.2.7:60022 -> 104.17.69.73:587
Source: global traffic	TCP traffic: 192.168.2.7:60028 -> 52.71.57.184:587
Source: global traffic	TCP traffic: 192.168.2.7:60031 -> 74.81.94.123:587
Source: global traffic	TCP traffic: 192.168.2.7:60032 -> 104.21.63.26:587
Source: global traffic	TCP traffic: 192.168.2.7:60034 -> 136.143.183.44:587
Source: global traffic	TCP traffic: 192.168.2.7:60036 -> 80.91.55.62:587
Source: global traffic	TCP traffic: 192.168.2.7:60038 -> 108.177.15.27:587
Source: global traffic	TCP traffic: 192.168.2.7:60040 -> 104.102.49.62:587
Source: global traffic	TCP traffic: 192.168.2.7:60051 -> 46.30.213.119:587
Source: global traffic	TCP traffic: 192.168.2.7:60052 -> 130.185.238.40:587
Source: global traffic	TCP traffic: 192.168.2.7:60053 -> 176.62.173.44:587
Source: global traffic	TCP traffic: 192.168.2.7:60054 -> 103.55.39.211:587
Source: global traffic	TCP traffic: 192.168.2.7:60060 -> 103.14.97.106:587
Source: global traffic	TCP traffic: 192.168.2.7:60061 -> 45.11.76.26:587
Source: global traffic	TCP traffic: 192.168.2.7:60062 -> 193.70.18.144:587
Source: global traffic	TCP traffic: 192.168.2.7:60065 -> 195.121.65.26:587
Source: global traffic	TCP traffic: 192.168.2.7:60068 -> 69.49.115.40:587
Source: global traffic	TCP traffic: 192.168.2.7:60073 -> 193.54.32.8:587
Source: global traffic	TCP traffic: 192.168.2.7:60076 -> 80.48.169.1:587
Source: global traffic	TCP traffic: 192.168.2.7:60078 -> 217.160.0.220:587
Source: global traffic	TCP traffic: 192.168.2.7:60079 -> 59.157.128.15:587
Source: global traffic	TCP traffic: 192.168.2.7:60085 -> 14.45.79.13:587
Source: global traffic	TCP traffic: 192.168.2.7:60087 -> 58.26.8.206:587
Source: global traffic	TCP traffic: 192.168.2.7:60093 -> 116.202.21.121:587
Source: global traffic	TCP traffic: 192.168.2.7:60097 -> 185.135.241.111:587
Source: global traffic	TCP traffic: 192.168.2.7:60098 -> 3.125.131.179:587
Source: global traffic	TCP traffic: 192.168.2.7:60099 -> 79.174.131.240:587
Source: global traffic	TCP traffic: 192.168.2.7:60101 -> 79.172.249.130:587
Source: global traffic	TCP traffic: 192.168.2.7:60105 -> 3.225.35.191:587
Source: global traffic	TCP traffic: 192.168.2.7:60106 -> 200.40.52.164:587
Source: global traffic	TCP traffic: 192.168.2.7:60107 -> 44.230.23.127:587
Source: global traffic	TCP traffic: 192.168.2.7:60108 -> 177.11.53.234:587
Source: global traffic	TCP traffic: 192.168.2.7:60110 -> 119.18.54.146:587
Source: global traffic	TCP traffic: 192.168.2.7:60116 -> 45.60.247.143:587
Source: global traffic	TCP traffic: 192.168.2.7:60117 -> 173.208.41.154:587
Source: global traffic	TCP traffic: 192.168.2.7:60120 -> 81.2.195.204:587
Source: global traffic	TCP traffic: 192.168.2.7:60121 -> 203.0.178.91:587
Source: global traffic	TCP traffic: 192.168.2.7:60122 -> 177.70.110.120:587
Source: global traffic	TCP traffic: 192.168.2.7:60124 -> 52.148.72.153:587
Source: global traffic	TCP traffic: 192.168.2.7:60125 -> 64.98.38.132:587
Source: global traffic	TCP traffic: 192.168.2.7:60129 -> 5.161.98.212:587
Source: global traffic	TCP traffic: 192.168.2.7:60130 -> 86.105.9.181:587
Source: global traffic	TCP traffic: 192.168.2.7:60131 -> 196.22.132.13:587
Source: global traffic	TCP traffic: 192.168.2.7:60132 -> 41.74.197.201:587
Source: global traffic	TCP traffic: 192.168.2.7:60133 -> 217.76.146.62:587
Source: global traffic	TCP traffic: 192.168.2.7:59722 -> 91.136.8.184:587
Source: global traffic	TCP traffic: 192.168.2.7:59730 -> 91.184.0.200:587
Source: global traffic	TCP traffic: 192.168.2.7:59747 -> 207.174.2.43:587
Source: global traffic	TCP traffic: 192.168.2.7:59752 -> 89.31.75.11:587
Source: global traffic	TCP traffic: 192.168.2.7:59763 -> 115.70.199.33:587
Source: global traffic	TCP traffic: 192.168.2.7:59767 -> 217.74.65.52:587
Source: global traffic	TCP traffic: 192.168.2.7:59773 -> 186.202.135.240:587
Source: global traffic	TCP traffic: 192.168.2.7:59784 -> 52.210.80.236:587
Source: global traffic	TCP traffic: 192.168.2.7:59787 -> 187.108.207.40:587
Source: global traffic	TCP traffic: 192.168.2.7:59791 -> 1.1.1.1:587
Source: global traffic	TCP traffic: 192.168.2.7:59794 -> 193.17.184.242:587
Source: global traffic	TCP traffic: 192.168.2.7:59798 -> 61.122.216.220:587
Source: global traffic	TCP traffic: 192.168.2.7:59800 -> 15.197.192.55:587
Source: global traffic	TCP traffic: 192.168.2.7:59808 -> 104.47.22.202:587
Source: global traffic	TCP traffic: 192.168.2.7:59809 -> 213.227.131.210:587
Source: global traffic	TCP traffic: 192.168.2.7:59810 -> 106.187.245.193:587
Source: global traffic	TCP traffic: 192.168.2.7:59816 -> 203.210.102.92:587
Source: global traffic	TCP traffic: 192.168.2.7:59817 -> 209.222.82.255:587
Source: global traffic	TCP traffic: 192.168.2.7:59819 -> 75.2.24.159:587
Source: global traffic	TCP traffic: 192.168.2.7:59820 -> 94.152.13.93:587
Source: global traffic	TCP traffic: 192.168.2.7:59822 -> 195.238.22.30:587
Source: global traffic	TCP traffic: 192.168.2.7:59823 -> 217.65.97.72:587
Source: global traffic	TCP traffic: 192.168.2.7:61869 -> 89.31.143.90:587
Source: global traffic	TCP traffic: 192.168.2.7:61870 -> 216.40.34.41:587
Source: global traffic	TCP traffic: 192.168.2.7:61873 -> 209.67.129.55:587
Source: global traffic	TCP traffic: 192.168.2.7:61875 -> 91.220.42.241:587
Source: global traffic	TCP traffic: 192.168.2.7:61876 -> 177.153.23.242:587
Source: global traffic	TCP traffic: 192.168.2.7:61881 -> 81.26.217.148:587
Source: global traffic	TCP traffic: 192.168.2.7:61885 -> 195.83.13.244:587
Source: global traffic	TCP traffic: 192.168.2.7:61887 -> 191.6.216.100:587
Source: global traffic	TCP traffic: 192.168.2.7:61895 -> 86.105.244.1:587
Source: global traffic	TCP traffic: 192.168.2.7:61896 -> 64.136.44.50:587
Source: global traffic	TCP traffic: 192.168.2.7:61899 -> 198.208.74.205:587
Source: global traffic	TCP traffic: 192.168.2.7:61900 -> 185.104.29.102:587
Source: global traffic	TCP traffic: 192.168.2.7:61904 -> 199.59.243.220:587
Source: global traffic	TCP traffic: 192.168.2.7:61905 -> 64.59.136.142:587
Source: global traffic	TCP traffic: 192.168.2.7:61908 -> 15.197.142.173:587
Source: global traffic	TCP traffic: 192.168.2.7:61912 -> 92.204.39.12:587
Source: global traffic	TCP traffic: 192.168.2.7:56382 -> 187.45.240.106:587
Source: global traffic	TCP traffic: 192.168.2.7:53005 -> 90.216.128.5:587
Source: global traffic	TCP traffic: 192.168.2.7:53007 -> 188.40.120.147:587
Source: global traffic	TCP traffic: 192.168.2.7:53009 -> 167.114.161.198:587
Source: global traffic	TCP traffic: 192.168.2.7:53010 -> 52.101.8.36:587
Source: global traffic	TCP traffic: 192.168.2.7:53011 -> 150.136.132.149:587
Source: global traffic	TCP traffic: 192.168.2.7:53014 -> 213.209.1.147:587
Source: global traffic	TCP traffic: 192.168.2.7:53018 -> 185.138.56.194:587
Source: global traffic	TCP traffic: 192.168.2.7:53019 -> 194.185.246.171:587
Source: global traffic	TCP traffic: 192.168.2.7:53020 -> 130.223.0.23:587
Source: global traffic	TCP traffic: 192.168.2.7:53026 -> 205.178.189.129:587
Source: global traffic	TCP traffic: 192.168.2.7:53027 -> 200.234.204.130:587
Source: global traffic	TCP traffic: 192.168.2.7:53033 -> 178.162.221.165:587
Source: global traffic	TCP traffic: 192.168.2.7:53034 -> 129.153.232.207:587
Source: global traffic	TCP traffic: 192.168.2.7:53038 -> 193.122.131.100:587
Source: global traffic	TCP traffic: 192.168.2.7:53044 -> 185.151.28.68:587
Source: global traffic	TCP traffic: 192.168.2.7:53047 -> 13.55.195.118:587
Source: global traffic	TCP traffic: 192.168.2.7:53051 -> 92.204.80.0:587
Source: global traffic	TCP traffic: 192.168.2.7:53052 -> 64.79.170.162:587
Source: global traffic	TCP traffic: 192.168.2.7:53056 -> 15.197.240.20:587
Source: global traffic	TCP traffic: 192.168.2.7:53057 -> 200.58.112.242:587
Source: global traffic	TCP traffic: 192.168.2.7:53066 -> 35.237.181.40:587
Source: global traffic	TCP traffic: 192.168.2.7:53075 -> 191.252.4.18:587
Source: global traffic	TCP traffic: 192.168.2.7:53077 -> 67.223.118.47:587
Source: global traffic	TCP traffic: 192.168.2.7:53083 -> 46.105.45.21:587
Source: global traffic	TCP traffic: 192.168.2.7:53087 -> 183.181.84.7:587
Source: global traffic	TCP traffic: 192.168.2.7:53088 -> 95.211.75.25:587
Source: global traffic	TCP traffic: 192.168.2.7:53089 -> 191.252.112.194:587
Source: global traffic	TCP traffic: 192.168.2.7:53090 -> 142.250.185.179:587
Source: global traffic	TCP traffic: 192.168.2.7:54371 -> 104.156.56.14:587
Source: global traffic	TCP traffic: 192.168.2.7:54375 -> 200.58.110.107:587
Source: global traffic	TCP traffic: 192.168.2.7:54378 -> 154.219.188.75:587
Source: global traffic	TCP traffic: 192.168.2.7:54380 -> 202.3.77.184:587
Source: global traffic	TCP traffic: 192.168.2.7:54382 -> 130.193.14.152:587
Source: global traffic	TCP traffic: 192.168.2.7:54385 -> 35.195.63.198:587
Source: global traffic	TCP traffic: 192.168.2.7:54388 -> 212.6.122.175:587
Source: global traffic	TCP traffic: 192.168.2.7:54395 -> 35.214.159.114:587
Source: global traffic	TCP traffic: 192.168.2.7:54399 -> 186.227.204.171:587
Source: global traffic	TCP traffic: 192.168.2.7:54405 -> 40.99.150.50:587
Source: global traffic	TCP traffic: 192.168.2.7:59177 -> 103.21.220.58:587
Source: global traffic	TCP traffic: 192.168.2.7:59181 -> 52.101.194.19:587
Source: global traffic	TCP traffic: 192.168.2.7:59186 -> 203.134.11.58:587
Source: global traffic	TCP traffic: 192.168.2.7:59187 -> 115.248.50.250:587
Source: global traffic	TCP traffic: 192.168.2.7:59191 -> 13.32.99.68:587
Source: global traffic	TCP traffic: 192.168.2.7:59192 -> 185.38.180.4:587
Source: global traffic	TCP traffic: 192.168.2.7:59194 -> 81.169.145.133:587
Source: global traffic	TCP traffic: 192.168.2.7:59201 -> 200.144.248.41:587
Source: global traffic	TCP traffic: 192.168.2.7:59206 -> 76.223.67.189:587
Source: global traffic	TCP traffic: 192.168.2.7:59207 -> 104.21.7.175:587
Source: global traffic	TCP traffic: 192.168.2.7:59218 -> 188.128.143.70:587
Source: global traffic	TCP traffic: 192.168.2.7:59220 -> 200.58.112.170:587
Source: global traffic	TCP traffic: 192.168.2.7:59221 -> 52.62.236.135:587
Source: global traffic	TCP traffic: 192.168.2.7:59226 -> 194.254.129.242:587
Source: global traffic	TCP traffic: 192.168.2.7:59228 -> 103.129.255.237:587
Source: global traffic	TCP traffic: 192.168.2.7:59232 -> 216.40.42.5:587
Source: global traffic	TCP traffic: 192.168.2.7:58582 -> 94.169.2.19:587
Source: global traffic	TCP traffic: 192.168.2.7:58584 -> 85.17.10.131:587
Source: global traffic	TCP traffic: 192.168.2.7:58586 -> 50.116.86.118:587
Source: global traffic	TCP traffic: 192.168.2.7:58587 -> 202.46.29.32:587
Source: global traffic	TCP traffic: 192.168.2.7:58589 -> 46.255.231.17:587
Source: global traffic	TCP traffic: 192.168.2.7:58591 -> 191.252.83.189:587
Source: global traffic	TCP traffic: 192.168.2.7:58592 -> 154.0.173.200:587
Source: global traffic	TCP traffic: 192.168.2.7:58595 -> 220.247.203.10:587
Source: global traffic	TCP traffic: 192.168.2.7:58598 -> 169.57.141.94:587
Source: global traffic	TCP traffic: 192.168.2.7:58601 -> 103.14.122.124:587
Source: global traffic	TCP traffic: 192.168.2.7:58602 -> 44.231.68.41:587
Source: global traffic	TCP traffic: 192.168.2.7:58608 -> 193.141.101.33:587
Source: global traffic	TCP traffic: 192.168.2.7:58611 -> 51.161.115.217:587
Source: global traffic	TCP traffic: 192.168.2.7:58619 -> 141.94.139.121:587
Source: global traffic	TCP traffic: 192.168.2.7:58624 -> 209.17.116.165:587
Source: global traffic	TCP traffic: 192.168.2.7:58628 -> 108.157.188.59:587
Source: global traffic	TCP traffic: 192.168.2.7:58629 -> 85.199.154.53:587
Source: global traffic	TCP traffic: 192.168.2.7:58633 -> 85.233.160.147:587
Source: global traffic	TCP traffic: 192.168.2.7:58635 -> 46.30.213.160:587
Source: global traffic	TCP traffic: 192.168.2.7:58638 -> 103.242.49.200:587
Source: global traffic	TCP traffic: 192.168.2.7:58644 -> 45.157.40.214:587
Source: global traffic	TCP traffic: 192.168.2.7:58656 -> 81.169.196.194:587
Source: global traffic	TCP traffic: 192.168.2.7:58660 -> 66.96.160.129:587
Source: global traffic	TCP traffic: 192.168.2.7:58664 -> 185.187.81.214:587
Source: global traffic	TCP traffic: 192.168.2.7:58665 -> 52.206.191.232:587
Source: global traffic	TCP traffic: 192.168.2.7:58667 -> 52.101.68.3:587
Source: global traffic	TCP traffic: 192.168.2.7:58673 -> 149.255.63.186:587
Source: global traffic	TCP traffic: 192.168.2.7:58674 -> 46.30.213.41:587
Source: global traffic	TCP traffic: 192.168.2.7:58675 -> 62.1.212.34:587
Source: global traffic	TCP traffic: 192.168.2.7:58678 -> 92.204.223.147:587
Source: global traffic	TCP traffic: 192.168.2.7:58680 -> 202.144.225.36:587
Source: global traffic	TCP traffic: 192.168.2.7:58681 -> 108.179.241.240:587
Source: global traffic	TCP traffic: 192.168.2.7:58688 -> 41.78.29.16:587
Source: global traffic	TCP traffic: 192.168.2.7:58691 -> 185.230.63.186:587
Source: global traffic	TCP traffic: 192.168.2.7:58695 -> 188.128.255.251:587
Source: global traffic	TCP traffic: 192.168.2.7:58704 -> 85.92.73.67:587
Source: global traffic	TCP traffic: 192.168.2.7:58706 -> 142.250.186.115:587
Source: global traffic	TCP traffic: 192.168.2.7:58708 -> 209.67.129.100:587
Source: global traffic	TCP traffic: 192.168.2.7:58713 -> 109.234.164.12:587
Source: global traffic	TCP traffic: 192.168.2.7:58714 -> 34.206.39.153:587
Source: global traffic	TCP traffic: 192.168.2.7:58719 -> 35.212.102.91:587
Source: global traffic	TCP traffic: 192.168.2.7:58720 -> 119.59.120.28:587
Source: global traffic	TCP traffic: 192.168.2.7:58721 -> 209.222.82.252:587
Source: global traffic	TCP traffic: 192.168.2.7:58729 -> 185.15.192.56:587
Source: global traffic	TCP traffic: 192.168.2.7:58730 -> 107.180.9.193:587
Source: global traffic	TCP traffic: 192.168.2.7:58731 -> 199.85.66.2:587
Source: global traffic	TCP traffic: 192.168.2.7:58733 -> 191.6.216.63:587
Source: global traffic	TCP traffic: 192.168.2.7:58739 -> 213.205.32.10:587
Source: global traffic	TCP traffic: 192.168.2.7:58744 -> 74.208.236.128:587
Source: global traffic	TCP traffic: 192.168.2.7:58745 -> 181.88.192.179:587
Source: global traffic	TCP traffic: 192.168.2.7:58747 -> 72.52.192.241:587
Source: global traffic	TCP traffic: 192.168.2.7:58748 -> 188.40.28.200:587
Source: global traffic	TCP traffic: 192.168.2.7:58749 -> 52.218.101.196:587
Source: global traffic	TCP traffic: 192.168.2.7:58751 -> 186.202.149.252:587
Source: global traffic	TCP traffic: 192.168.2.7:58754 -> 105.224.1.26:587
Source: global traffic	TCP traffic: 192.168.2.7:58758 -> 194.191.24.193:587
Source: global traffic	TCP traffic: 192.168.2.7:58760 -> 64.190.63.222:587
Source: global traffic	TCP traffic: 192.168.2.7:58764 -> 52.101.68.10:587
Source: global traffic	TCP traffic: 192.168.2.7:58770 -> 94.237.125.89:587
Source: global traffic	TCP traffic: 192.168.2.7:58773 -> 177.154.191.212:587
Source: global traffic	TCP traffic: 192.168.2.7:58776 -> 68.178.145.36:587
Source: global traffic	TCP traffic: 192.168.2.7:58777 -> 142.250.185.243:587
Source: global traffic	TCP traffic: 192.168.2.7:58784 -> 186.202.4.42:587
Source: global traffic	TCP traffic: 192.168.2.7:58790 -> 200.58.122.206:587
Source: global traffic	TCP traffic: 192.168.2.7:58795 -> 195.110.124.188:587
Source: global traffic	TCP traffic: 192.168.2.7:58798 -> 80.75.42.226:587
Source: global traffic	TCP traffic: 192.168.2.7:58799 -> 87.98.160.167:587
Source: global traffic	TCP traffic: 192.168.2.7:58800 -> 52.101.41.28:587
Source: global traffic	TCP traffic: 192.168.2.7:58801 -> 210.130.202.4:587
Source: global traffic	TCP traffic: 192.168.2.7:58804 -> 88.198.198.106:587
Source: global traffic	TCP traffic: 192.168.2.7:58806 -> 143.204.98.119:587
Source: global traffic	TCP traffic: 192.168.2.7:58813 -> 52.101.10.10:587
Source: global traffic	TCP traffic: 192.168.2.7:58814 -> 200.99.40.39:587
Source: global traffic	TCP traffic: 192.168.2.7:58819 -> 41.78.29.110:587
Source: global traffic	TCP traffic: 192.168.2.7:58822 -> 62.149.188.200:587
Source: global traffic	TCP traffic: 192.168.2.7:58825 -> 46.30.213.20:587
Source: global traffic	TCP traffic: 192.168.2.7:58829 -> 54.206.86.115:587
Source: global traffic	TCP traffic: 192.168.2.7:58832 -> 62.149.201.94:587
Source: global traffic	TCP traffic: 192.168.2.7:58835 -> 107.180.113.155:587
Source: global traffic	TCP traffic: 192.168.2.7:57325 -> 3.19.116.195:587
Source: global traffic	TCP traffic: 192.168.2.7:57326 -> 78.100.10.10:587
Source: global traffic	TCP traffic: 192.168.2.7:57329 -> 129.213.13.252:587
Source: global traffic	TCP traffic: 192.168.2.7:57334 -> 213.27.225.102:587
Source: global traffic	TCP traffic: 192.168.2.7:57338 -> 46.30.215.32:587
Source: global traffic	TCP traffic: 192.168.2.7:57342 -> 129.80.43.150:587
Source: global traffic	TCP traffic: 192.168.2.7:57346 -> 87.247.241.226:587
Source: global traffic	TCP traffic: 192.168.2.7:57347 -> 52.101.194.3:587
Source: global traffic	TCP traffic: 192.168.2.7:57349 -> 81.14.243.107:587
Source: global traffic	TCP traffic: 192.168.2.7:57354 -> 142.132.181.81:587
Source: global traffic	TCP traffic: 192.168.2.7:57357 -> 188.94.248.67:587
Source: global traffic	TCP traffic: 192.168.2.7:57358 -> 194.25.134.76:587
Source: global traffic	TCP traffic: 192.168.2.7:57361 -> 61.86.4.17:587
Source: global traffic	TCP traffic: 192.168.2.7:57368 -> 200.196.192.40:587
Source: global traffic	TCP traffic: 192.168.2.7:57379 -> 61.0.0.70:587
Source: global traffic	TCP traffic: 192.168.2.7:57383 -> 87.79.71.75:587
Source: global traffic	TCP traffic: 192.168.2.7:61532 -> 13.75.34.175:587
Source: global traffic	TCP traffic: 192.168.2.7:61533 -> 217.160.0.153:587
Source: global traffic	TCP traffic: 192.168.2.7:61534 -> 129.153.232.136:587
Source: global traffic	TCP traffic: 192.168.2.7:61538 -> 108.163.224.26:587
Source: global traffic	TCP traffic: 192.168.2.7:61539 -> 194.63.248.52:587
Source: global traffic	TCP traffic: 192.168.2.7:61541 -> 208.91.197.27:587
Source: global traffic	TCP traffic: 192.168.2.7:61543 -> 212.101.122.34:587
Source: global traffic	TCP traffic: 192.168.2.7:61544 -> 87.118.110.18:587
Source: global traffic	TCP traffic: 192.168.2.7:61546 -> 189.90.130.25:587
Source: global traffic	TCP traffic: 192.168.2.7:61548 -> 212.91.113.134:587
Source: global traffic	TCP traffic: 192.168.2.7:61550 -> 167.235.144.121:587
Source: global traffic	TCP traffic: 192.168.2.7:61551 -> 101.43.39.47:587
Source: global traffic	TCP traffic: 192.168.2.7:61552 -> 24.56.168.168:587
Source: global traffic	TCP traffic: 192.168.2.7:61568 -> 92.205.227.106:587
Source: global traffic	TCP traffic: 192.168.2.7:61573 -> 142.250.150.26:587
Source: global traffic	TCP traffic: 192.168.2.7:56526 -> 193.203.239.20:587
Source: global traffic	TCP traffic: 192.168.2.7:56528 -> 107.161.183.247:587
Source: global traffic	TCP traffic: 192.168.2.7:56530 -> 135.148.130.75:587
Source: global traffic	TCP traffic: 192.168.2.7:56531 -> 186.251.148.53:587
Source: global traffic	TCP traffic: 192.168.2.7:63190 -> 69.89.22.205:587
Source: global traffic	TCP traffic: 192.168.2.7:57499 -> 193.74.71.25:587
Source: global traffic	TCP traffic: 192.168.2.7:57500 -> 92.205.7.84:587
Source: global traffic	TCP traffic: 192.168.2.7:57509 -> 18.133.136.187:587
Source: global traffic	TCP traffic: 192.168.2.7:57510 -> 185.127.128.220:587
Source: global traffic	TCP traffic: 192.168.2.7:57512 -> 74.220.199.6:587
Source: global traffic	TCP traffic: 192.168.2.7:57515 -> 47.254.214.182:587
Source: global traffic	TCP traffic: 192.168.2.7:57518 -> 77.111.240.28:587
Source: global traffic	TCP traffic: 192.168.2.7:57529 -> 82.223.217.20:587
Source: global traffic	TCP traffic: 192.168.2.7:57534 -> 217.72.192.67:587
Source: global traffic	TCP traffic: 192.168.2.7:57535 -> 65.99.205.90:587
Source: global traffic	TCP traffic: 192.168.2.7:57537 -> 52.223.4.149:587
Source: global traffic	TCP traffic: 192.168.2.7:57538 -> 186.209.113.136:587
Source: global traffic	TCP traffic: 192.168.2.7:57539 -> 139.134.5.153:587
Source: global traffic	TCP traffic: 192.168.2.7:57540 -> 3.18.7.81:587
Source: global traffic	TCP traffic: 192.168.2.7:57547 -> 193.201.172.98:587
Source: global traffic	TCP traffic: 192.168.2.7:57551 -> 67.212.189.210:587
Source: global traffic	TCP traffic: 192.168.2.7:57552 -> 3.33.130.190:587
Source: global traffic	TCP traffic: 192.168.2.7:57557 -> 65.0.142.153:587
Source: global traffic	TCP traffic: 192.168.2.7:57581 -> 205.178.189.131:587
Source: global traffic	TCP traffic: 192.168.2.7:57582 -> 137.184.176.124:587
Source: global traffic	TCP traffic: 192.168.2.7:57583 -> 185.151.30.148:587
Source: global traffic	TCP traffic: 192.168.2.7:57589 -> 46.4.157.163:587
Source: global traffic	TCP traffic: 192.168.2.7:57590 -> 178.250.12.17:587
Source: global traffic	TCP traffic: 192.168.2.7:57591 -> 177.69.12.129:587
Source: global traffic	TCP traffic: 192.168.2.7:57592 -> 142.93.226.250:587
Source: global traffic	TCP traffic: 192.168.2.7:57597 -> 193.158.234.50:587
Source: global traffic	TCP traffic: 192.168.2.7:57598 -> 162.214.80.103:587
Source: global traffic	TCP traffic: 192.168.2.7:57615 -> 64.190.27.25:587
Source: global traffic	TCP traffic: 192.168.2.7:57620 -> 38.111.198.185:587
Source: global traffic	TCP traffic: 192.168.2.7:57626 -> 203.232.140.7:587
Source: global traffic	TCP traffic: 192.168.2.7:57628 -> 81.88.58.196:587
Source: global traffic	TCP traffic: 192.168.2.7:57630 -> 52.86.6.113:587
Source: global traffic	TCP traffic: 192.168.2.7:57636 -> 45.56.79.23:587
Source: global traffic	TCP traffic: 192.168.2.7:57639 -> 129.187.254.228:587
Source: global traffic	TCP traffic: 192.168.2.7:57643 -> 195.250.53.162:587
Source: global traffic	TCP traffic: 192.168.2.7:57645 -> 64.29.151.235:587
Source: global traffic	TCP traffic: 192.168.2.7:57656 -> 37.188.98.122:587
Source: global traffic	TCP traffic: 192.168.2.7:57657 -> 103.35.84.51:587
Source: global traffic	TCP traffic: 192.168.2.7:57663 -> 46.30.215.212:587
Source: global traffic	TCP traffic: 192.168.2.7:57668 -> 66.147.240.157:587
Source: global traffic	TCP traffic: 192.168.2.7:57673 -> 213.121.43.136:587
Source: global traffic	TCP traffic: 192.168.2.7:51520 -> 191.6.216.83:587
Source: global traffic	TCP traffic: 192.168.2.7:51524 -> 216.58.206.51:587
Source: global traffic	TCP traffic: 192.168.2.7:51528 -> 83.149.159.148:587
Source: global traffic	TCP traffic: 192.168.2.7:51532 -> 104.22.65.144:587
Source: global traffic	TCP traffic: 192.168.2.7:51534 -> 14.139.220.36:587
Source: global traffic	TCP traffic: 192.168.2.7:51535 -> 54.211.87.0:587
Source: global traffic	TCP traffic: 192.168.2.7:51538 -> 101.100.210.40:587
Source: global traffic	TCP traffic: 192.168.2.7:51544 -> 96.27.204.82:587
Source: global traffic	TCP traffic: 192.168.2.7:50460 -> 162.210.196.166:587
Source: global traffic	TCP traffic: 192.168.2.7:50463 -> 139.162.234.186:587
Source: global traffic	TCP traffic: 192.168.2.7:50466 -> 212.35.60.35:587
Source: global traffic	TCP traffic: 192.168.2.7:50467 -> 51.79.33.181:587
Source: global traffic	TCP traffic: 192.168.2.7:50470 -> 210.130.202.96:587
Source: global traffic	TCP traffic: 192.168.2.7:50479 -> 213.132.197.18:587
Source: global traffic	TCP traffic: 192.168.2.7:50483 -> 193.122.187.19:587
Source: global traffic	TCP traffic: 192.168.2.7:50488 -> 191.252.14.194:587
Source: global traffic	TCP traffic: 192.168.2.7:50492 -> 154.12.239.6:587
Source: global traffic	TCP traffic: 192.168.2.7:50496 -> 92.204.80.3:587
Source: global traffic	TCP traffic: 192.168.2.7:50507 -> 217.160.239.66:587
Source: global traffic	TCP traffic: 192.168.2.7:50518 -> 107.20.241.149:587
Source: global traffic	TCP traffic: 192.168.2.7:50519 -> 195.238.20.30:587
Source: global traffic	TCP traffic: 192.168.2.7:50526 -> 3.165.113.76:587
Source: global traffic	TCP traffic: 192.168.2.7:50527 -> 175.135.253.3:587
Source: global traffic	TCP traffic: 192.168.2.7:50536 -> 52.96.126.39:587
Source: global traffic	TCP traffic: 192.168.2.7:50537 -> 175.126.123.219:587
Source: global traffic	TCP traffic: 192.168.2.7:60470 -> 52.101.149.1:587
Source: global traffic	TCP traffic: 192.168.2.7:60475 -> 212.227.15.41:587
Source: global traffic	TCP traffic: 192.168.2.7:60477 -> 52.101.170.2:587
Source: global traffic	TCP traffic: 192.168.2.7:60478 -> 208.91.199.224:587
Source: global traffic	TCP traffic: 192.168.2.7:60479 -> 103.129.255.239:587
Source: global traffic	TCP traffic: 192.168.2.7:60484 -> 81.169.145.97:587
Source: global traffic	TCP traffic: 192.168.2.7:60487 -> 91.136.8.131:587
Source: global traffic	TCP traffic: 192.168.2.7:60492 -> 68.178.252.117:587
Source: global traffic	TCP traffic: 192.168.2.7:60498 -> 31.186.86.109:587
Source: global traffic	TCP traffic: 192.168.2.7:60504 -> 130.63.236.137:587
Source: global traffic	TCP traffic: 192.168.2.7:60507 -> 85.215.219.177:587
Source: global traffic	TCP traffic: 192.168.2.7:60512 -> 54.211.177.144:587
Source: global traffic	TCP traffic: 192.168.2.7:60513 -> 134.65.228.98:587
Source: global traffic	TCP traffic: 192.168.2.7:60515 -> 62.149.128.201:587
Source: global traffic	TCP traffic: 192.168.2.7:60516 -> 59.167.44.32:587
Source: global traffic	TCP traffic: 192.168.2.7:60523 -> 169.239.218.31:587
Source: global traffic	TCP traffic: 192.168.2.7:60526 -> 50.116.87.233:587
Source: global traffic	TCP traffic: 192.168.2.7:60529 -> 157.90.94.241:587
Source: global traffic	TCP traffic: 192.168.2.7:60531 -> 194.191.24.14:587
Source: global traffic	TCP traffic: 192.168.2.7:60536 -> 62.149.128.202:587
Source: global traffic	TCP traffic: 192.168.2.7:60538 -> 52.101.192.1:587
Source: global traffic	TCP traffic: 192.168.2.7:60539 -> 205.220.163.62:587
Source: global traffic	TCP traffic: 192.168.2.7:60545 -> 185.171.186.30:587
Source: global traffic	TCP traffic: 192.168.2.7:60547 -> 164.90.203.106:587
Source: global traffic	TCP traffic: 192.168.2.7:60548 -> 81.19.232.212:587
Source: global traffic	TCP traffic: 192.168.2.7:60549 -> 217.117.111.52:587
Source: global traffic	TCP traffic: 192.168.2.7:60552 -> 212.227.15.167:587
Source: global traffic	TCP traffic: 192.168.2.7:60553 -> 5.175.14.40:587
Source: global traffic	TCP traffic: 192.168.2.7:60555 -> 129.159.110.135:587
Source: global traffic	TCP traffic: 192.168.2.7:60556 -> 216.58.212.179:587
Source: global traffic	TCP traffic: 192.168.2.7:60560 -> 216.59.16.36:587
Source: global traffic	TCP traffic: 192.168.2.7:60565 -> 149.18.51.54:587
Source: global traffic	TCP traffic: 192.168.2.7:60573 -> 193.254.190.101:587
Source: global traffic	TCP traffic: 192.168.2.7:60576 -> 195.170.168.76:587
Source: global traffic	TCP traffic: 192.168.2.7:60581 -> 211.29.132.152:587
Source: global traffic	TCP traffic: 192.168.2.7:60582 -> 187.85.164.168:587

Source: global traffic

TCP traffic: 192.168.2.7:50039 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 1867

Source: Joe Sandbox View	IP Address: 77.78.119.119 77.78.119.119
Source: Joe Sandbox View	IP Address: 207.148.248.143 207.148.248.143

Source: global traffic	TCP traffic: 192.168.2.7:50040 -> 76.223.84.192:587
Source: global traffic	TCP traffic: 192.168.2.7:50043 -> 185.71.61.14:587
Source: global traffic	TCP traffic: 192.168.2.7:50044 -> 195.32.69.33:587
Source: global traffic	TCP traffic: 192.168.2.7:50045 -> 168.0.132.203:587
Source: global traffic	TCP traffic: 192.168.2.7:50049 -> 103.145.30.229:587
Source: global traffic	TCP traffic: 192.168.2.7:50050 -> 66.226.70.66:587
Source: global traffic	TCP traffic: 192.168.2.7:50051 -> 187.6.211.40:587
Source: global traffic	TCP traffic: 192.168.2.7:50053 -> 204.11.56.48:587
Source: global traffic	TCP traffic: 192.168.2.7:50054 -> 84.2.43.67:587
Source: global traffic	TCP traffic: 192.168.2.7:50055 -> 117.50.20.113:587
Source: global traffic	TCP traffic: 192.168.2.7:50056 -> 52.223.34.187:587
Source: global traffic	TCP traffic: 192.168.2.7:50057 -> 23.81.68.43:587
Source: global traffic	TCP traffic: 192.168.2.7:50061 -> 194.19.134.85:587
Source: global traffic	TCP traffic: 192.168.2.7:50062 -> 84.116.6.3:587
Source: global traffic	TCP traffic: 192.168.2.7:50063 -> 52.96.111.82:587
Source: global traffic	TCP traffic: 192.168.2.7:64328 -> 188.114.96.3:587
Source: global traffic	TCP traffic: 192.168.2.7:64329 -> 120.50.131.112:587
Source: global traffic	TCP traffic: 192.168.2.7:64335 -> 142.93.237.125:587
Source: global traffic	TCP traffic: 192.168.2.7:64336 -> 142.250.153.26:587
Source: global traffic	TCP traffic: 192.168.2.7:64337 -> 194.19.134.66:587
Source: global traffic	TCP traffic: 192.168.2.7:64339 -> 160.119.252.132:587
Source: global traffic	TCP traffic: 192.168.2.7:64341 -> 108.177.15.108:587
Source: global traffic	TCP traffic: 192.168.2.7:64344 -> 173.194.76.27:587
Source: global traffic	TCP traffic: 192.168.2.7:64345 -> 81.236.63.162:587
Source: global traffic	TCP traffic: 192.168.2.7:64346 -> 77.75.77.165:587
Source: global traffic	TCP traffic: 192.168.2.7:64347 -> 94.102.6.76:587
Source: global traffic	TCP traffic: 192.168.2.7:64352 -> 65.20.63.172:587
Source: global traffic	TCP traffic: 192.168.2.7:64353 -> 195.130.132.10:587
Source: global traffic	TCP traffic: 192.168.2.7:64355 -> 104.153.0.33:587
Source: global traffic	TCP traffic: 192.168.2.7:59716 -> 74.208.236.198:587
Source: global traffic	TCP traffic: 192.168.2.7:59717 -> 208.91.199.225:587
Source: global traffic	TCP traffic: 192.168.2.7:59718 -> 191.252.112.195:587
Source: global traffic	TCP traffic: 192.168.2.7:59730 -> 193.81.82.81:587
Source: global traffic	TCP traffic: 192.168.2.7:59731 -> 213.209.1.145:587
Source: global traffic	TCP traffic: 192.168.2.7:59733 -> 210.59.228.45:587
Source: global traffic	TCP traffic: 192.168.2.7:59734 -> 216.239.32.21:587
Source: global traffic	TCP traffic: 192.168.2.7:59735 -> 5.135.40.30:587
Source: global traffic	TCP traffic: 192.168.2.7:59738 -> 104.18.2.81:587
Source: global traffic	TCP traffic: 192.168.2.7:59739 -> 77.75.78.173:587
Source: global traffic	TCP traffic: 192.168.2.7:59744 -> 188.114.97.3:587
Source: global traffic	TCP traffic: 192.168.2.7:59748 -> 163.44.185.233:587
Source: global traffic	TCP traffic: 192.168.2.7:59750 -> 108.167.188.20:587
Source: global traffic	TCP traffic: 192.168.2.7:59751 -> 107.155.89.162:587
Source: global traffic	TCP traffic: 192.168.2.7:59753 -> 199.59.243.225:587
Source: global traffic	TCP traffic: 192.168.2.7:59754 -> 62.149.128.166:587
Source: global traffic	TCP traffic: 192.168.2.7:59761 -> 52.101.73.24:587
Source: global traffic	TCP traffic: 192.168.2.7:59762 -> 109.234.161.75:587
Source: global traffic	TCP traffic: 192.168.2.7:59765 -> 208.80.204.162:587
Source: global traffic	TCP traffic: 192.168.2.7:59766 -> 97.74.81.106:587
Source: global traffic	TCP traffic: 192.168.2.7:59769 -> 217.76.151.9:587
Source: global traffic	TCP traffic: 192.168.2.7:59770 -> 87.242.0.7:587
Source: global traffic	TCP traffic: 192.168.2.7:59774 -> 142.171.118.47:587
Source: global traffic	TCP traffic: 192.168.2.7:59775 -> 34.160.157.95:587
Source: global traffic	TCP traffic: 192.168.2.7:59776 -> 2.207.150.234:587
Source: global traffic	TCP traffic: 192.168.2.7:59777 -> 79.170.40.4:587
Source: global traffic	TCP traffic: 192.168.2.7:59782 -> 199.34.228.151:587
Source: global traffic	TCP traffic: 192.168.2.7:59785 -> 80.158.67.40:587
Source: global traffic	TCP traffic: 192.168.2.7:59786 -> 3.64.163.50:587
Source: global traffic	TCP traffic: 192.168.2.7:59790 -> 142.251.9.27:587
Source: global traffic	TCP traffic: 192.168.2.7:59794 -> 40.85.218.2:587
Source: global traffic	TCP traffic: 192.168.2.7:59795 -> 109.168.108.106:587
Source: global traffic	TCP traffic: 192.168.2.7:59796 -> 62.24.202.42:587
Source: global traffic	TCP traffic: 192.168.2.7:59801 -> 81.169.145.90:587
Source: global traffic	TCP traffic: 192.168.2.7:59806 -> 154.53.51.218:587
Source: global traffic	TCP traffic: 192.168.2.7:59808 -> 175.135.254.129:587
Source: global traffic	TCP traffic: 192.168.2.7:59809 -> 114.179.184.189:587
Source: global traffic	TCP traffic: 192.168.2.7:59813 -> 204.141.43.44:587
Source: global traffic	TCP traffic: 192.168.2.7:59819 -> 87.238.28.12:587
Source: global traffic	TCP traffic: 192.168.2.7:59820 -> 208.91.197.132:587
Source: global traffic	TCP traffic: 192.168.2.7:59821 -> 50.116.87.133:587
Source: global traffic	TCP traffic: 192.168.2.7:59827 -> 167.172.23.243:587
Source: global traffic	TCP traffic: 192.168.2.7:59830 -> 89.39.182.172:587
Source: global traffic	TCP traffic: 192.168.2.7:59832 -> 107.180.3.104:587
Source: global traffic	TCP traffic: 192.168.2.7:59833 -> 52.101.73.22:587
Source: global traffic	TCP traffic: 192.168.2.7:59834 -> 75.102.22.71:587
Source: global traffic	TCP traffic: 192.168.2.7:59836 -> 89.40.173.57:587
Source: global traffic	TCP traffic: 192.168.2.7:59837 -> 54.39.244.15:587
Source: global traffic	TCP traffic: 192.168.2.7:59838 -> 85.10.159.54:587
Source: global traffic	TCP traffic: 192.168.2.7:59841 -> 203.114.168.20:587
Source: global traffic	TCP traffic: 192.168.2.7:59848 -> 103.235.106.10:587
Source: global traffic	TCP traffic: 192.168.2.7:59852 -> 144.76.112.115:587
Source: global traffic	TCP traffic: 192.168.2.7:59855 -> 103.224.182.246:587
Source: global traffic	TCP traffic: 192.168.2.7:59857 -> 213.33.87.55:587
Source: global traffic	TCP traffic: 192.168.2.7:59858 -> 64.136.44.44:587
Source: global traffic	TCP traffic: 192.168.2.7:59860 -> 109.61.0.142:587
Source: global traffic	TCP traffic: 192.168.2.7:59861 -> 104.131.176.42:587
Source: global traffic	TCP traffic: 192.168.2.7:59865 -> 168.119.150.59:587
Source: global traffic	TCP traffic: 192.168.2.7:59869 -> 133.237.129.136:587
Source: global traffic	TCP traffic: 192.168.2.7:59871 -> 149.13.75.27:587
Source: global traffic	TCP traffic: 192.168.2.7:59872 -> 93.115.28.104:587
Source: global traffic	TCP traffic: 192.168.2.7:59873 -> 222.124.219.187:587
Source: global traffic	TCP traffic: 192.168.2.7:59874 -> 194.158.122.55:587
Source: global traffic	TCP traffic: 192.168.2.7:59883 -> 35.214.249.211:587
Source: global traffic	TCP traffic: 192.168.2.7:59884 -> 116.202.134.231:587
Source: global traffic	TCP traffic: 192.168.2.7:59885 -> 27.124.113.33:587
Source: global traffic	TCP traffic: 192.168.2.7:59890 -> 185.111.97.36:587
Source: global traffic	TCP traffic: 192.168.2.7:59895 -> 193.181.34.163:587
Source: global traffic	TCP traffic: 192.168.2.7:59901 -> 129.232.148.154:587
Source: global traffic	TCP traffic: 192.168.2.7:59905 -> 91.195.240.13:587
Source: global traffic	TCP traffic: 192.168.2.7:59906 -> 49.213.103.199:587
Source: global traffic	TCP traffic: 192.168.2.7:59907 -> 41.193.157.227:587
Source: global traffic	TCP traffic: 192.168.2.7:59908 -> 64.91.253.60:587
Source: global traffic	TCP traffic: 192.168.2.7:59909 -> 52.45.199.183:587
Source: global traffic	TCP traffic: 192.168.2.7:59912 -> 94.177.209.28:587
Source: global traffic	TCP traffic: 192.168.2.7:59913 -> 108.167.151.68:587
Source: global traffic	TCP traffic: 192.168.2.7:59914 -> 202.138.49.32:587
Source: global traffic	TCP traffic: 192.168.2.7:59916 -> 79.143.126.202:587
Source: global traffic	TCP traffic: 192.168.2.7:59923 -> 195.15.132.130:587
Source: global traffic	TCP traffic: 192.168.2.7:59924 -> 193.120.143.144:587
Source: global traffic	TCP traffic: 192.168.2.7:59925 -> 40.99.150.66:587
Source: global traffic	TCP traffic: 192.168.2.7:59932 -> 46.255.231.19:587
Source: global traffic	TCP traffic: 192.168.2.7:59934 -> 199.224.64.207:587
Source: global traffic	TCP traffic: 192.168.2.7:59937 -> 47.43.18.10:587
Source: global traffic	TCP traffic: 192.168.2.7:59938 -> 74.125.200.27:587
Source: global traffic	TCP traffic: 192.168.2.7:59944 -> 23.227.38.65:587
Source: global traffic	TCP traffic: 192.168.2.7:59946 -> 211.29.132.105:587
Source: global traffic	TCP traffic: 192.168.2.7:59947 -> 208.215.218.15:587
Source: global traffic	TCP traffic: 192.168.2.7:59950 -> 94.100.132.8:587
Source: global traffic	TCP traffic: 192.168.2.7:59955 -> 200.147.36.31:587
Source: global traffic	TCP traffic: 192.168.2.7:59957 -> 187.86.131.25:587
Source: global traffic	TCP traffic: 192.168.2.7:59960 -> 163.173.128.32:587
Source: global traffic	TCP traffic: 192.168.2.7:59962 -> 104.19.239.228:587
Source: global traffic	TCP traffic: 192.168.2.7:59963 -> 180.55.189.114:587
Source: global traffic	TCP traffic: 192.168.2.7:59965 -> 213.186.33.4:587
Source: global traffic	TCP traffic: 192.168.2.7:59968 -> 190.8.176.9:587
Source: global traffic	TCP traffic: 192.168.2.7:59973 -> 91.189.182.67:587
Source: global traffic	TCP traffic: 192.168.2.7:59974 -> 77.78.119.119:587
Source: global traffic	TCP traffic: 192.168.2.7:59979 -> 52.63.237.70:587
Source: global traffic	TCP traffic: 192.168.2.7:59980 -> 142.250.150.27:587
Source: global traffic	TCP traffic: 192.168.2.7:59982 -> 150.214.40.4:587
Source: global traffic	TCP traffic: 192.168.2.7:59988 -> 108.177.15.109:587
Source: global traffic	TCP traffic: 192.168.2.7:59989 -> 189.124.16.18:587
Source: global traffic	TCP traffic: 192.168.2.7:59994 -> 209.202.254.90:587
Source: global traffic	TCP traffic: 192.168.2.7:59996 -> 147.182.189.184:587
Source: global traffic	TCP traffic: 192.168.2.7:59997 -> 67.219.246.213:587
Source: global traffic	TCP traffic: 192.168.2.7:59999 -> 52.101.68.39:587
Source: global traffic	TCP traffic: 192.168.2.7:60001 -> 3.140.13.188:587
Source: global traffic	TCP traffic: 192.168.2.7:60005 -> 195.110.124.132:587
Source: global traffic	TCP traffic: 192.168.2.7:60012 -> 45.174.184.3:587
Source: global traffic	TCP traffic: 192.168.2.7:60015 -> 209.133.207.180:587
Source: global traffic	TCP traffic: 192.168.2.7:60016 -> 141.138.137.88:587
Source: global traffic	TCP traffic: 192.168.2.7:60017 -> 194.153.145.104:587
Source: global traffic	TCP traffic: 192.168.2.7:60019 -> 46.16.236.27:587
Source: global traffic	TCP traffic: 192.168.2.7:60021 -> 194.181.93.175:587
Source: global traffic	TCP traffic: 192.168.2.7:60022 -> 104.17.69.73:587
Source: global traffic	TCP traffic: 192.168.2.7:60028 -> 52.71.57.184:587
Source: global traffic	TCP traffic: 192.168.2.7:60031 -> 74.81.94.123:587
Source: global traffic	TCP traffic: 192.168.2.7:60032 -> 104.21.63.26:587
Source: global traffic	TCP traffic: 192.168.2.7:60034 -> 136.143.183.44:587
Source: global traffic	TCP traffic: 192.168.2.7:60036 -> 80.91.55.62:587
Source: global traffic	TCP traffic: 192.168.2.7:60038 -> 108.177.15.27:587
Source: global traffic	TCP traffic: 192.168.2.7:60040 -> 104.102.49.62:587
Source: global traffic	TCP traffic: 192.168.2.7:60051 -> 46.30.213.119:587
Source: global traffic	TCP traffic: 192.168.2.7:60052 -> 130.185.238.40:587
Source: global traffic	TCP traffic: 192.168.2.7:60053 -> 176.62.173.44:587
Source: global traffic	TCP traffic: 192.168.2.7:60054 -> 103.55.39.211:587
Source: global traffic	TCP traffic: 192.168.2.7:60060 -> 103.14.97.106:587
Source: global traffic	TCP traffic: 192.168.2.7:60061 -> 45.11.76.26:587
Source: global traffic	TCP traffic: 192.168.2.7:60062 -> 193.70.18.144:587
Source: global traffic	TCP traffic: 192.168.2.7:60065 -> 195.121.65.26:587
Source: global traffic	TCP traffic: 192.168.2.7:60068 -> 69.49.115.40:587
Source: global traffic	TCP traffic: 192.168.2.7:60073 -> 193.54.32.8:587
Source: global traffic	TCP traffic: 192.168.2.7:60076 -> 80.48.169.1:587
Source: global traffic	TCP traffic: 192.168.2.7:60078 -> 217.160.0.220:587
Source: global traffic	TCP traffic: 192.168.2.7:60079 -> 59.157.128.15:587
Source: global traffic	TCP traffic: 192.168.2.7:60085 -> 14.45.79.13:587
Source: global traffic	TCP traffic: 192.168.2.7:60087 -> 58.26.8.206:587
Source: global traffic	TCP traffic: 192.168.2.7:60093 -> 116.202.21.121:587
Source: global traffic	TCP traffic: 192.168.2.7:60097 -> 185.135.241.111:587
Source: global traffic	TCP traffic: 192.168.2.7:60098 -> 3.125.131.179:587
Source: global traffic	TCP traffic: 192.168.2.7:60099 -> 79.174.131.240:587
Source: global traffic	TCP traffic: 192.168.2.7:60101 -> 79.172.249.130:587
Source: global traffic	TCP traffic: 192.168.2.7:60105 -> 3.225.35.191:587
Source: global traffic	TCP traffic: 192.168.2.7:60106 -> 200.40.52.164:587
Source: global traffic	TCP traffic: 192.168.2.7:60107 -> 44.230.23.127:587
Source: global traffic	TCP traffic: 192.168.2.7:60108 -> 177.11.53.234:587
Source: global traffic	TCP traffic: 192.168.2.7:60110 -> 119.18.54.146:587
Source: global traffic	TCP traffic: 192.168.2.7:60116 -> 45.60.247.143:587
Source: global traffic	TCP traffic: 192.168.2.7:60117 -> 173.208.41.154:587
Source: global traffic	TCP traffic: 192.168.2.7:60120 -> 81.2.195.204:587
Source: global traffic	TCP traffic: 192.168.2.7:60121 -> 203.0.178.91:587
Source: global traffic	TCP traffic: 192.168.2.7:60122 -> 177.70.110.120:587
Source: global traffic	TCP traffic: 192.168.2.7:60124 -> 52.148.72.153:587
Source: global traffic	TCP traffic: 192.168.2.7:60125 -> 64.98.38.132:587
Source: global traffic	TCP traffic: 192.168.2.7:60129 -> 5.161.98.212:587
Source: global traffic	TCP traffic: 192.168.2.7:60130 -> 86.105.9.181:587
Source: global traffic	TCP traffic: 192.168.2.7:60131 -> 196.22.132.13:587
Source: global traffic	TCP traffic: 192.168.2.7:60132 -> 41.74.197.201:587
Source: global traffic	TCP traffic: 192.168.2.7:60133 -> 217.76.146.62:587
Source: global traffic	TCP traffic: 192.168.2.7:59722 -> 91.136.8.184:587
Source: global traffic	TCP traffic: 192.168.2.7:59730 -> 91.184.0.200:587
Source: global traffic	TCP traffic: 192.168.2.7:59747 -> 207.174.2.43:587
Source: global traffic	TCP traffic: 192.168.2.7:59752 -> 89.31.75.11:587
Source: global traffic	TCP traffic: 192.168.2.7:59763 -> 115.70.199.33:587
Source: global traffic	TCP traffic: 192.168.2.7:59767 -> 217.74.65.52:587
Source: global traffic	TCP traffic: 192.168.2.7:59773 -> 186.202.135.240:587
Source: global traffic	TCP traffic: 192.168.2.7:59784 -> 52.210.80.236:587
Source: global traffic	TCP traffic: 192.168.2.7:59787 -> 187.108.207.40:587
Source: global traffic	TCP traffic: 192.168.2.7:59791 -> 1.1.1.1:587
Source: global traffic	TCP traffic: 192.168.2.7:59794 -> 193.17.184.242:587
Source: global traffic	TCP traffic: 192.168.2.7:59798 -> 61.122.216.220:587
Source: global traffic	TCP traffic: 192.168.2.7:59800 -> 15.197.192.55:587
Source: global traffic	TCP traffic: 192.168.2.7:59808 -> 104.47.22.202:587
Source: global traffic	TCP traffic: 192.168.2.7:59809 -> 213.227.131.210:587
Source: global traffic	TCP traffic: 192.168.2.7:59810 -> 106.187.245.193:587
Source: global traffic	TCP traffic: 192.168.2.7:59816 -> 203.210.102.92:587
Source: global traffic	TCP traffic: 192.168.2.7:59817 -> 209.222.82.255:587
Source: global traffic	TCP traffic: 192.168.2.7:59819 -> 75.2.24.159:587
Source: global traffic	TCP traffic: 192.168.2.7:59820 -> 94.152.13.93:587
Source: global traffic	TCP traffic: 192.168.2.7:59822 -> 195.238.22.30:587
Source: global traffic	TCP traffic: 192.168.2.7:59823 -> 217.65.97.72:587
Source: global traffic	TCP traffic: 192.168.2.7:61869 -> 89.31.143.90:587
Source: global traffic	TCP traffic: 192.168.2.7:61870 -> 216.40.34.41:587
Source: global traffic	TCP traffic: 192.168.2.7:61873 -> 209.67.129.55:587
Source: global traffic	TCP traffic: 192.168.2.7:61875 -> 91.220.42.241:587
Source: global traffic	TCP traffic: 192.168.2.7:61876 -> 177.153.23.242:587
Source: global traffic	TCP traffic: 192.168.2.7:61881 -> 81.26.217.148:587
Source: global traffic	TCP traffic: 192.168.2.7:61885 -> 195.83.13.244:587
Source: global traffic	TCP traffic: 192.168.2.7:61887 -> 191.6.216.100:587
Source: global traffic	TCP traffic: 192.168.2.7:61895 -> 86.105.244.1:587
Source: global traffic	TCP traffic: 192.168.2.7:61896 -> 64.136.44.50:587
Source: global traffic	TCP traffic: 192.168.2.7:61899 -> 198.208.74.205:587
Source: global traffic	TCP traffic: 192.168.2.7:61900 -> 185.104.29.102:587
Source: global traffic	TCP traffic: 192.168.2.7:61904 -> 199.59.243.220:587
Source: global traffic	TCP traffic: 192.168.2.7:61905 -> 64.59.136.142:587
Source: global traffic	TCP traffic: 192.168.2.7:61908 -> 15.197.142.173:587
Source: global traffic	TCP traffic: 192.168.2.7:61912 -> 92.204.39.12:587
Source: global traffic	TCP traffic: 192.168.2.7:56382 -> 187.45.240.106:587
Source: global traffic	TCP traffic: 192.168.2.7:53005 -> 90.216.128.5:587
Source: global traffic	TCP traffic: 192.168.2.7:53007 -> 188.40.120.147:587
Source: global traffic	TCP traffic: 192.168.2.7:53009 -> 167.114.161.198:587
Source: global traffic	TCP traffic: 192.168.2.7:53010 -> 52.101.8.36:587
Source: global traffic	TCP traffic: 192.168.2.7:53011 -> 150.136.132.149:587
Source: global traffic	TCP traffic: 192.168.2.7:53014 -> 213.209.1.147:587
Source: global traffic	TCP traffic: 192.168.2.7:53018 -> 185.138.56.194:587
Source: global traffic	TCP traffic: 192.168.2.7:53019 -> 194.185.246.171:587
Source: global traffic	TCP traffic: 192.168.2.7:53020 -> 130.223.0.23:587
Source: global traffic	TCP traffic: 192.168.2.7:53026 -> 205.178.189.129:587
Source: global traffic	TCP traffic: 192.168.2.7:53027 -> 200.234.204.130:587
Source: global traffic	TCP traffic: 192.168.2.7:53033 -> 178.162.221.165:587
Source: global traffic	TCP traffic: 192.168.2.7:53034 -> 129.153.232.207:587
Source: global traffic	TCP traffic: 192.168.2.7:53038 -> 193.122.131.100:587
Source: global traffic	TCP traffic: 192.168.2.7:53044 -> 185.151.28.68:587
Source: global traffic	TCP traffic: 192.168.2.7:53047 -> 13.55.195.118:587
Source: global traffic	TCP traffic: 192.168.2.7:53051 -> 92.204.80.0:587
Source: global traffic	TCP traffic: 192.168.2.7:53052 -> 64.79.170.162:587
Source: global traffic	TCP traffic: 192.168.2.7:53056 -> 15.197.240.20:587
Source: global traffic	TCP traffic: 192.168.2.7:53057 -> 200.58.112.242:587
Source: global traffic	TCP traffic: 192.168.2.7:53066 -> 35.237.181.40:587
Source: global traffic	TCP traffic: 192.168.2.7:53075 -> 191.252.4.18:587
Source: global traffic	TCP traffic: 192.168.2.7:53077 -> 67.223.118.47:587
Source: global traffic	TCP traffic: 192.168.2.7:53083 -> 46.105.45.21:587
Source: global traffic	TCP traffic: 192.168.2.7:53087 -> 183.181.84.7:587
Source: global traffic	TCP traffic: 192.168.2.7:53088 -> 95.211.75.25:587
Source: global traffic	TCP traffic: 192.168.2.7:53089 -> 191.252.112.194:587
Source: global traffic	TCP traffic: 192.168.2.7:53090 -> 142.250.185.179:587
Source: global traffic	TCP traffic: 192.168.2.7:54371 -> 104.156.56.14:587
Source: global traffic	TCP traffic: 192.168.2.7:54375 -> 200.58.110.107:587
Source: global traffic	TCP traffic: 192.168.2.7:54378 -> 154.219.188.75:587
Source: global traffic	TCP traffic: 192.168.2.7:54380 -> 202.3.77.184:587
Source: global traffic	TCP traffic: 192.168.2.7:54382 -> 130.193.14.152:587
Source: global traffic	TCP traffic: 192.168.2.7:54385 -> 35.195.63.198:587
Source: global traffic	TCP traffic: 192.168.2.7:54388 -> 212.6.122.175:587
Source: global traffic	TCP traffic: 192.168.2.7:54395 -> 35.214.159.114:587
Source: global traffic	TCP traffic: 192.168.2.7:54399 -> 186.227.204.171:587
Source: global traffic	TCP traffic: 192.168.2.7:54405 -> 40.99.150.50:587
Source: global traffic	TCP traffic: 192.168.2.7:59177 -> 103.21.220.58:587
Source: global traffic	TCP traffic: 192.168.2.7:59181 -> 52.101.194.19:587
Source: global traffic	TCP traffic: 192.168.2.7:59186 -> 203.134.11.58:587
Source: global traffic	TCP traffic: 192.168.2.7:59187 -> 115.248.50.250:587
Source: global traffic	TCP traffic: 192.168.2.7:59191 -> 13.32.99.68:587
Source: global traffic	TCP traffic: 192.168.2.7:59192 -> 185.38.180.4:587
Source: global traffic	TCP traffic: 192.168.2.7:59194 -> 81.169.145.133:587
Source: global traffic	TCP traffic: 192.168.2.7:59201 -> 200.144.248.41:587
Source: global traffic	TCP traffic: 192.168.2.7:59206 -> 76.223.67.189:587
Source: global traffic	TCP traffic: 192.168.2.7:59207 -> 104.21.7.175:587
Source: global traffic	TCP traffic: 192.168.2.7:59218 -> 188.128.143.70:587
Source: global traffic	TCP traffic: 192.168.2.7:59220 -> 200.58.112.170:587
Source: global traffic	TCP traffic: 192.168.2.7:59221 -> 52.62.236.135:587
Source: global traffic	TCP traffic: 192.168.2.7:59226 -> 194.254.129.242:587
Source: global traffic	TCP traffic: 192.168.2.7:59228 -> 103.129.255.237:587
Source: global traffic	TCP traffic: 192.168.2.7:59232 -> 216.40.42.5:587
Source: global traffic	TCP traffic: 192.168.2.7:58582 -> 94.169.2.19:587
Source: global traffic	TCP traffic: 192.168.2.7:58584 -> 85.17.10.131:587
Source: global traffic	TCP traffic: 192.168.2.7:58586 -> 50.116.86.118:587
Source: global traffic	TCP traffic: 192.168.2.7:58587 -> 202.46.29.32:587
Source: global traffic	TCP traffic: 192.168.2.7:58589 -> 46.255.231.17:587
Source: global traffic	TCP traffic: 192.168.2.7:58591 -> 191.252.83.189:587
Source: global traffic	TCP traffic: 192.168.2.7:58592 -> 154.0.173.200:587
Source: global traffic	TCP traffic: 192.168.2.7:58595 -> 220.247.203.10:587
Source: global traffic	TCP traffic: 192.168.2.7:58598 -> 169.57.141.94:587
Source: global traffic	TCP traffic: 192.168.2.7:58601 -> 103.14.122.124:587
Source: global traffic	TCP traffic: 192.168.2.7:58602 -> 44.231.68.41:587
Source: global traffic	TCP traffic: 192.168.2.7:58608 -> 193.141.101.33:587
Source: global traffic	TCP traffic: 192.168.2.7:58611 -> 51.161.115.217:587
Source: global traffic	TCP traffic: 192.168.2.7:58619 -> 141.94.139.121:587
Source: global traffic	TCP traffic: 192.168.2.7:58624 -> 209.17.116.165:587
Source: global traffic	TCP traffic: 192.168.2.7:58628 -> 108.157.188.59:587
Source: global traffic	TCP traffic: 192.168.2.7:58629 -> 85.199.154.53:587
Source: global traffic	TCP traffic: 192.168.2.7:58633 -> 85.233.160.147:587
Source: global traffic	TCP traffic: 192.168.2.7:58635 -> 46.30.213.160:587
Source: global traffic	TCP traffic: 192.168.2.7:58638 -> 103.242.49.200:587
Source: global traffic	TCP traffic: 192.168.2.7:58644 -> 45.157.40.214:587
Source: global traffic	TCP traffic: 192.168.2.7:58656 -> 81.169.196.194:587
Source: global traffic	TCP traffic: 192.168.2.7:58660 -> 66.96.160.129:587
Source: global traffic	TCP traffic: 192.168.2.7:58664 -> 185.187.81.214:587
Source: global traffic	TCP traffic: 192.168.2.7:58665 -> 52.206.191.232:587
Source: global traffic	TCP traffic: 192.168.2.7:58667 -> 52.101.68.3:587
Source: global traffic	TCP traffic: 192.168.2.7:58673 -> 149.255.63.186:587
Source: global traffic	TCP traffic: 192.168.2.7:58674 -> 46.30.213.41:587
Source: global traffic	TCP traffic: 192.168.2.7:58675 -> 62.1.212.34:587
Source: global traffic	TCP traffic: 192.168.2.7:58678 -> 92.204.223.147:587
Source: global traffic	TCP traffic: 192.168.2.7:58680 -> 202.144.225.36:587
Source: global traffic	TCP traffic: 192.168.2.7:58681 -> 108.179.241.240:587
Source: global traffic	TCP traffic: 192.168.2.7:58688 -> 41.78.29.16:587
Source: global traffic	TCP traffic: 192.168.2.7:58691 -> 185.230.63.186:587
Source: global traffic	TCP traffic: 192.168.2.7:58695 -> 188.128.255.251:587
Source: global traffic	TCP traffic: 192.168.2.7:58704 -> 85.92.73.67:587
Source: global traffic	TCP traffic: 192.168.2.7:58706 -> 142.250.186.115:587
Source: global traffic	TCP traffic: 192.168.2.7:58708 -> 209.67.129.100:587
Source: global traffic	TCP traffic: 192.168.2.7:58713 -> 109.234.164.12:587
Source: global traffic	TCP traffic: 192.168.2.7:58714 -> 34.206.39.153:587
Source: global traffic	TCP traffic: 192.168.2.7:58719 -> 35.212.102.91:587
Source: global traffic	TCP traffic: 192.168.2.7:58720 -> 119.59.120.28:587
Source: global traffic	TCP traffic: 192.168.2.7:58721 -> 209.222.82.252:587
Source: global traffic	TCP traffic: 192.168.2.7:58729 -> 185.15.192.56:587
Source: global traffic	TCP traffic: 192.168.2.7:58730 -> 107.180.9.193:587
Source: global traffic	TCP traffic: 192.168.2.7:58731 -> 199.85.66.2:587
Source: global traffic	TCP traffic: 192.168.2.7:58733 -> 191.6.216.63:587
Source: global traffic	TCP traffic: 192.168.2.7:58739 -> 213.205.32.10:587
Source: global traffic	TCP traffic: 192.168.2.7:58744 -> 74.208.236.128:587
Source: global traffic	TCP traffic: 192.168.2.7:58745 -> 181.88.192.179:587
Source: global traffic	TCP traffic: 192.168.2.7:58747 -> 72.52.192.241:587
Source: global traffic	TCP traffic: 192.168.2.7:58748 -> 188.40.28.200:587
Source: global traffic	TCP traffic: 192.168.2.7:58749 -> 52.218.101.196:587
Source: global traffic	TCP traffic: 192.168.2.7:58751 -> 186.202.149.252:587
Source: global traffic	TCP traffic: 192.168.2.7:58754 -> 105.224.1.26:587
Source: global traffic	TCP traffic: 192.168.2.7:58758 -> 194.191.24.193:587
Source: global traffic	TCP traffic: 192.168.2.7:58760 -> 64.190.63.222:587
Source: global traffic	TCP traffic: 192.168.2.7:58764 -> 52.101.68.10:587
Source: global traffic	TCP traffic: 192.168.2.7:58770 -> 94.237.125.89:587
Source: global traffic	TCP traffic: 192.168.2.7:58773 -> 177.154.191.212:587
Source: global traffic	TCP traffic: 192.168.2.7:58776 -> 68.178.145.36:587
Source: global traffic	TCP traffic: 192.168.2.7:58777 -> 142.250.185.243:587
Source: global traffic	TCP traffic: 192.168.2.7:58784 -> 186.202.4.42:587
Source: global traffic	TCP traffic: 192.168.2.7:58790 -> 200.58.122.206:587
Source: global traffic	TCP traffic: 192.168.2.7:58795 -> 195.110.124.188:587
Source: global traffic	TCP traffic: 192.168.2.7:58798 -> 80.75.42.226:587
Source: global traffic	TCP traffic: 192.168.2.7:58799 -> 87.98.160.167:587
Source: global traffic	TCP traffic: 192.168.2.7:58800 -> 52.101.41.28:587
Source: global traffic	TCP traffic: 192.168.2.7:58801 -> 210.130.202.4:587
Source: global traffic	TCP traffic: 192.168.2.7:58804 -> 88.198.198.106:587
Source: global traffic	TCP traffic: 192.168.2.7:58806 -> 143.204.98.119:587
Source: global traffic	TCP traffic: 192.168.2.7:58813 -> 52.101.10.10:587
Source: global traffic	TCP traffic: 192.168.2.7:58814 -> 200.99.40.39:587
Source: global traffic	TCP traffic: 192.168.2.7:58819 -> 41.78.29.110:587
Source: global traffic	TCP traffic: 192.168.2.7:58822 -> 62.149.188.200:587
Source: global traffic	TCP traffic: 192.168.2.7:58825 -> 46.30.213.20:587
Source: global traffic	TCP traffic: 192.168.2.7:58829 -> 54.206.86.115:587
Source: global traffic	TCP traffic: 192.168.2.7:58832 -> 62.149.201.94:587
Source: global traffic	TCP traffic: 192.168.2.7:58835 -> 107.180.113.155:587
Source: global traffic	TCP traffic: 192.168.2.7:57325 -> 3.19.116.195:587
Source: global traffic	TCP traffic: 192.168.2.7:57326 -> 78.100.10.10:587
Source: global traffic	TCP traffic: 192.168.2.7:57329 -> 129.213.13.252:587
Source: global traffic	TCP traffic: 192.168.2.7:57334 -> 213.27.225.102:587
Source: global traffic	TCP traffic: 192.168.2.7:57338 -> 46.30.215.32:587
Source: global traffic	TCP traffic: 192.168.2.7:57342 -> 129.80.43.150:587
Source: global traffic	TCP traffic: 192.168.2.7:57346 -> 87.247.241.226:587
Source: global traffic	TCP traffic: 192.168.2.7:57347 -> 52.101.194.3:587
Source: global traffic	TCP traffic: 192.168.2.7:57349 -> 81.14.243.107:587
Source: global traffic	TCP traffic: 192.168.2.7:57354 -> 142.132.181.81:587
Source: global traffic	TCP traffic: 192.168.2.7:57357 -> 188.94.248.67:587
Source: global traffic	TCP traffic: 192.168.2.7:57358 -> 194.25.134.76:587
Source: global traffic	TCP traffic: 192.168.2.7:57361 -> 61.86.4.17:587
Source: global traffic	TCP traffic: 192.168.2.7:57368 -> 200.196.192.40:587
Source: global traffic	TCP traffic: 192.168.2.7:57379 -> 61.0.0.70:587
Source: global traffic	TCP traffic: 192.168.2.7:57383 -> 87.79.71.75:587
Source: global traffic	TCP traffic: 192.168.2.7:61532 -> 13.75.34.175:587
Source: global traffic	TCP traffic: 192.168.2.7:61533 -> 217.160.0.153:587
Source: global traffic	TCP traffic: 192.168.2.7:61534 -> 129.153.232.136:587
Source: global traffic	TCP traffic: 192.168.2.7:61538 -> 108.163.224.26:587
Source: global traffic	TCP traffic: 192.168.2.7:61539 -> 194.63.248.52:587
Source: global traffic	TCP traffic: 192.168.2.7:61541 -> 208.91.197.27:587
Source: global traffic	TCP traffic: 192.168.2.7:61543 -> 212.101.122.34:587
Source: global traffic	TCP traffic: 192.168.2.7:61544 -> 87.118.110.18:587
Source: global traffic	TCP traffic: 192.168.2.7:61546 -> 189.90.130.25:587
Source: global traffic	TCP traffic: 192.168.2.7:61548 -> 212.91.113.134:587
Source: global traffic	TCP traffic: 192.168.2.7:61550 -> 167.235.144.121:587
Source: global traffic	TCP traffic: 192.168.2.7:61551 -> 101.43.39.47:587
Source: global traffic	TCP traffic: 192.168.2.7:61552 -> 24.56.168.168:587
Source: global traffic	TCP traffic: 192.168.2.7:61568 -> 92.205.227.106:587
Source: global traffic	TCP traffic: 192.168.2.7:61573 -> 142.250.150.26:587
Source: global traffic	TCP traffic: 192.168.2.7:56526 -> 193.203.239.20:587
Source: global traffic	TCP traffic: 192.168.2.7:56528 -> 107.161.183.247:587
Source: global traffic	TCP traffic: 192.168.2.7:56530 -> 135.148.130.75:587
Source: global traffic	TCP traffic: 192.168.2.7:56531 -> 186.251.148.53:587
Source: global traffic	TCP traffic: 192.168.2.7:63190 -> 69.89.22.205:587
Source: global traffic	TCP traffic: 192.168.2.7:57499 -> 193.74.71.25:587
Source: global traffic	TCP traffic: 192.168.2.7:57500 -> 92.205.7.84:587
Source: global traffic	TCP traffic: 192.168.2.7:57509 -> 18.133.136.187:587
Source: global traffic	TCP traffic: 192.168.2.7:57510 -> 185.127.128.220:587
Source: global traffic	TCP traffic: 192.168.2.7:57512 -> 74.220.199.6:587
Source: global traffic	TCP traffic: 192.168.2.7:57515 -> 47.254.214.182:587
Source: global traffic	TCP traffic: 192.168.2.7:57518 -> 77.111.240.28:587
Source: global traffic	TCP traffic: 192.168.2.7:57529 -> 82.223.217.20:587
Source: global traffic	TCP traffic: 192.168.2.7:57534 -> 217.72.192.67:587
Source: global traffic	TCP traffic: 192.168.2.7:57535 -> 65.99.205.90:587
Source: global traffic	TCP traffic: 192.168.2.7:57537 -> 52.223.4.149:587
Source: global traffic	TCP traffic: 192.168.2.7:57538 -> 186.209.113.136:587
Source: global traffic	TCP traffic: 192.168.2.7:57539 -> 139.134.5.153:587
Source: global traffic	TCP traffic: 192.168.2.7:57540 -> 3.18.7.81:587
Source: global traffic	TCP traffic: 192.168.2.7:57547 -> 193.201.172.98:587
Source: global traffic	TCP traffic: 192.168.2.7:57551 -> 67.212.189.210:587
Source: global traffic	TCP traffic: 192.168.2.7:57552 -> 3.33.130.190:587
Source: global traffic	TCP traffic: 192.168.2.7:57557 -> 65.0.142.153:587
Source: global traffic	TCP traffic: 192.168.2.7:57581 -> 205.178.189.131:587
Source: global traffic	TCP traffic: 192.168.2.7:57582 -> 137.184.176.124:587
Source: global traffic	TCP traffic: 192.168.2.7:57583 -> 185.151.30.148:587
Source: global traffic	TCP traffic: 192.168.2.7:57589 -> 46.4.157.163:587
Source: global traffic	TCP traffic: 192.168.2.7:57590 -> 178.250.12.17:587
Source: global traffic	TCP traffic: 192.168.2.7:57591 -> 177.69.12.129:587
Source: global traffic	TCP traffic: 192.168.2.7:57592 -> 142.93.226.250:587
Source: global traffic	TCP traffic: 192.168.2.7:57597 -> 193.158.234.50:587
Source: global traffic	TCP traffic: 192.168.2.7:57598 -> 162.214.80.103:587
Source: global traffic	TCP traffic: 192.168.2.7:57615 -> 64.190.27.25:587
Source: global traffic	TCP traffic: 192.168.2.7:57620 -> 38.111.198.185:587
Source: global traffic	TCP traffic: 192.168.2.7:57626 -> 203.232.140.7:587
Source: global traffic	TCP traffic: 192.168.2.7:57628 -> 81.88.58.196:587
Source: global traffic	TCP traffic: 192.168.2.7:57630 -> 52.86.6.113:587
Source: global traffic	TCP traffic: 192.168.2.7:57636 -> 45.56.79.23:587
Source: global traffic	TCP traffic: 192.168.2.7:57639 -> 129.187.254.228:587
Source: global traffic	TCP traffic: 192.168.2.7:57643 -> 195.250.53.162:587
Source: global traffic	TCP traffic: 192.168.2.7:57645 -> 64.29.151.235:587
Source: global traffic	TCP traffic: 192.168.2.7:57656 -> 37.188.98.122:587
Source: global traffic	TCP traffic: 192.168.2.7:57657 -> 103.35.84.51:587
Source: global traffic	TCP traffic: 192.168.2.7:57663 -> 46.30.215.212:587
Source: global traffic	TCP traffic: 192.168.2.7:57668 -> 66.147.240.157:587
Source: global traffic	TCP traffic: 192.168.2.7:57673 -> 213.121.43.136:587
Source: global traffic	TCP traffic: 192.168.2.7:51520 -> 191.6.216.83:587
Source: global traffic	TCP traffic: 192.168.2.7:51524 -> 216.58.206.51:587
Source: global traffic	TCP traffic: 192.168.2.7:51528 -> 83.149.159.148:587
Source: global traffic	TCP traffic: 192.168.2.7:51532 -> 104.22.65.144:587
Source: global traffic	TCP traffic: 192.168.2.7:51534 -> 14.139.220.36:587
Source: global traffic	TCP traffic: 192.168.2.7:51535 -> 54.211.87.0:587
Source: global traffic	TCP traffic: 192.168.2.7:51538 -> 101.100.210.40:587
Source: global traffic	TCP traffic: 192.168.2.7:51544 -> 96.27.204.82:587
Source: global traffic	TCP traffic: 192.168.2.7:50460 -> 162.210.196.166:587
Source: global traffic	TCP traffic: 192.168.2.7:50463 -> 139.162.234.186:587
Source: global traffic	TCP traffic: 192.168.2.7:50466 -> 212.35.60.35:587
Source: global traffic	TCP traffic: 192.168.2.7:50467 -> 51.79.33.181:587
Source: global traffic	TCP traffic: 192.168.2.7:50470 -> 210.130.202.96:587
Source: global traffic	TCP traffic: 192.168.2.7:50479 -> 213.132.197.18:587
Source: global traffic	TCP traffic: 192.168.2.7:50483 -> 193.122.187.19:587
Source: global traffic	TCP traffic: 192.168.2.7:50488 -> 191.252.14.194:587
Source: global traffic	TCP traffic: 192.168.2.7:50492 -> 154.12.239.6:587
Source: global traffic	TCP traffic: 192.168.2.7:50496 -> 92.204.80.3:587
Source: global traffic	TCP traffic: 192.168.2.7:50507 -> 217.160.239.66:587
Source: global traffic	TCP traffic: 192.168.2.7:50518 -> 107.20.241.149:587
Source: global traffic	TCP traffic: 192.168.2.7:50519 -> 195.238.20.30:587
Source: global traffic	TCP traffic: 192.168.2.7:50526 -> 3.165.113.76:587
Source: global traffic	TCP traffic: 192.168.2.7:50527 -> 175.135.253.3:587
Source: global traffic	TCP traffic: 192.168.2.7:50536 -> 52.96.126.39:587
Source: global traffic	TCP traffic: 192.168.2.7:50537 -> 175.126.123.219:587
Source: global traffic	TCP traffic: 192.168.2.7:60470 -> 52.101.149.1:587
Source: global traffic	TCP traffic: 192.168.2.7:60475 -> 212.227.15.41:587
Source: global traffic	TCP traffic: 192.168.2.7:60477 -> 52.101.170.2:587
Source: global traffic	TCP traffic: 192.168.2.7:60478 -> 208.91.199.224:587
Source: global traffic	TCP traffic: 192.168.2.7:60479 -> 103.129.255.239:587
Source: global traffic	TCP traffic: 192.168.2.7:60484 -> 81.169.145.97:587
Source: global traffic	TCP traffic: 192.168.2.7:60487 -> 91.136.8.131:587
Source: global traffic	TCP traffic: 192.168.2.7:60492 -> 68.178.252.117:587
Source: global traffic	TCP traffic: 192.168.2.7:60498 -> 31.186.86.109:587
Source: global traffic	TCP traffic: 192.168.2.7:60504 -> 130.63.236.137:587
Source: global traffic	TCP traffic: 192.168.2.7:60507 -> 85.215.219.177:587
Source: global traffic	TCP traffic: 192.168.2.7:60512 -> 54.211.177.144:587
Source: global traffic	TCP traffic: 192.168.2.7:60513 -> 134.65.228.98:587
Source: global traffic	TCP traffic: 192.168.2.7:60515 -> 62.149.128.201:587
Source: global traffic	TCP traffic: 192.168.2.7:60516 -> 59.167.44.32:587
Source: global traffic	TCP traffic: 192.168.2.7:60523 -> 169.239.218.31:587
Source: global traffic	TCP traffic: 192.168.2.7:60526 -> 50.116.87.233:587
Source: global traffic	TCP traffic: 192.168.2.7:60529 -> 157.90.94.241:587
Source: global traffic	TCP traffic: 192.168.2.7:60531 -> 194.191.24.14:587
Source: global traffic	TCP traffic: 192.168.2.7:60536 -> 62.149.128.202:587
Source: global traffic	TCP traffic: 192.168.2.7:60538 -> 52.101.192.1:587
Source: global traffic	TCP traffic: 192.168.2.7:60539 -> 205.220.163.62:587
Source: global traffic	TCP traffic: 192.168.2.7:60545 -> 185.171.186.30:587
Source: global traffic	TCP traffic: 192.168.2.7:60547 -> 164.90.203.106:587
Source: global traffic	TCP traffic: 192.168.2.7:60548 -> 81.19.232.212:587
Source: global traffic	TCP traffic: 192.168.2.7:60549 -> 217.117.111.52:587
Source: global traffic	TCP traffic: 192.168.2.7:60552 -> 212.227.15.167:587
Source: global traffic	TCP traffic: 192.168.2.7:60553 -> 5.175.14.40:587
Source: global traffic	TCP traffic: 192.168.2.7:60555 -> 129.159.110.135:587
Source: global traffic	TCP traffic: 192.168.2.7:60556 -> 216.58.212.179:587
Source: global traffic	TCP traffic: 192.168.2.7:60560 -> 216.59.16.36:587
Source: global traffic	TCP traffic: 192.168.2.7:60565 -> 149.18.51.54:587
Source: global traffic	TCP traffic: 192.168.2.7:60573 -> 193.254.190.101:587
Source: global traffic	TCP traffic: 192.168.2.7:60576 -> 195.170.168.76:587
Source: global traffic	TCP traffic: 192.168.2.7:60581 -> 211.29.132.152:587
Source: global traffic	TCP traffic: 192.168.2.7:60582 -> 187.85.164.168:587
Source: global traffic	TCP traffic: 192.168.2.7:60583 -> 157.90.155.99:587

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Code function: 5_2_004030A8 select,recv,

5_2_004030A8

Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: clwtumberaero.cyou
Source: global traffic	DNS traffic detected: DNS query: mail.edu.uni-klu.ac.at
Source: global traffic	DNS traffic detected: DNS query: yaho.de
Source: global traffic	DNS traffic detected: DNS query: secure.omibyarnetwork.in
Source: global traffic	DNS traffic detected: DNS query: smtp.ig.com.br
Source: global traffic	DNS traffic detected: DNS query: mail.fwcd.org
Source: global traffic	DNS traffic detected: DNS query: mail.stmmediastore.com
Source: global traffic	DNS traffic detected: DNS query: thru.my
Source: global traffic	DNS traffic detected: DNS query: nieuwegein.nl
Source: global traffic	DNS traffic detected: DNS query: secure.roncoroni.com.ar
Source: global traffic	DNS traffic detected: DNS query: relay.micso.it
Source: global traffic	DNS traffic detected: DNS query: securesmtp.pasteur.gr
Source: global traffic	DNS traffic detected: DNS query: secure.yatesfamily.me.uk
Source: global traffic	DNS traffic detected: DNS query: out.ouellette.homeip.net
Source: global traffic	DNS traffic detected: DNS query: smtp.superig.com.br
Source: global traffic	DNS traffic detected: DNS query: out.ham.org.tw
Source: global traffic	DNS traffic detected: DNS query: docomo.ne.jp
Source: global traffic	DNS traffic detected: DNS query: mail.superkingsmall.com.ng
Source: global traffic	DNS traffic detected: DNS query: secure.tinkerbox.com.sg
Source: global traffic	DNS traffic detected: DNS query: smtp.ulmipu.de
Source: global traffic	DNS traffic detected: DNS query: out.sd151.k12.id.us
Source: global traffic	DNS traffic detected: DNS query: securesmtp.firehousejerky.com
Source: global traffic	DNS traffic detected: DNS query: mail.riviera-productions.com
Source: global traffic	DNS traffic detected: DNS query: out.laregionalsa.com.ar
Source: global traffic	DNS traffic detected: DNS query: oi.com.br
Source: global traffic	DNS traffic detected: DNS query: smtp.goliathacademy.org
Source: global traffic	DNS traffic detected: DNS query: mxs1.iconpln.net.id
Source: global traffic	DNS traffic detected: DNS query: smtp.lapermittocarry.com
Source: global traffic	DNS traffic detected: DNS query: mail.campingcasadicaccia.de
Source: global traffic	DNS traffic detected: DNS query: telefonica.net
Source: global traffic	DNS traffic detected: DNS query: mail.rfiusa.org
Source: global traffic	DNS traffic detected: DNS query: eyou.com
Source: global traffic	DNS traffic detected: DNS query: smtp.saintys.com
Source: global traffic	DNS traffic detected: DNS query: mail.hsd.k12.or.us
Source: global traffic	DNS traffic detected: DNS query: secure.retailwarenhuis.nl
Source: global traffic	DNS traffic detected: DNS query: mail.uem.br
Source: global traffic	DNS traffic detected: DNS query: secure.jsw.pl
Source: global traffic	DNS traffic detected: DNS query: mail.deutschgames.tv
Source: global traffic	DNS traffic detected: DNS query: mail.birobar.com
Source: global traffic	DNS traffic detected: DNS query: smtp.mikromess.de
Source: global traffic	DNS traffic detected: DNS query: smtp.freemail.hu
Source: global traffic	DNS traffic detected: DNS query: nate.com
Source: global traffic	DNS traffic detected: DNS query: securesmtp.shahsolutions.in
Source: global traffic	DNS traffic detected: DNS query: tut.by
Source: global traffic	DNS traffic detected: DNS query: mail.hot.ee
Source: global traffic	DNS traffic detected: DNS query: smtp.ziggo.nl
Source: global traffic	DNS traffic detected: DNS query: smtp.mbst.uni-rostock.de
Source: global traffic	DNS traffic detected: DNS query: smtp.mexonexc.com.au
Source: global traffic	DNS traffic detected: DNS query: smtp.x-pert.in
Source: global traffic	DNS traffic detected: DNS query: temporary-mail.net
Source: global traffic	DNS traffic detected: DNS query: mail.desbrown.karoo.co.uk
Source: global traffic	DNS traffic detected: DNS query: smtp.carnegienet.net
Source: global traffic	DNS traffic detected: DNS query: out.francetv.fr
Source: global traffic	DNS traffic detected: DNS query: secure.reecon.eclipse.co.uk
Source: global traffic	DNS traffic detected: DNS query: smtp.kartmagic.com
Source: global traffic	DNS traffic detected: DNS query: mx3.agenturserver.de
Source: global traffic	DNS traffic detected: DNS query: secure.franmetal.com.br
Source: global traffic	DNS traffic detected: DNS query: secure.kaera.co.kr
Source: global traffic	DNS traffic detected: DNS query: mx.generic-isp.com
Source: global traffic	DNS traffic detected: DNS query: heilige-garde.de
Source: global traffic	DNS traffic detected: DNS query: mail.pevkolej.k12.tr
Source: global traffic	DNS traffic detected: DNS query: smtp.citromail.hu
Source: global traffic	DNS traffic detected: DNS query: aspmx2.googlemail.com
Source: global traffic	DNS traffic detected: DNS query: securesmtp.asoberway.org
Source: global traffic	DNS traffic detected: DNS query: mail.costaveras.com.br
Source: global traffic	DNS traffic detected: DNS query: mail.riber.net.br
Source: global traffic	DNS traffic detected: DNS query: securesmtp.infotech.com
Source: global traffic	DNS traffic detected: DNS query: aspmx.l.google.com
Source: global traffic	DNS traffic detected: DNS query: securesmtp.deltaeurofridge.be
Source: global traffic	DNS traffic detected: DNS query: jeffkimble.com
Source: global traffic	DNS traffic detected: DNS query: mail.optonline.net
Source: global traffic	DNS traffic detected: DNS query: smtp.post.cz
Source: global traffic	DNS traffic detected: DNS query: telia.com
Source: global traffic	DNS traffic detected: DNS query: secure.ctlcloud.pw
Source: global traffic	DNS traffic detected: DNS query: smtp.modaviva.com.br
Source: global traffic	DNS traffic detected: DNS query: mx2.hostinger.com
Source: global traffic	DNS traffic detected: DNS query: out.kingedwaracademy.co.uk
Source: global traffic	DNS traffic detected: DNS query: mail.aak-schubert.de
Source: global traffic	DNS traffic detected: DNS query: out.adoramidia.com.br
Source: global traffic	DNS traffic detected: DNS query: ultra-speed.url.tw
Source: global traffic	DNS traffic detected: DNS query: securesmtp.mbox317.swipnet.se
Source: global traffic	DNS traffic detected: DNS query: smtp.telenet.be
Source: global traffic	DNS traffic detected: DNS query: mail.timolang.de
Source: global traffic	DNS traffic detected: DNS query: securesmtp.luckyadmin.de
Source: global traffic	DNS traffic detected: DNS query: medlinx.co.id
Source: global traffic	DNS traffic detected: DNS query: securesmtp.svasti.in
Source: global traffic	DNS traffic detected: DNS query: smtp.millims.com
Source: global traffic	DNS traffic detected: DNS query: foodscience.co.jp
Source: global traffic	DNS traffic detected: DNS query: securesmtp.jeffrutherford.com.mx
Source: global traffic	DNS traffic detected: DNS query: secure.rutonworking.es
Source: global traffic	DNS traffic detected: DNS query: theworkgroupinc.com
Source: global traffic	DNS traffic detected: DNS query: secure.tahoo.com.au
Source: global traffic	DNS traffic detected: DNS query: wsspartans.org
Source: global traffic	DNS traffic detected: DNS query: secure.chest.or.kr
Source: global traffic	DNS traffic detected: DNS query: out.558dcfb5e7.com
Source: global traffic	DNS traffic detected: DNS query: securesmtp.g-e.fr
Source: global traffic	DNS traffic detected: DNS query: secure.leslilathrom.com
Source: global traffic	DNS traffic detected: DNS query: smtp.a3proyectos.com
Source: global traffic	DNS traffic detected: DNS query: xbarnet.fr

Spam, unwanted Advertisements and Ransom Demands

Send many emails (e-Mail Spam)

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 167

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF76405C2F0: CreateFileW,CloseHandle,wcscpy,wcscpy,wcscpy,wcscpy,CreateFileW,DeviceIoControl,CloseHandle,GetLastError,RemoveDirectoryW,DeleteFileW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,

0_2_00007FF76405C2F0

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

File created: C:\Windows\Tasks\ealfvjp.job

Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764080754	0_2_00007FF764080754
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76407B190	0_2_00007FF76407B190
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76406A4AC	0_2_00007FF76406A4AC
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764055E24	0_2_00007FF764055E24
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76407CE88	0_2_00007FF76407CE88
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764064928	0_2_00007FF764064928
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76405F930	0_2_00007FF76405F930
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76406B534	0_2_00007FF76406B534
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764092550	0_2_00007FF764092550
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF7640576C0	0_2_00007FF7640576C0
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76408C838	0_2_00007FF76408C838
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764054840	0_2_00007FF764054840
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76406F180	0_2_00007FF76406F180
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF7640721D0	0_2_00007FF7640721D0
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76406126C	0_2_00007FF76406126C
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764057288	0_2_00007FF764057288
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76405C2F0	0_2_00007FF76405C2F0
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76405A310	0_2_00007FF76405A310
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF7640753F0	0_2_00007FF7640753F0
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764073484	0_2_00007FF764073484
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764072D58	0_2_00007FF764072D58
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764080754	0_2_00007FF764080754
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764078DF4	0_2_00007FF764078DF4
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76406AF18	0_2_00007FF76406AF18
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764071F20	0_2_00007FF764071F20
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764092080	0_2_00007FF764092080
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76406C96C	0_2_00007FF76406C96C
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764073964	0_2_00007FF764073964
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF7640889A0	0_2_00007FF7640889A0
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764061A48	0_2_00007FF764061A48
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76408FA94	0_2_00007FF76408FA94
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764072AB0	0_2_00007FF764072AB0
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764051AA4	0_2_00007FF764051AA4
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764095AF8	0_2_00007FF764095AF8
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764065B60	0_2_00007FF764065B60
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76406BB90	0_2_00007FF76406BB90
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764074B98	0_2_00007FF764074B98
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764088C1C	0_2_00007FF764088C1C
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E995CE88	4_2_00007FF6E995CE88
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9935E24	4_2_00007FF6E9935E24
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E995B190	4_2_00007FF6E995B190
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E994A4AC	4_2_00007FF6E994A4AC
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E993F930	4_2_00007FF6E993F930
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9960754	4_2_00007FF6E9960754
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9975AF8	4_2_00007FF6E9975AF8
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9941A48	4_2_00007FF6E9941A48
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9931AA4	4_2_00007FF6E9931AA4
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9952AB0	4_2_00007FF6E9952AB0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E996FA94	4_2_00007FF6E996FA94
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9953964	4_2_00007FF6E9953964
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E994C96C	4_2_00007FF6E994C96C
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E99689A0	4_2_00007FF6E99689A0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9968C1C	4_2_00007FF6E9968C1C
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9945B60	4_2_00007FF6E9945B60
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9954B98	4_2_00007FF6E9954B98
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E994BB90	4_2_00007FF6E994BB90
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E994AF18	4_2_00007FF6E994AF18
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9951F20	4_2_00007FF6E9951F20
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9960754	4_2_00007FF6E9960754
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9958DF4	4_2_00007FF6E9958DF4
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9952D58	4_2_00007FF6E9952D58
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9972080	4_2_00007FF6E9972080
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E993C2F0	4_2_00007FF6E993C2F0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E993A310	4_2_00007FF6E993A310
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E994126C	4_2_00007FF6E994126C
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9937288	4_2_00007FF6E9937288
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E99521D0	4_2_00007FF6E99521D0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E994F180	4_2_00007FF6E994F180
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E994B534	4_2_00007FF6E994B534
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9953484	4_2_00007FF6E9953484
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E99553F0	4_2_00007FF6E99553F0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E99376C0	4_2_00007FF6E99376C0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9972550	4_2_00007FF6E9972550
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9944928	4_2_00007FF6E9944928
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E996C838	4_2_00007FF6E996C838
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9934840	4_2_00007FF6E9934840

Source: Joe Sandbox View	Dropped File: C:\ProgramData\ooxxi\ealfvjp.exe CC5BB638CB34CBD386A906B7708EB62E05E3FC991A20BD060E1D84F722D29FF1
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe CC5BB638CB34CBD386A906B7708EB62E05E3FC991A20BD060E1D84F722D29FF1

Source: classification engine

Classification label: mal100.spre.troj.evad.winEXE@10/5@2040/100

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF76405B6D8 GetLastError,FormatMessageW,LocalFree,

0_2_00007FF76405B6D8

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Code function: 5_2_00401556 CreateToolhelp32Snapshot,Process32First,Process32Next,

5_2_00401556

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Code function: 5_2_00401141 CoInitialize,CoCreateInstance,GetUserNameW,GetUserNameExW,GetLocalTime,SystemTimeToFileTime,FileTimeToSystemTime,CoUninitialize,

5_2_00401141

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF764078624 FindResourceW,SizeofResource,LoadResource,LockResource,GlobalAlloc,GlobalLock,GdipAlloc,GdipCreateHBITMAPFromBitmap,GlobalUnlock,GlobalFree,

0_2_00007FF764078624

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7540:120:WilError_03
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Mutant created: \Sessions\1\BaseNamedObjects\ealfvjp

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

File created: C:\Users\user~1\AppData\Local\Temp\RarSFX0

Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" "

Source: cbIcBAgY5W.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

File read: C:\Windows\win.ini

Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: cbIcBAgY5W.exe	ReversingLabs: Detection: 36%
Source: cbIcBAgY5W.exe	Virustotal: Detection: 31%

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

File read: C:\Users\user\Desktop\cbIcBAgY5W.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\cbIcBAgY5W.exe "C:\Users\user\Desktop\cbIcBAgY5W.exe"
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe work.exe -priverdD
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe "C:\Users\user~1\AppData\Local\Temp\RarSFX1\jergs.exe"
Source: unknown	Process created: C:\ProgramData\ooxxi\ealfvjp.exe C:\ProgramData\ooxxi\ealfvjp.exe start2
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" "	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe work.exe -priverdD	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe "C:\Users\user~1\AppData\Local\Temp\RarSFX1\jergs.exe"	Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: dxgidebug.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: dxgidebug.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Section loaded: rasadhlp.dll	Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: cbIcBAgY5W.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: cbIcBAgY5W.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: cbIcBAgY5W.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: cbIcBAgY5W.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: cbIcBAgY5W.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: cbIcBAgY5W.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: cbIcBAgY5W.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: cbIcBAgY5W.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE

Source: cbIcBAgY5W.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Binary string: D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb source: cbIcBAgY5W.exe, work.exe.0.dr

Source: cbIcBAgY5W.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: cbIcBAgY5W.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: cbIcBAgY5W.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: cbIcBAgY5W.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: cbIcBAgY5W.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

File created: C:\Users\user\AppData\Local\Temp\RarSFX0\__tmp_rar_sfx_access_check_5086921

Jump to behavior

Source: cbIcBAgY5W.exe	Static PE information: section name: .didat
Source: cbIcBAgY5W.exe	Static PE information: section name: _RDATA
Source: work.exe.0.dr	Static PE information: section name: .didat
Source: work.exe.0.dr	Static PE information: section name: _RDATA

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764095156 push rsi; retf	0_2_00007FF764095157
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764095166 push rsi; retf	0_2_00007FF764095167
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9975156 push rsi; retf	4_2_00007FF6E9975157
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9975166 push rsi; retf	4_2_00007FF6E9975167

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	File created: C:\ProgramData\ooxxi\ealfvjp.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	File created: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	File created: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

File created: C:\ProgramData\ooxxi\ealfvjp.exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

File created: C:\Windows\Tasks\ealfvjp.job

Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Evasive API call chain: GetPEB, DecisionNodes, Sleep

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

RDTSC instruction interceptor: First address: 403843 second address: 403843 instructions: 0x00000000 rdtsc 0x00000002 push ebp 0x00000003 mov ebp, esp 0x00000005 push ebx 0x00000006 push ecx 0x00000007 push edx 0x00000008 push edi 0x00000009 push esi 0x0000000a imul eax, eax, 001E7319h 0x00000010 add eax, 3CFB5543h 0x00000015 rcr eax, 10h 0x00000018 add eax, ecx 0x0000001a test edx, edx 0x0000001c je 00007FBD09447015h 0x0000001e imul eax, edx 0x00000021 xor edx, edx 0x00000023 mul dword ptr [ebp+08h] 0x00000026 mov eax, edx 0x00000028 pop esi 0x00000029 pop edi 0x0000002a pop edx 0x0000002b pop ecx 0x0000002c pop ebx 0x0000002d leave 0x0000002e retn 0004h 0x00000031 lea ebx, dword ptr [eax+04h] 0x00000034 push 00000018h 0x00000036 call 00007FBD094497DEh 0x0000003b rdtsc

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Code function: 5_2_00403843 rdtsc

5_2_00403843

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Check user administrative privileges: GetTokenInformation,DecisionNodes

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe TID: 7632	Thread sleep time: -60000s >= -30000s			Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe TID: 7664	Thread sleep time: -60000s >= -30000s			Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76407B190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	0_2_00007FF76407B190
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF7640640BC FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	0_2_00007FF7640640BC
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF76408FCA0 FindFirstFileExA,	0_2_00007FF76408FCA0
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E99440BC FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	4_2_00007FF6E99440BC
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E995B190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	4_2_00007FF6E995B190
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E996FCA0 FindFirstFileExA,	4_2_00007FF6E996FCA0

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF7640816A4 VirtualQuery,GetSystemInfo,

0_2_00007FF7640816A4

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Thread delayed: delay time: 60000			Jump to behavior
Source: C:\ProgramData\ooxxi\ealfvjp.exe	Thread delayed: delay time: 60000			Jump to behavior

Source: ealfvjp.exe, 00000006.00000002.2604193018.00000000006CE000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Code function: 5_2_00403843 rdtsc

5_2_00403843

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF7640876D8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00007FF7640876D8

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Code function: 5_2_00401000 mov eax, dword ptr fs:[00000030h]		5_2_00401000
Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	Code function: 5_2_004039F9 mov eax, dword ptr fs:[00000030h]		5_2_004039F9

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF764090D20 GetProcessHeap,

0_2_00007FF764090D20

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF7640876D8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00007FF7640876D8
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764083170 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00007FF764083170
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764083354 SetUnhandledExceptionFilter,	0_2_00007FF764083354
Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: 0_2_00007FF764082510 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00007FF764082510
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9963170 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	4_2_00007FF6E9963170
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9962510 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	4_2_00007FF6E9962510
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E9963354 SetUnhandledExceptionFilter,	4_2_00007FF6E9963354
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: 4_2_00007FF6E99676D8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	4_2_00007FF6E99676D8

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF76407B190 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,IsDlgButtonChecked,IsDlgButtonChecked,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetDlgItemTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,IsDlgButtonChecked,SendDlgItemMessageW,GetDlgItem,IsDlgButtonChecked,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,IsDlgButtonChecked,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,

0_2_00007FF76407B190

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" "	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe work.exe -priverdD	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe "C:\Users\user~1\AppData\Local\Temp\RarSFX1\jergs.exe"	Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF7640958E0 cpuid

0_2_00007FF7640958E0

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe	Code function: GetLocaleInfoW,GetNumberFormatW,		0_2_00007FF76407A2CC
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	Code function: GetLocaleInfoW,GetNumberFormatW,		4_2_00007FF6E995A2CC

Source: C:\ProgramData\ooxxi\ealfvjp.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF764080754 GetCommandLineW,OpenFileMappingW,MapViewOfFile,UnmapViewOfFile,MapViewOfFile,UnmapViewOfFile,CloseHandle,SetEnvironmentVariableW,GetLocalTime,swprintf,SetEnvironmentVariableW,GetModuleHandleW,LoadIconW,DialogBoxParamW,SleepEx,DeleteObject,DeleteObject,CloseHandle,OleUninitialize,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,

0_2_00007FF764080754

Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Code function: 5_2_00401141 CoInitialize,CoCreateInstance,GetUserNameW,GetUserNameExW,GetLocalTime,SystemTimeToFileTime,FileTimeToSystemTime,CoUninitialize,

5_2_00401141

Source: C:\Users\user\Desktop\cbIcBAgY5W.exe

Code function: 0_2_00007FF7640651A4 GetVersionExW,

0_2_00007FF7640651A4

Source: work.exe, 00000004.00000003.1358655589.000001E3D0E21000.00000004.00000020.00020000.00000000.sdmp, jergs.exe, jergs.exe, 00000005.00000000.1359646221.0000000000405000.00000008.00000001.01000000.0000000B.sdmp, jergs.exe, 00000005.00000002.1363787391.0000000000405000.00000004.00000001.01000000.0000000B.sdmp, ealfvjp.exe, 00000006.00000002.2603902520.0000000000405000.00000004.00000001.01000000.0000000C.sdmp, ealfvjp.exe, 00000006.00000000.1365954735.0000000000405000.00000008.00000001.01000000.0000000C.sdmp, ealfvjp.exe.5.dr, jergs.exe.4.dr

Binary or memory string: a2guard.exe

Stealing of Sensitive Information

Yara detected SystemBC

Source: Yara match	File source: 5.0.jergs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.ealfvjp.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.jergs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.ealfvjp.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000000.1359592703.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1358655589.000001E3D0E21000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.1365821763.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1363866088.00000000004EB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2603847749.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1363751487.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: work.exe PID: 7588, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: jergs.exe PID: 7628, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ealfvjp.exe PID: 7660, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\ooxxi\ealfvjp.exe, type: DROPPED

Remote Access Functionality

Yara detected SystemBC

Source: Yara match	File source: 5.0.jergs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.0.ealfvjp.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.jergs.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.ealfvjp.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000000.1359592703.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1358655589.000001E3D0E21000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000000.1365821763.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1363866088.00000000004EB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2603847749.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1363751487.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: work.exe PID: 7588, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: jergs.exe PID: 7628, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ealfvjp.exe PID: 7660, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\ooxxi\ealfvjp.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Exploitation for Privilege Escalation	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	22 Native API	1 Scripting	11 Process Injection	11 Virtualization/Sandbox Evasion	LSASS Memory	241 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 Scheduled Task/Job	11 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	1 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	1 Account Discovery	SSH	Keylogging	211 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	1 System Owner/User Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	2 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	135 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
cbIcBAgY5W.exe	37%	ReversingLabs	Win64.Trojan.MintZard
cbIcBAgY5W.exe	32%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label
C:\ProgramData\ooxxi\ealfvjp.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	100%	Joe Sandbox ML
C:\ProgramData\ooxxi\ealfvjp.exe	82%	ReversingLabs	Win32.Trojan.Coroxy
C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe	8%	ReversingLabs
C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	82%	ReversingLabs	Win32.Trojan.Coroxy

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
smtp.a1.net	0%	Virustotal	Browse
ibt.co.il	0%	Virustotal	Browse
walla.com	0%	Virustotal	Browse
alt2.aspmx.l.google.com	0%	Virustotal	Browse
aspmx3.googlemail.com	0%	Virustotal	Browse
sercomtel.com.br	0%	Virustotal	Browse
d1881mr5w2vitt.cloudfront.net	0%	Virustotal	Browse
ovelinea.net	0%	Virustotal	Browse
mx3.orcon.net.nz	0%	Virustotal	Browse
farwestconsulting.com.au	0%	Virustotal	Browse
mta2.spin.it	0%	Virustotal	Browse
mx0.dravanet.net	0%	Virustotal	Browse
jcom-home.mx.zaq.ne.jp	0%	Virustotal	Browse
hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com	0%	Virustotal	Browse
agent-server.com	0%	Virustotal	Browse
smtp.post.cz	0%	Virustotal	Browse
marinette.wi.us	0%	Virustotal	Browse
mx00.ionos.de	1%	Virustotal	Browse
mail.grupoenzo.com.br	0%	Virustotal	Browse
peak.org.av-mx.com	0%	Virustotal	Browse
bt.com	0%	Virustotal	Browse
romanus.it	0%	Virustotal	Browse
smtp.infinito.it	0%	Virustotal	Browse
hwonline.it	0%	Virustotal	Browse
elogica.com.br	0%	Virustotal	Browse
walla.co.il	0%	Virustotal	Browse
secure.columbusacademy.org	0%	Virustotal	Browse
procanenergy.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
185.43.220.45	0%	Avira URL Cloud	safe
clwtumberaero.cyou	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
smtp.a1.net	80.75.42.226	true	false	0%, Virustotal, Browse	unknown
smtp.sysria.com	217.76.151.9	true	false		unknown
mx1.ingep.com	200.58.122.206	true	false		unknown
ibt.co.il	192.116.146.33	true	false	0%, Virustotal, Browse	unknown
walla.com	143.204.98.119	true	false	0%, Virustotal, Browse	unknown
alt2.aspmx.l.google.com	142.251.9.27	true	false	0%, Virustotal, Browse	unknown
aspmx3.googlemail.com	142.251.9.27	true	false	0%, Virustotal, Browse	unknown
sercomtel.com.br	45.60.247.143	true	false	0%, Virustotal, Browse	unknown
mail.icocscuole.it	62.149.201.94	true	false		unknown
securesmtp.byggledarna.com	46.30.213.160	true	false		unknown
mx.comune.caltagirone.ct.it	62.149.128.166	true	false		unknown
d1881mr5w2vitt.cloudfront.net	18.245.46.38	true	false	0%, Virustotal, Browse	unknown
ovelinea.net	192.185.16.42	true	false	0%, Virustotal, Browse	unknown
mx3.orcon.net.nz	60.234.97.11	true	false	0%, Virustotal, Browse	unknown
farwestconsulting.com.au	185.184.154.33	true	false	0%, Virustotal, Browse	unknown
mta2.spin.it	79.143.126.202	true	false	0%, Virustotal, Browse	unknown
smtp.freenet.it	62.149.128.202	true	false		unknown
mx0.dravanet.net	109.61.0.142	true	false	0%, Virustotal, Browse	unknown
mail.pol-arise.com.au	27.124.113.33	true	false		unknown
agent-server.com	74.52.185.18	true	false	0%, Virustotal, Browse	unknown
daee-sp-gov-br.mail.protection.outlook.com	52.101.194.3	true	false		unknown
hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com	34.205.242.146	true	false	0%, Virustotal, Browse	unknown
jcom-home.mx.zaq.ne.jp	175.135.254.129	true	false	0%, Virustotal, Browse	unknown
smtp.infinito.it	194.185.246.171	true	false	0%, Virustotal, Browse	unknown
romanus.it	199.59.243.225	true	false	0%, Virustotal, Browse	unknown
peak.org.av-mx.com	129.153.232.207	true	false	0%, Virustotal, Browse	unknown
mail.thbservices.co.uk	46.30.215.32	true	false		unknown
mx00.ionos.de	212.227.15.41	true	false	1%, Virustotal, Browse	unknown
bt.com	213.121.43.136	true	false	0%, Virustotal, Browse	unknown
mail.grupoenzo.com.br	134.65.228.98	true	false	0%, Virustotal, Browse	unknown
secure.andreaskoenig.de	92.205.52.132	true	false		unknown
smtp.post.cz	77.75.77.165	true	false	0%, Virustotal, Browse	unknown
marinette.wi.us	207.38.73.176	true	false	0%, Virustotal, Browse	unknown
walla.co.il	3.165.113.76	true	false	0%, Virustotal, Browse	unknown
procanenergy.com	76.223.105.230	true	false	0%, Virustotal, Browse	unknown
secure.columbusacademy.org	98.103.127.188	true	false	0%, Virustotal, Browse	unknown
izihub.com	217.160.0.153	true	false		unknown
hwonline.it	46.28.4.90	true	false	0%, Virustotal, Browse	unknown
elogica.com.br	187.108.207.40	true	false	0%, Virustotal, Browse	unknown
freundeimnetz.de	81.169.145.90	true	false		unknown
securesmtp.infotech.com	127.0.0.1	true	false		unknown
dacoll.co.uk	205.196.214.70	true	false		unknown
secure.kysportsmarketing.com	204.11.56.48	true	false		unknown
poczta.pl	194.181.93.175	true	false		unknown
superkingsmall.com.ng	160.119.252.132	true	false		unknown
secure.tanox.com	185.53.178.54	true	false		unknown
sinclairengineering.com	107.180.113.155	true	false		unknown
mx.zoho.com	204.141.43.44	true	false		unknown
sydkystenssejlklub.dk	168.119.150.59	true	false		unknown
globalgadgetuk.com	91.136.8.131	true	false		unknown
nesul.com.br	107.161.183.247	true	false		unknown
fibertel.com.br	177.11.53.234	true	false		unknown
hwhz.qiye.ntes53.netease.com	103.129.255.237	true	false		unknown
mx00.ionos.es	212.227.15.41	true	false		unknown
geelongprintworks.com.au	74.81.94.123	true	false		unknown
ntc.org.br	69.49.115.40	true	false		unknown
shawmail.glb.shawcable.net	64.59.136.142	true	false		unknown
ns2.sulminet.com.br	131.72.12.24	true	false		unknown
kbstest.co.kr	52.79.32.252	true	false		unknown
astoriasolutions-com.mail.protection.outlook.com	52.101.132.28	true	false		unknown
out.co.uk	64.91.253.60	true	false		unknown
hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com	52.86.6.113	true	false		unknown
thebasewarehouse.com.au	23.227.38.65	true	false		unknown
socal-lighting.com	15.197.142.173	true	false		unknown
mx.giochi0.it	104.131.176.42	true	false		unknown
infoseek.jp	133.237.129.136	true	false		unknown
sil.com	127.0.0.1	true	false		unknown
securesmtp.masterahome.com	216.40.34.41	true	false		unknown
mail.marcaregistradaeng.com.br	192.185.214.44	true	false		unknown
o2bkids.com	192.124.249.56	true	false		unknown
secure.tourismusportal.de	116.202.118.107	true	false		unknown
mail.scarlet.be	193.74.71.25	true	false		unknown
out.greenvapes.co.uk	199.59.243.225	true	false		unknown
77980.bodis.com	199.59.243.225	true	false		unknown
humangest.ro	89.42.218.128	true	false		unknown
mail.rabbit.com.au	203.134.11.58	true	false		unknown
mail.hdr.com.au	199.59.243.225	true	false		unknown
student.isd2899.k12.mn.us	24.56.168.168	true	false		unknown
out.magnasys.net	154.219.188.75	true	false		unknown
lindella.se	193.181.34.163	true	false		unknown
meetinleeds.co.uk	141.193.213.10	true	false		unknown
smtp.sit.ac.nz	202.50.90.1	true	false		unknown
secure.kingslandpolymers.co.uk	139.162.234.186	true	false		unknown
ALT2.ASPMX.L.GOOGLE.COM	142.251.9.27	true	false		unknown
secure.dayone.fr	3.64.163.50	true	false		unknown
15zero15-com.mail.protection.outlook.com	52.101.73.24	true	false		unknown
xn--pokmonworld-dbb.com	15.197.142.173	true	false		unknown
securesmtp.cancerresearch.org	141.193.213.20	true	false		unknown
mx2.zoho.com	136.143.183.44	true	false		unknown
secure.mdfurnace.com	199.59.243.225	true	false		unknown
countryhillscrematorium.ca	107.180.3.104	true	false		unknown
securesmtp.decorxxi.com	91.195.240.13	true	false		unknown
securesmtp.ejpaxton.com	77.111.240.122	true	false		unknown
relay.micso.it	195.32.69.33	true	false		unknown
vlmx20.secure.ne.jp	211.9.223.212	true	false		unknown
limocars.pl	188.128.255.251	true	false		unknown
site3.smtp.mx.exch580.serverdata.net	64.78.40.209	true	false		unknown
depedmalaboncity.ph	97.74.81.106	true	false		unknown
interia.eu	217.74.65.52	true	false		unknown
ricco.com.br	108.179.241.240	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.43.220.45	true	Avira URL Cloud: safe	unknown
clwtumberaero.cyou	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
80.67.29.4	smtprelaypool.ispgateway.de	Germany	8972	GD-EMEA-DC-SXB1DE	false
77.78.119.119	tiscali.cz	Czech Republic	15685	CASABLANCA-ASInternetCollocationProviderCZ	false
216.58.206.51	unknown	United States	15169	GOOGLEUS	false
92.205.160.241	ownme.de	Germany	8972	GD-EMEA-DC-SXB1DE	false
129.80.43.150	email.gci.syn-alias.com	United States	792	ORACLE-ASNBLOCK-ASNUS	false
207.148.248.143	securesmtp.acotes.com	United States	29873	BIZLAND-SDUS	false
192.124.249.56	o2bkids.com	United States	30148	SUCURI-SECUS	false
52.79.32.252	kbstest.co.kr	United States	16509	AMAZON-02US	false
119.59.120.28	kbn.ac.th	Thailand	56067	METRABYTE-TH453LadplacoutJorakhaebuaTH	false
45.174.184.3	mail01.rgk4it.com	Brazil	268870	EXATATECNOLOGIADAINFORMACAOLTDA-EPPBR	false
209.222.82.255	d55365a.ess.barracudanetworks.com	United States	16509	AMAZON-02US	false
80.75.42.226	smtp.a1.net	Austria	16305	A1TelekomAT	false
209.222.82.252	d154910b.ess.barracudanetworks.COM	United States	16509	AMAZON-02US	false
103.235.106.10	primosoft.co.in	India	17439	NETMAGIC-APNetmagicDatacenterMumbaiIN	false
129.159.110.135	mygsc.com.av-mx.com	United States	14506	ORCL-ASHBURN3US	false
187.6.211.40	oi.com.br	Brazil	8167	BrasilTelecomSA-FilialDistritoFederalBR	false
185.184.154.33	farwestconsulting.com.au	United Kingdom	38719	DREAMSCAPE-AS-APDreamscapeNetworksLimitedAU	false
66.226.70.66	smtp.goliathacademy.org	United States	30447	INFB2-ASUS	false
91.189.182.67	1337.no	Norway	34989	SERVETHEWORLD-ASNO	false
87.238.28.12	cheapnet.it	Italy	213260	CWNET-ASIT	false
13.248.169.48	mail.rexsales.com	United States	16509	AMAZON-02US	false
185.135.241.111	smtp.mimoma.nl	Netherlands	208332	HOSTING2GONL	false
103.145.30.229	mxs1.iconpln.net.id	unknown	139771	ALPHA-AS-APAlphaNetworkBD	false
64.78.40.209	site3.smtp.mx.exch580.serverdata.net	United States	16406	AS-INTERMEDIAUS	false
108.157.188.59	multistateinsurance.com	United States	16509	AMAZON-02US	false
52.101.41.28	cdhu-sp-gov-br.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
186.202.135.240	dinamicaservicomg.com.br	Brazil	27715	LocawebServicosdeInternetSABR	false
81.88.58.196	smtp-fr.securemail.pro	Italy	39729	REGISTER-ASIT	false
217.160.239.66	smtp.designillustrated.co.uk	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false
5.175.14.40	ruffini.de	Germany	8972	GD-EMEA-DC-SXB1DE	false
194.254.129.242	vip-vs-messagerie.univ-lille.fr	France	2200	FR-RENATERReseauNationaldetelecommunicationspourlaTec	false
34.206.39.153	securesmtp.maryjane.com	United States	14618	AMAZON-AESUS	false
198.54.122.136	privateemail.com	United States	22612	NAMECHEAP-NETUS	false
84.2.43.67	smtp.freemail.hu	Hungary	15545	MT-DC-ASEUHungaryHU	false
85.199.154.53	mail.tigress.com	Germany	25560	RHTEC-ASrh-tecIPBackboneDE	false
200.147.36.31	smtp.uhserver.com	Brazil	7162	UniversoOnlineSABR	false
213.186.33.4	iconepc.fr	France	16276	OVHFR	false
54.206.86.115	education.nsw.gov.au	United States	16509	AMAZON-02US	false
103.14.122.124	avks.in	India	132322	GDRPL-INGoodDomainRegistryPrivateLimitedIN	false
96.27.204.82	smtp.hollowcompany.com	United States	12083	WOW-INTERNETUS	false
52.206.191.232	birdville.k12.tx.us	United States	14618	AMAZON-AESUS	false
84.23.254.58	mail.berlin.de	Germany	34171	INTERDOTNET-LIG-ASDE	false
207.38.73.176	marinette.wi.us	United States	36489	NETSOLUS-NETWORKSUS	false
193.203.239.20	mail.groupe-cachera.fr	France	16347	RMI-FITECHFR	false
192.185.211.72	ibestvip.com.br	United States	46606	UNIFIEDLAYER-AS-1US	false
64.68.198.23	mx-caprica.zoneedit.com	Canada	16686	EDNSCA	false
83.243.58.29	krilly.de	Germany	25504	CRONON-ASObermuensterstr9DE	false
213.121.43.136	bt.com	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
18.195.127.105	mx-02-eu-central-1.prod.hydra.sophos.com	United States	16509	AMAZON-02US	false
107.180.3.104	countryhillscrematorium.ca	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
54.74.99.47	mail3.scanscope.net	United States	16509	AMAZON-02US	false
203.185.247.178	mail.chimaeracapital.com	Australia	7545	TPG-INTERNET-APTPGTelecomLimitedAU	false
213.186.33.87	chr-systems.net	France	16276	OVHFR	false
76.12.146.141	securesmtp.selectivedata.com	United States	20021	LNH-INCUS	false
82.223.217.20	aerotec-argentina.com.ar	Spain	8560	ONEANDONE-ASBrauerstrasse48DE	false
177.69.12.129	mail.passaura.com.br	Brazil	16735	ALGARTELECOMSABR	false
217.76.146.62	smtp.tems.es	Spain	8560	ONEANDONE-ASBrauerstrasse48DE	false
217.65.97.72	out.postafiok.hu	Hungary	5483	MAGYAR-TELEKOM-MAIN-ASMagyarTelekomNyrtHU	false
105.224.1.26	telkomsa.net	South Africa	37457	Telkom-InternetZA	false
64.59.136.142	shawmail.glb.shawcable.net	Canada	6327	SHAWCA	false
101.43.39.47	ayou.info	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
195.35.43.153	solidsolucoes.com.br	Germany	8359	MTSRU	false
14.45.79.13	spam.kog.co.kr	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
79.174.131.240	vangeertruyen.be	Belgium	34762	COMBELL-ASBE	false
185.230.63.186	coninnovar.com.mx	Israel	58182	WIX_COMIL	false
95.216.24.158	zahora.eu	Germany	24940	HETZNER-ASDE	false
188.128.255.251	limocars.pl	Poland	12824	HOMEPL-ASPL	false
94.73.188.24	mx-out03.natrohost.com	Turkey	34619	CIZGITR	false
91.136.8.184	smtp.alice.de	United Kingdom	9115	INFB-AS9115GB	false
87.54.32.247	post.aarhushfogvuc.dk	Denmark	3292	TDCTDCASDK	false
173.208.41.154	http.bluehost.xion.oxcs.net	United States	396362	LEASEWEB-USA-NYC-11US	false
139.162.234.186	secure.kingslandpolymers.co.uk	Netherlands	63949	LINODE-APLinodeLLCUS	false
52.63.237.70	sep-kakadu02.au-east.atmailcloud.com	United States	16509	AMAZON-02US	false
52.71.57.184	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
81.26.217.148	es-pa.nl	Netherlands	25542	DENIT-ASAmsterdamNL	false
191.252.4.18	techimpex.com.br	Brazil	27715	LocawebServicosdeInternetSABR	false
3.33.130.190	myalappraiser.com	United States	8987	AMAZONEXPANSIONGB	false
204.141.43.44	mx.zoho.com	United States	2639	ZOHO-ASUS	false
54.39.244.15	wcdsb.ca	Canada	16276	OVHFR	false
85.17.10.131	hotmal.de	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
213.205.32.10	tiscalinet.it	Italy	8612	TISCALI-IT	false
91.184.0.200	securesmtp.wtenweerde.nl	Netherlands	197902	HOSTNETNL	false
104.18.0.207	smtp.pcgamesupply.com	United States	13335	CLOUDFLARENETUS	false
61.0.0.70	sancharnet.in	India	9829	BSNL-NIBNationalInternetBackboneIN	false
87.242.0.7	useroor.pr.hu	Hungary	35311	PR-TELECOM-ASHU	false
193.57.27.27	out.thalmuehle.de	unknown	208485	EKSENBILISIMTR	false
198.136.59.234	talismaconstrutora.com.br	United States	33182	DIMENOCUS	false
167.172.23.243	mx.adephia.net	United States	14061	DIGITALOCEAN-ASNUS	false
65.0.142.153	pispl.in	United States	16509	AMAZON-02US	false
160.119.252.132	superkingsmall.com.ng	South Africa	37153	xneeloZA	false
195.110.124.188	temix.it	Italy	39729	REGISTER-ASIT	false
104.21.41.110	freddy-mueller.de	United States	13335	CLOUDFLARENETUS	false
40.85.218.2	rogers.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
67.205.22.228	exactmedia.co.uk	United States	26347	DREAMHOST-ASUS	false
200.234.204.130	mx.jk.locaweb.com.br	Brazil	27715	LocawebServicosdeInternetSABR	false
141.193.213.20	securesmtp.cancerresearch.org	United States	396845	DV-PRIMARY-ASN1US	false
2.207.150.234	smtp.vodafonemail.de	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
84.116.6.3	smtp.ziggo.nl	Netherlands	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
193.158.234.50	mail.hplush.de	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
91.136.8.131	globalgadgetuk.com	United Kingdom	9115	INFB-AS9115GB	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1451641
Start date and time:	2024-06-04 12:41:26 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	cbIcBAgY5W.exe renamed because original name is a hash value
Original Sample Name:	902337bbf17ac4e015e03d12e79b60b8dd5a8362496da3291a39e9124c58d9ff.exe
Detection:	MAL
Classification:	mal100.spre.troj.evad.winEXE@10/5@2040/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 135 Number of non-executed functions: 110
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.101.57.9, 17.42.251.41, 2.16.241.12, 2.16.241.5
Excluded domains from analysis (whitelisted): vivointernetdiscada.edgesuite.net, ocsp.digicert.com, slscr.update.microsoft.com, st-smtp.mail.me.com.akadns.net, twc.trafficmanager.net, ctldl.windowsupdate.com, smtp.me.com.akadns.net, a630.dscb.akamai.net, smtp.mail.me.com.akadns.net, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
06:42:36	API Interceptor	1x Sleep call for process: cbIcBAgY5W.exe modified
06:42:36	API Interceptor	2x Sleep call for process: jergs.exe modified
06:42:37	API Interceptor	1x Sleep call for process: ealfvjp.exe modified
12:42:38	Task Scheduler	Run new task: ealfvjp path: C:\ProgramData\ooxxi\ealfvjp.exe s>start2

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.78.119.119	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse
	file.exe	Get hash	malicious	SystemBC	Browse
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
	file.exe	Get hash	malicious	SystemBC	Browse
	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse
	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse
129.80.43.150	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse
129.80.43.150	file.exe	Get hash	malicious	SystemBC	Browse
207.148.248.143	BWV4hz5GdR.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc, Xmrig	Browse	foni.harter.net/wp-admin/
	SDFormatter.exe	Get hash	malicious	Unknown	Browse	SuperCravings.com/RTosaZ.php?m=l410op94z7hr
	adPsxznuEl.exe	Get hash	malicious	Upatre	Browse	aatextiles.com/images/gallery/wav.enc
	https://go2.israelandafrica.com/f/a/y5H0bDO4woHaMQouJjYlOfq~~/OMbOowf~/aHR0cDovL0N1cmF0ZWJpby5VU0VSaEJNWUkubXNibG9nZ2VyLmNvbS5hdS9qYXNvbi53YWxzaEBjdXJhdGViaW8uY29t	Get hash	malicious	Unknown	Browse	c2.elitesoldiers.com/
	nUy5qk4TWJ.exe	Get hash	malicious	Pony	Browse	dreago.com/forum/viewtopic.php
	Quote List.doc	Get hash	malicious	FormBook	Browse	www.illminded.com/lt63/?6l1dvN-=bHyeCSaYJvF1787awWJqLZ4H5AA/aKQZYZmYtXciYpB8TT7YIgNm8DAGxDjKgsWnAEzpeA==&fN9tX=hzr8FhB0pVVX
	4XmyPiZxpU.exe	Get hash	malicious	FormBook	Browse	www.constructionconsultations.com/vovr/?j6Ap=xnQ54EGeMc81aVOiYnnbt1MkXstpyvr5b8OtMtAuKI8mmSXmRxSJ+TJ2JmcJ7u3YTzOA&aN6tXH=7ndLgRKPgjb8r
	Lv9eznkydx.exe	Get hash	malicious	Unknown	Browse	quickpass.net/index.php
	Yy788lmJnh.exe	Get hash	malicious	FormBook Neshta	Browse	www.cbspecialists.com/b6a4/?7nIpkb=evtpUE4jzfGhteANMcONCfRNSBT00PmI2Zc41FRrc9x9euTP2PfBDSRYSmOnW1nxz+//&-Zi=7nQl
	moni.exe	Get hash	malicious	FormBook	Browse	www.experienceddoctor.com/weni/?5jC8sf6P=wmBhqHEM/47OVk1IX90cSn679y86YK3+pX3e++Qcu2WP4RRX6syn4MrZ7nB+aiVir5y3&l0DTav=-Zu4ZRMhcze8HRn
192.124.249.56	c0l.vbs	Get hash	malicious	Unknown	Browse
	7FYlfr8BF3.dll	Get hash	malicious	Unknown	Browse
	rib.exe	Get hash	malicious	Sodinokibi	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sercomtel.com.br	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	45.60.247.143
smtp.a1.net	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	80.75.42.226
	file.exe	Get hash	malicious	SystemBC	Browse	80.75.42.226
	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	80.75.42.226
	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse	80.75.42.226
	file.msg.exe	Get hash	malicious	Unknown	Browse	195.3.96.71
d1881mr5w2vitt.cloudfront.net	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	18.245.46.12
	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse	3.163.189.110
	IKUiRXwsnT.exe	Get hash	malicious	Tofsee Xmrig	Browse	13.226.175.90
	e57FO2LVh8.exe	Get hash	malicious	Raccoon RedLine SmokeLoader Tofsee Xmrig	Browse	13.226.175.123
walla.com	file.exe	Get hash	malicious	SystemBC	Browse	143.204.98.5
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	18.238.243.30
	file.exe	Get hash	malicious	SystemBC	Browse	18.238.243.78
	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	13.32.87.77

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CASABLANCA-ASInternetCollocationProviderCZ	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	77.78.119.119
	file.exe	Get hash	malicious	SystemBC	Browse	77.78.119.119
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	77.78.119.119
	file.exe	Get hash	malicious	SystemBC	Browse	77.78.119.119
	vm6XYZzWOd.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	77.78.119.119
	INVOICE087667899.exe	Get hash	malicious	Unknown	Browse	109.123.254.43
	z8s945rPmZ.exe	Get hash	malicious	SystemBC	Browse	77.78.119.119
	RDFchOT4i0.exe	Get hash	malicious	Unknown	Browse	109.123.254.43
	http://tracking.elastic.iscarcup.com/tracking/click?d=XVOGkKKIFI1BUi5gqgZHAdRPhk99njZvP0qXh2IpArKp9RzCSjeoWkfJDrjbcvw75j380eQ4qSrYjhK4RegFgVWSX5L2beQO2AeFGF72kzLV5bUDHAc9_x1G5mw8AznhlHtuepCFbAQZbboWjeiG8YOae_yZBP5-luynay2YDr9Jmf0rVcJIVEgp8xRayU7B_A2	Get hash	malicious	Unknown	Browse	81.0.249.226
	tP8j8ZJdua.elf	Get hash	malicious	Mirai	Browse	81.0.244.234
ORACLE-ASNBLOCK-ASNUS	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	129.80.43.150
	file.exe	Get hash	malicious	SystemBC	Browse	129.80.43.150
	https://www.ghanaweb.com	Get hash	malicious	Unknown	Browse	141.147.81.223
	863Oc9fFgF.elf	Get hash	malicious	Mirai	Browse	139.185.244.161
	NI3TbjhKef.elf	Get hash	malicious	Mirai	Browse	141.147.36.250
	fkuWWu4wjg.elf	Get hash	malicious	Mirai	Browse	137.254.125.142
	bqHlnibJh9.elf	Get hash	malicious	Mirai	Browse	129.80.243.5
	240506-b7lv1sfmcw_pw_infected.zip	Get hash	malicious	Xmrig	Browse	129.148.18.22
	bot.arm.elf	Get hash	malicious	Mirai	Browse	129.155.248.144
	vylI38MZOn.elf	Get hash	malicious	Mirai	Browse	129.84.245.28
GD-EMEA-DC-SXB1DE	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	5.175.14.29
	DEBIT NOTE.exe	Get hash	malicious	FormBook	Browse	92.205.15.157
	Purchase Order_20240503.exe	Get hash	malicious	FormBook	Browse	92.205.15.157
	anebilledes.exe	Get hash	malicious	FormBook, GuLoader	Browse	92.205.8.26
	G3K3YBC97i.elf	Get hash	malicious	Mirai	Browse	62.138.132.196
	61#U2467.hta	Get hash	malicious	Unknown	Browse	92.205.182.151
	Purchase Order_20240528.exe	Get hash	malicious	FormBook	Browse	92.205.15.157
	Platosammine.exe	Get hash	malicious	FormBook, GuLoader	Browse	92.205.8.26
	http://ageofimmortalsgame.com/wth1u	Get hash	malicious	Phisher	Browse	92.205.17.86
	https://laurabingham.org/wp-content/plugins/wp-recipe-maker/downexcel.php	Get hash	malicious	Unknown	Browse	92.205.17.86
BIZLAND-SDUS	BASF Purchase Order.doc	Get hash	malicious	FormBook	Browse	66.96.161.166
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	207.148.248.143
	TT-Slip.bat.exe	Get hash	malicious	FormBook	Browse	66.96.162.149
	SecuriteInfo.com.Win32.PWSX-gen.24627.22980.exe	Get hash	malicious	FormBook	Browse	66.96.161.166
	http://www.winglee.ca	Get hash	malicious	Unknown	Browse	66.96.149.1
	product Inquiry and RFQ ART LTD.doc	Get hash	malicious	FormBook	Browse	66.96.161.166
	New Order.doc	Get hash	malicious	FormBook	Browse	66.96.161.166
	GXu0Ow8T1h.exe	Get hash	malicious	FormBook	Browse	66.96.161.166
	https://cloudflare-ipfs.com/ipfs/bafybeigamplrf7nvgvwzlbmlnszy7rlab4pwatrdj5q3idts3tvjtui4li/trustefnew.html	Get hash	malicious	HTMLPhisher	Browse	65.254.250.40
	https://ipfs.io/ipfs/bafybeigamplrf7nvgvwzlbmlnszy7rlab4pwatrdj5q3idts3tvjtui4li/trustefnew.html	Get hash	malicious	HTMLPhisher	Browse	65.254.250.40
GD-EMEA-DC-SXB1DE	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse	5.175.14.29
	DEBIT NOTE.exe	Get hash	malicious	FormBook	Browse	92.205.15.157
	Purchase Order_20240503.exe	Get hash	malicious	FormBook	Browse	92.205.15.157
	anebilledes.exe	Get hash	malicious	FormBook, GuLoader	Browse	92.205.8.26
	G3K3YBC97i.elf	Get hash	malicious	Mirai	Browse	62.138.132.196
	61#U2467.hta	Get hash	malicious	Unknown	Browse	92.205.182.151
	Purchase Order_20240528.exe	Get hash	malicious	FormBook	Browse	92.205.15.157
	Platosammine.exe	Get hash	malicious	FormBook, GuLoader	Browse	92.205.8.26
	http://ageofimmortalsgame.com/wth1u	Get hash	malicious	Phisher	Browse	92.205.17.86
	https://laurabingham.org/wp-content/plugins/wp-recipe-maker/downexcel.php	Get hash	malicious	Unknown	Browse	92.205.17.86

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse
C:\ProgramData\ooxxi\ealfvjp.exe	td2RgV6HyP.exe	Get hash	malicious	SystemBC	Browse

Created / dropped Files

C:\ProgramData\ooxxi\ealfvjp.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	5.872411715760397
Encrypted:	false
SSDEEP:	384:rC+AHNZw/WnlrobdglGbLMoy+yG+yir1dV:r0gklrydgQP1yO67V
MD5:	C661A77C31F83C413A96B5537AD31989
SHA1:	8A5A47E39A9EFA9DC4DE447D2AE4CD5E375E3557
SHA-256:	CC5BB638CB34CBD386A906B7708EB62E05E3FC991A20BD060E1D84F722D29FF1
SHA-512:	B86E45D36D8566B51F932F660EE9C3D79CEA1A2EB34A9F7DA7B2CCC5E50C74F319E8005E43D719C5722EC148DDDDF1351A7F9EDC430888E572B3884D1610B1AA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\ProgramData\ooxxi\ealfvjp.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 82%
Joe Sandbox View:	Filename: td2RgV6HyP.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]..r..o!..o!..o!..\|!..o!..}!..o!Rich..o!................PE..L.....Z].....................................@....@..........................`..............................................\|A.......................................................................................@..\|............................text....-.......................... ..`.rdata.......@.......2..............@..@.data...,....P.......<..............@...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat

Download File

Process:	C:\Users\user\Desktop\cbIcBAgY5W.exe
File Type:	DOS batch file, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.286146588249911
Encrypted:	false
SSDEEP:	3:mKDDFRK58FoXMMH:h08Foc2
MD5:	FF59D999BEB970447667695CE3273F75
SHA1:	316FA09F467BA90AC34A054DAF2E92E6E2854FF8
SHA-256:	065D2B17AD499587DC9DE7EE9ECDA4938B45DA1DF388BC72E6627DFF220F64D2
SHA-512:	D5AC72CB065A3CD3CB118A69A2F356314EEED24DCB4880751E1A3683895E66CEDC62607967E29F77A0C27ADF1C9FE0EFD86E804F693F0A63A5B51B0BF0056B5D
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	@echo off..start work.exe -priverdD

C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe

Download File

Process:	C:\Users\user\Desktop\cbIcBAgY5W.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	464808
Entropy (8bit):	6.591071989403159
Encrypted:	false
SSDEEP:	12288:yyveQB/fTHIGaPkKEYzURNAwbAgOT+t1nN:yuDXTIGaPhEYzUzA0bnN
MD5:	405B7FBE8C0ED98620064F0CD80F24C4
SHA1:	BB9E45038E8A9F7B7CD0DB62858AC65C74B74821
SHA-256:	9DD8267E66DC584EECB3BECE47E826D3189E41077F4083ACDFC9A4F623B9C187
SHA-512:	3DD4C407F6C2250D20C005E816E80AD442BB07F84AB02E25951331808FB4229219F9FDDBCF1AC2E6D70985E3077A6401905F18A8B2C633E9D0A8B9CC6971B61D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 8%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$.2.`.\.`.\.`.\..y..h.\..y....\..y..m.\.....b.\...X.r.\..._.j.\...Y.Y.\.i..i.\.i..b.\.i..g.\.`.].C.\..Y.R.\..\.a.\...a.\..^.a.\.Rich`.\.........PE..d...#.@f.........."....!.h...j.................@..........................................`.............................................4......P...............l0..............p....6..T....................7..(......@....................... ....................text...ng.......h.................. ..`.rdata...(.......*...l..............@..@.data...\...........................@....pdata..l0.......2..................@..@.didat..`...........................@..._RDATA..\...........................@..@.rsrc...............................@..@.reloc..p...........................@..B........................................................................................................................................

C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	5.872411715760397
Encrypted:	false
SSDEEP:	384:rC+AHNZw/WnlrobdglGbLMoy+yG+yir1dV:r0gklrydgQP1yO67V
MD5:	C661A77C31F83C413A96B5537AD31989
SHA1:	8A5A47E39A9EFA9DC4DE447D2AE4CD5E375E3557
SHA-256:	CC5BB638CB34CBD386A906B7708EB62E05E3FC991A20BD060E1D84F722D29FF1
SHA-512:	B86E45D36D8566B51F932F660EE9C3D79CEA1A2EB34A9F7DA7B2CCC5E50C74F319E8005E43D719C5722EC148DDDDF1351A7F9EDC430888E572B3884D1610B1AA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 82%
Joe Sandbox View:	Filename: td2RgV6HyP.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......]..r..o!..o!..o!..\|!..o!..}!..o!Rich..o!................PE..L.....Z].....................................@....@..........................`..............................................\|A.......................................................................................@..\|............................text....-.......................... ..`.rdata.......@.......2..............@..@.data...,....P.......<..............@...................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\ealfvjp.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe
File Type:	data
Category:	dropped
Size (bytes):	268
Entropy (8bit):	3.567279302358249
Encrypted:	false
SSDEEP:	6:jXxlh88/80e/ubhEZKg8ftiDKVAkXIEZ8MlW8+y0leWlaav/P1:7hDS/ubBOfkXd8kX+VVPv/t
MD5:	EAF420007F1403341CEC483D179FAE9F
SHA1:	F7C5E2B57C4D4EC7846B455F7FF18232A1CE4EF6
SHA-256:	2500186DCA92541542260E36E0ACB380E4CF1538D5B8D2C46D51625EF5E87417
SHA-512:	2C5ED2B0CA48FFE0900463D86576597C604B625F1968567F6F40060C03CAE4BE1D340ED9A0AC614412C66B67BF7DA8026C343A7A6B93CB6E7BFDEB74F99A8474
Malicious:	false
Reputation:	low
Preview:	....}..6%o.D........F.......<... .....\.........."....................!.C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.o.o.x.x.i.\.e.a.l.f.v.j.p...e.x.e.....s.t.a.r.t.2.......F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0.........L.......,.............................

Static File Info

General

File type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy (8bit):	6.4722573340019895
TrID:	Win64 Executable GUI (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	cbIcBAgY5W.exe
File size:	920'370 bytes
MD5:	1b1ecd323162c054864b63ada693cd71
SHA1:	333a67545a5d1aad4d73a3501f7152b4529b6b3e
SHA256:	902337bbf17ac4e015e03d12e79b60b8dd5a8362496da3291a39e9124c58d9ff
SHA512:	f1776b6a457108f10ca940ce02ce98b73404f5cf18fccee4977024cfaf74d7f48666d4da9be1bee27531525e276cb8cfadba39b0c81e0fd8cbe42f7672f45b71
SSDEEP:	24576:juDXTIGaPhEYzUzA0amuDXTIGaPhEYzUzA0bnl:KDjlabwz9aDjlabwz9rl
TLSH:	F3158E59E7E808F8E0B7E138E9525916F3B63C0D4370869F13A6556B2F273E09D3A712
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$.2.`.\.`.\.`.\..y..h.\..y....\..y..m.\.....b.\...X.r.\..._.j.\...Y.Y.\.i...i.\.i...b.\.i...g.\.`.].C.\...Y.R.\...\.a.\.....a.\

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x140032ee0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE
Time Stamp:	0x66409723 [Sun May 12 10:17:07 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	2
File Version Major:	5
File Version Minor:	2
Subsystem Version Major:	5
Subsystem Version Minor:	2
Import Hash:	b1c5b1beabd90d9fdabd1df0779ea832

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007FBD08911AF8h
dec eax
add esp, 28h
jmp 00007FBD0891148Fh
int3
int3
dec eax
mov eax, esp
dec eax
mov dword ptr [eax+08h], ebx
dec eax
mov dword ptr [eax+10h], ebp
dec eax
mov dword ptr [eax+18h], esi
dec eax
mov dword ptr [eax+20h], edi
inc ecx
push esi
dec eax
sub esp, 20h
dec ebp
mov edx, dword ptr [ecx+38h]
dec eax
mov esi, edx
dec ebp
mov esi, eax
dec eax
mov ebp, ecx
dec ecx
mov edx, ecx
dec eax
mov ecx, esi
dec ecx
mov edi, ecx
inc ecx
mov ebx, dword ptr [edx]
dec eax
shl ebx, 04h
dec ecx
add ebx, edx
dec esp
lea eax, dword ptr [ebx+04h]
call 00007FBD08910913h
mov eax, dword ptr [ebp+04h]
and al, 66h
neg al
mov eax, 00000001h
sbb edx, edx
neg edx
add edx, eax
test dword ptr [ebx+04h], edx
je 00007FBD08911623h
dec esp
mov ecx, edi
dec ebp
mov eax, esi
dec eax
mov edx, esi
dec eax
mov ecx, ebp
call 00007FBD08913637h
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov ebp, dword ptr [esp+38h]
dec eax
mov esi, dword ptr [esp+40h]
dec eax
mov edi, dword ptr [esp+48h]
dec eax
add esp, 20h
inc ecx
pop esi
ret
int3
int3
int3
dec eax
sub esp, 48h
dec eax
lea ecx, dword ptr [esp+20h]
call 00007FBD088FFEA3h
dec eax
lea edx, dword ptr [00025747h]
dec eax
lea ecx, dword ptr [esp+20h]
call 00007FBD089126F2h
int3
jmp 00007FBD089188D4h
int3
int3
int3
int3
int3
int3

Rich Headers

Programming Language:

[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x597a0	0x34	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x597d4	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x70000	0xff7c	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x6a000	0x306c	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x80000	0x970	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x536c0	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x53780	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x4b3f0	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x48000	0x508	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x588bc	0x120	.rdata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x4676e	0x46800	f06bb06e02377ae8b223122e53be35c2	False	0.5372340425531915	data	6.47079645411382	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x48000	0x128c4	0x12a00	2de06d4a6920a6911e64ff20000ea72f	False	0.4499003775167785	data	5.273999097784603	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x5b000	0xe75c	0x1a00	0dbdb901a7d477980097e42e511a94fb	False	0.28275240384615385	data	3.2571023907881185	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x6a000	0x306c	0x3200	b0ce0f057741ad2a4ef4717079fa34e9	False	0.483359375	data	5.501810413666288	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.didat	0x6e000	0x360	0x400	1fcc7b1d7a02443319f8fcc2be4ca936	False	0.2578125	data	3.0459938492946015	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
_RDATA	0x6f000	0x15c	0x200	3f331ec50f09ba861beaf955b33712d5	False	0.408203125	data	3.3356393424384843	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x70000	0xff7c	0x10000	7cc0e4178407044344713ed68f887c23	False	0.2468109130859375	data	5.044029509615392	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x80000	0x970	0xa00	77a9ddfc47a5650d6eebbcc823e39532	False	0.52421875	data	5.336289720085303	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
PNG	0x706a4	0xb45	PNG image data, 93 x 302, 8-bit/color RGB, non-interlaced	1.0027729636048528
PNG	0x711ec	0x15a9	PNG image data, 186 x 604, 8-bit/color RGB, non-interlaced	0.9363390441839495
RT_ICON	0x72798	0x8db	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	0.8142920158800176
RT_ICON	0x73074	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 0	0.029168634860651865
RT_ICON	0x7729c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	0.047925311203319505
RT_ICON	0x79844	0x1a68	Device independent bitmap graphic, 40 x 80 x 32, image size 0	0.05798816568047337
RT_ICON	0x7b2ac	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	0.06543151969981238
RT_ICON	0x7c354	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	0.10327868852459017
RT_ICON	0x7ccdc	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 0	0.12732558139534883
RT_ICON	0x7d394	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	0.10815602836879433
RT_DIALOG	0x7d7fc	0x2ba	data	0.5286532951289399
RT_DIALOG	0x7dab8	0x13a	data	0.6560509554140127
RT_DIALOG	0x7dbf4	0xf2	data	0.71900826446281
RT_DIALOG	0x7dce8	0x14a	data	0.6
RT_DIALOG	0x7de34	0x314	data	0.47588832487309646
RT_DIALOG	0x7e148	0x24a	data	0.6279863481228669
RT_STRING	0x7e394	0x1fc	data	0.421259842519685
RT_STRING	0x7e590	0x246	data	0.41924398625429554
RT_STRING	0x7e7d8	0x1a6	data	0.514218009478673
RT_STRING	0x7e980	0xdc	data	0.65
RT_STRING	0x7ea5c	0x470	data	0.3873239436619718
RT_STRING	0x7eecc	0x164	data	0.5056179775280899
RT_STRING	0x7f030	0x110	data	0.5772058823529411
RT_STRING	0x7f140	0x158	data	0.4563953488372093
RT_STRING	0x7f298	0xe8	data	0.5948275862068966
RT_STRING	0x7f380	0x1c6	data	0.5242290748898678
RT_STRING	0x7f548	0x268	data	0.4837662337662338
RT_GROUP_ICON	0x7f7b0	0x76	data	0.7457627118644068
RT_MANIFEST	0x7f828	0x753	XML 1.0 document, ASCII text, with CRLF line terminators	0.3957333333333333

Imports

DLL	Import
KERNEL32.dll	LocalFree, GetLastError, SetLastError, FormatMessageW, GetCurrentProcess, DeviceIoControl, SetFileTime, CloseHandle, RemoveDirectoryW, CreateFileW, DeleteFileW, CreateHardLinkW, GetShortPathNameW, GetLongPathNameW, MoveFileW, GetFileType, GetStdHandle, WriteFile, ReadFile, FlushFileBuffers, SetEndOfFile, SetFilePointer, GetCurrentProcessId, CreateDirectoryW, SetFileAttributesW, GetFileAttributesW, FindClose, FindFirstFileW, FindNextFileW, GetVersionExW, GetModuleFileNameW, SetCurrentDirectoryW, GetCurrentDirectoryW, GetFullPathNameW, FoldStringW, GetModuleHandleW, FindResourceW, FreeLibrary, GetProcAddress, ExpandEnvironmentStringsW, ExitProcess, SetThreadExecutionState, Sleep, LoadLibraryW, GetSystemDirectoryW, CompareStringW, AllocConsole, FreeConsole, AttachConsole, WriteConsoleW, GetProcessAffinityMask, CreateThread, SetThreadPriority, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, SetEvent, ResetEvent, ReleaseSemaphore, WaitForSingleObject, CreateEventW, CreateSemaphoreW, GetSystemTime, SystemTimeToTzSpecificLocalTime, TzSpecificLocalTimeToSystemTime, SystemTimeToFileTime, FileTimeToLocalFileTime, LocalFileTimeToFileTime, FileTimeToSystemTime, GetCPInfo, IsDBCSLeadByte, MultiByteToWideChar, WideCharToMultiByte, GlobalAlloc, LockResource, GlobalLock, GlobalUnlock, GlobalFree, GlobalMemoryStatusEx, LoadResource, SizeofResource, GetTimeFormatW, GetDateFormatW, GetExitCodeProcess, GetLocalTime, GetTickCount, MapViewOfFile, UnmapViewOfFile, CreateFileMappingW, OpenFileMappingW, GetCommandLineW, SetEnvironmentVariableW, GetTempPathW, MoveFileExW, GetLocaleInfoW, GetNumberFormatW, SetFilePointerEx, GetConsoleMode, GetConsoleCP, HeapSize, SetStdHandle, GetProcessHeap, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetOEMCP, IsValidCodePage, FindNextFileA, RaiseException, GetSystemInfo, VirtualProtect, VirtualQuery, LoadLibraryExA, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, TerminateProcess, IsProcessorFeaturePresent, InitializeCriticalSectionAndSpinCount, WaitForSingleObjectEx, IsDebuggerPresent, GetStartupInfoW, QueryPerformanceCounter, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, RtlPcToFileHeader, RtlUnwindEx, EncodePointer, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, LoadLibraryExW, QueryPerformanceFrequency, GetModuleHandleExW, GetModuleFileNameA, GetACP, HeapFree, HeapAlloc, GetStringTypeW, HeapReAlloc, LCMapStringW, FindFirstFileExA
OLEAUT32.dll	SysAllocString, SysFreeString, VariantClear
gdiplus.dll	GdipCloneImage, GdipFree, GdipDisposeImage, GdipCreateBitmapFromStream, GdipCreateHBITMAPFromBitmap, GdiplusStartup, GdiplusShutdown, GdipAlloc

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/04/24-12:42:38.299475	TCP	2031599	ET TROJAN Win32/SystemBC CnC Checkin	49706	4001	192.168.2.7	185.43.220.45

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 4, 2024 12:42:38.292512894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:42:38.297517061 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:42:38.297583103 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:42:38.299474955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:42:38.304419994 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:42:57.356410980 CEST	50039	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:42:57.361401081 CEST	53	50039	1.1.1.1	192.168.2.7
Jun 4, 2024 12:42:57.361526966 CEST	50039	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:42:57.366503954 CEST	53	50039	1.1.1.1	192.168.2.7
Jun 4, 2024 12:42:57.954966068 CEST	50039	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:42:57.960179090 CEST	53	50039	1.1.1.1	192.168.2.7
Jun 4, 2024 12:42:57.960267067 CEST	50039	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:23.281337023 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.333024979 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.392149925 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.392215967 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.398608923 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.402045012 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.402090073 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.442373037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.516943932 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.530576944 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.530627966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.535538912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.535593033 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.789227962 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.789519072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.789568901 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.814001083 CEST	50040	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:23.818962097 CEST	587	50040	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:23.819045067 CEST	50040	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:23.819113970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.819928885 CEST	50041	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:23.823980093 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.824837923 CEST	587	50041	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:23.825021029 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.825028896 CEST	50041	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:23.829940081 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.837085962 CEST	50042	465	192.168.2.7	113.23.205.39
Jun 4, 2024 12:43:23.842044115 CEST	465	50042	113.23.205.39	192.168.2.7
Jun 4, 2024 12:43:23.842176914 CEST	50042	465	192.168.2.7	113.23.205.39
Jun 4, 2024 12:43:23.842348099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.847219944 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.853588104 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.853621960 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.858505011 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.858536005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.930062056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.969540119 CEST	50043	587	192.168.2.7	185.71.61.14
Jun 4, 2024 12:43:23.973757982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.974226952 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:23.974500895 CEST	587	50043	185.71.61.14	192.168.2.7
Jun 4, 2024 12:43:23.974565029 CEST	50043	587	192.168.2.7	185.71.61.14
Jun 4, 2024 12:43:23.974637032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.979105949 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:23.979160070 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:23.979418039 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.979441881 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.984256029 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.992129087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.992129087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:23.997096062 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:23.997117043 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.010282993 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.010337114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.015160084 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.015331984 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.038969040 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.038969040 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.043951988 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.043987036 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.044023037 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.044039011 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.044078112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.044136047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.044569969 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.049633026 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.054238081 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.059214115 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.059319019 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.059415102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.093583107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.093631983 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.098577976 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.146300077 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.174968958 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.191323042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.191361904 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.196815014 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.196835041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.217240095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.217288017 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.222198009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.222286940 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.223932981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.223983049 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.228805065 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.228877068 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.298645020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.303219080 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.308511019 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.308578014 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.308684111 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.314599991 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.314805984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.314865112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.314941883 CEST	50049	587	192.168.2.7	103.145.30.229
Jun 4, 2024 12:43:24.320174932 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.320184946 CEST	587	50049	103.145.30.229	192.168.2.7
Jun 4, 2024 12:43:24.320194960 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.320249081 CEST	50049	587	192.168.2.7	103.145.30.229
Jun 4, 2024 12:43:24.320333958 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.325396061 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.327095985 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:24.331962109 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:24.332067966 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:24.332123041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.337161064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.337790966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.337830067 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.342725039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.342782021 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.430785894 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.457983971 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.458188057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.463290930 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.463426113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.536971092 CEST	50051	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:24.541934967 CEST	587	50051	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:24.542009115 CEST	50051	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:24.542205095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.547343969 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.548593998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.551983118 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.556848049 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.556921005 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.557019949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.559412956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.559465885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.564730883 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.591792107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.591865063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.596820116 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.618465900 CEST	50053	587	192.168.2.7	204.11.56.48
Jun 4, 2024 12:43:24.623359919 CEST	587	50053	204.11.56.48	192.168.2.7
Jun 4, 2024 12:43:24.623434067 CEST	50053	587	192.168.2.7	204.11.56.48
Jun 4, 2024 12:43:24.623570919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.674156904 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.697196960 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.710681915 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.710752010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.714004040 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.714066029 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.714409113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.714462042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.715573072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.715601921 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.718951941 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.719014883 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.719209909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.719270945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.719326973 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.719355106 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.724123955 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.724215031 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.729172945 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:24.732755899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.732810020 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.734069109 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:24.734126091 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:24.734251022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.737641096 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.737751007 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.739206076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.745198965 CEST	50055	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:24.750145912 CEST	587	50055	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:24.750267982 CEST	50055	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:24.750482082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.752182961 CEST	50056	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:24.755496025 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.757055998 CEST	587	50056	52.223.34.187	192.168.2.7
Jun 4, 2024 12:43:24.757148981 CEST	50056	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:24.757466078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.762387991 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.788132906 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.788208008 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.793005943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.793088913 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.799772978 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:24.804662943 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:24.804781914 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:24.804898977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.810714960 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.830584049 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.832751989 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.837622881 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.837678909 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.837769032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.838418007 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.839761019 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.839914083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.843087912 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.843298912 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.843358994 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.843456984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.844835997 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.847174883 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.847217083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.847893953 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.847949982 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.848007917 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.849704981 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.849822044 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.850683928 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:24.850817919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.852015018 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.853045940 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.855710030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.860402107 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:24.860599041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.860656023 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.865771055 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:24.865819931 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:24.865943909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.865981102 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.867258072 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:24.872239113 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:24.872308969 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:24.872420073 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.877507925 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.879890919 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.891964912 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:24.895550013 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.895912886 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:24.896915913 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:24.896992922 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:24.897069931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.942184925 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.946445942 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.946526051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.949496984 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.951359987 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.951412916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.959873915 CEST	64327	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:24.961253881 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.961312056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.961941957 CEST	64328	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:24.964860916 CEST	53	64327	1.1.1.1	192.168.2.7
Jun 4, 2024 12:43:24.964920998 CEST	64327	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:24.964963913 CEST	64327	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:24.966229916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.966305017 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:24.966825962 CEST	587	64328	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:24.966883898 CEST	64328	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:24.966944933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:24.970063925 CEST	53	64327	1.1.1.1	192.168.2.7
Jun 4, 2024 12:43:24.971966982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.001730919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.001795053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.006772041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.006782055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.010272980 CEST	64329	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:25.015207052 CEST	587	64329	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:25.015286922 CEST	64329	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:25.015423059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.019490957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.019557953 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.020585060 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.024430990 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.024560928 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.076741934 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.078704119 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.080128908 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.082003117 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:25.083729982 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.083790064 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.083877087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.085002899 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.085078955 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.085184097 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.086942911 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:25.087095976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.087122917 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:25.089054108 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.089827061 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.090234041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.092020988 CEST	64334	465	192.168.2.7	185.15.192.58
Jun 4, 2024 12:43:25.092114925 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.093190908 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.093367100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.094710112 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.094765902 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.094851971 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.096117973 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:25.096834898 CEST	465	64334	185.15.192.58	192.168.2.7
Jun 4, 2024 12:43:25.096899033 CEST	64334	465	192.168.2.7	185.15.192.58
Jun 4, 2024 12:43:25.096965075 CEST	587	50053	204.11.56.48	192.168.2.7
Jun 4, 2024 12:43:25.096983910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.097021103 CEST	50053	587	192.168.2.7	204.11.56.48
Jun 4, 2024 12:43:25.097074986 CEST	50053	587	192.168.2.7	204.11.56.48
Jun 4, 2024 12:43:25.097126007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.097297907 CEST	64336	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:25.098062038 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.098247051 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.099805117 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.101006985 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:25.101069927 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:25.101159096 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.101942062 CEST	587	50053	204.11.56.48	192.168.2.7
Jun 4, 2024 12:43:25.101960897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.102297068 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.102315903 CEST	587	64336	142.250.153.26	192.168.2.7
Jun 4, 2024 12:43:25.102386951 CEST	64336	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:25.102464914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.104043007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.104085922 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.104909897 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:25.106345892 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.106611013 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.106672049 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.107485056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.108895063 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.109000921 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.109837055 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:25.109914064 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:25.110023975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.112023115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.114968061 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.128251076 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.128321886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.133168936 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.200090885 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.201941967 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.202018976 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.202111959 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.205230951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.205312014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.205568075 CEST	64338	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:25.207034111 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.207099915 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.207110882 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.207544088 CEST	64339	587	192.168.2.7	160.119.252.132
Jun 4, 2024 12:43:25.208534002 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:25.210311890 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.210475922 CEST	587	64338	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:25.210537910 CEST	64338	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:25.210640907 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.212591887 CEST	587	64339	160.119.252.132	192.168.2.7
Jun 4, 2024 12:43:25.212656975 CEST	64339	587	192.168.2.7	160.119.252.132
Jun 4, 2024 12:43:25.212786913 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.213613033 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:25.213673115 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:25.213773966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.215616941 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.217828035 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.218908072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.219054937 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:25.223931074 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:25.223999023 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:25.224198103 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.229068041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.287448883 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.287524939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.292392015 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.292448997 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.324539900 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.328970909 CEST	64343	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:25.335546017 CEST	587	64343	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:25.335635900 CEST	64343	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:25.335726023 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.335887909 CEST	64344	587	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:25.341290951 CEST	64345	587	192.168.2.7	81.236.63.162
Jun 4, 2024 12:43:25.342322111 CEST	587	64344	173.194.76.27	192.168.2.7
Jun 4, 2024 12:43:25.342431068 CEST	64344	587	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:25.342494011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.347883940 CEST	587	64345	81.236.63.162	192.168.2.7
Jun 4, 2024 12:43:25.347986937 CEST	64345	587	192.168.2.7	81.236.63.162
Jun 4, 2024 12:43:25.348081112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.349169016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.349241972 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.349311113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.352621078 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:25.354125977 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.357207060 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:25.357356071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.357482910 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:25.357564926 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:25.357600927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.362277031 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.370760918 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.370878935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.375765085 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.378829956 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:25.378981113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.383158922 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.383228064 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.388219118 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.389853001 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.389904976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.390599012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.390691996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.394932032 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.395618916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.406831026 CEST	64347	587	192.168.2.7	94.102.6.76
Jun 4, 2024 12:43:25.411155939 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:25.411843061 CEST	587	64347	94.102.6.76	192.168.2.7
Jun 4, 2024 12:43:25.411876917 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.411922932 CEST	64347	587	192.168.2.7	94.102.6.76
Jun 4, 2024 12:43:25.412017107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.426794052 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:25.427084923 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:25.427238941 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.430557966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.430682898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.432214022 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.435584068 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.439327002 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.439435959 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.444346905 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.447233915 CEST	64348	587	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:25.449920893 CEST	64349	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:25.452140093 CEST	587	64348	173.194.76.27	192.168.2.7
Jun 4, 2024 12:43:25.452200890 CEST	64348	587	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:25.452277899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.452334881 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.455038071 CEST	587	64349	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:25.455092907 CEST	64349	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:25.455168009 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.457429886 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.457487106 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.457539082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.457562923 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.460417986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.460474968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.461545944 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.461652040 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.461802959 CEST	64351	587	192.168.2.7	172.65.182.103
Jun 4, 2024 12:43:25.462256908 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.462318897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.462747097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.463236094 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.463351965 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.464721918 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.465451956 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.466918945 CEST	587	64351	172.65.182.103	192.168.2.7
Jun 4, 2024 12:43:25.467008114 CEST	64351	587	192.168.2.7	172.65.182.103
Jun 4, 2024 12:43:25.467590094 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.468272924 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.468674898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.468796015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.473006964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.473054886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.473701000 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:25.473795891 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.477947950 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.489319086 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.490658045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.490722895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.495577097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.504960060 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.504961014 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.504960060 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.566220045 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:25.566379070 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.574765921 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.581007004 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:25.585923910 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:25.586008072 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:25.586101055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.602649927 CEST	64353	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:25.605307102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.605365038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.607655048 CEST	587	64353	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:25.607753992 CEST	64353	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:25.607825041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.610656977 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.614317894 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:25.635231018 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.636351109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.641431093 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.644062042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.644125938 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.644530058 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.644579887 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.646716118 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.646750927 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.646769047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.646950960 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.649041891 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.649477005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.651948929 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.654763937 CEST	587	64329	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:25.655052900 CEST	64329	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:25.656805038 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.657289982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.657361031 CEST	64329	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:25.657407999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.662305117 CEST	587	64329	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:25.662333965 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.676789045 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.685647964 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:25.686191082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.692420959 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.694108009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.695889950 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:25.695964098 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.696033955 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:25.698357105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.698415995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.699369907 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.701025963 CEST	53	64327	1.1.1.1	192.168.2.7
Jun 4, 2024 12:43:25.701087952 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:25.701122046 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.701149940 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:25.703366041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.704314947 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.704447031 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.704494953 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.706743002 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:25.706823111 CEST	64327	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:25.708054066 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.711749077 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:25.711832047 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:25.711899996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.712050915 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.712053061 CEST	53	64327	1.1.1.1	192.168.2.7
Jun 4, 2024 12:43:25.712088108 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.712107897 CEST	64327	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:25.713630915 CEST	59715	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:25.717130899 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.718599081 CEST	53	59715	1.1.1.1	192.168.2.7
Jun 4, 2024 12:43:25.718666077 CEST	59715	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:25.718688965 CEST	59715	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:25.722419024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.722482920 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.723628998 CEST	53	59715	1.1.1.1	192.168.2.7
Jun 4, 2024 12:43:25.724425077 CEST	59716	587	192.168.2.7	74.208.236.198
Jun 4, 2024 12:43:25.726315975 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:25.727417946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.729341984 CEST	587	59716	74.208.236.198	192.168.2.7
Jun 4, 2024 12:43:25.729404926 CEST	59716	587	192.168.2.7	74.208.236.198
Jun 4, 2024 12:43:25.729491949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.731656075 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.731690884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.736592054 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.782253981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.823966980 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:25.825082064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.828257084 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.828372002 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:25.828433037 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.833204985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.833277941 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:25.833311081 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.833667040 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:25.833794117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.838726044 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.844780922 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.844821930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.849776983 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.849858999 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.855616093 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:25.855771065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.860728025 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.879930019 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:25.879940033 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:25.888601065 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.892496109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.893073082 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.893167019 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.895536900 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:25.897428989 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.898118019 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.942449093 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.942450047 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.942912102 CEST	587	64351	172.65.182.103	192.168.2.7
Jun 4, 2024 12:43:25.943087101 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.943114042 CEST	64351	587	192.168.2.7	172.65.182.103
Jun 4, 2024 12:43:25.943114996 CEST	64351	587	192.168.2.7	172.65.182.103
Jun 4, 2024 12:43:25.943679094 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.944072008 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.944117069 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.944169044 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:25.947978020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.948066950 CEST	587	64351	172.65.182.103	192.168.2.7
Jun 4, 2024 12:43:25.949022055 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.949033976 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.949043989 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.957273006 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.960181952 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:25.960302114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.960347891 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.970529079 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.974548101 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:25.975667953 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.980364084 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:25.980495930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.980776072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.982382059 CEST	587	64343	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:25.982553005 CEST	64343	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:25.982635021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.982636929 CEST	64343	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:25.985440016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.987540007 CEST	587	64343	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:25.987639904 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.987842083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.987888098 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:25.992796898 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:25.996620893 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:25.996891022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.002281904 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.004915953 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.004926920 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:26.020540953 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.020587921 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:26.022196054 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:26.028090000 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:26.028178930 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:26.028290987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.033401966 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.036307096 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:26.066154957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.066226006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.067053080 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.067186117 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:26.067248106 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.071300030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.072135925 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:26.072145939 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.088989973 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.092183113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.094916105 CEST	59718	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:26.099880934 CEST	587	59718	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:26.100150108 CEST	59718	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:26.100244999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.105451107 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.110860109 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:26.112253904 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.131167889 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:26.131303072 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.137159109 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.145623922 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.161195040 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:26.176839113 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:26.203660011 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.203784943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.204715967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.204766989 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.204791069 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.204843998 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.204889059 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.205038071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.205852985 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:26.206312895 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.206526995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.207005978 CEST	59719	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:26.209537983 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.209733963 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.209793091 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.210017920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.210743904 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:26.211899996 CEST	587	59719	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:26.212018013 CEST	59719	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:26.212094069 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.213501930 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.214402914 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.214503050 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.214607000 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.215399981 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:26.217116117 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.218509912 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.218622923 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.218720913 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.219041109 CEST	59723	465	192.168.2.7	149.129.214.116
Jun 4, 2024 12:43:26.220242977 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:26.220293999 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:26.220352888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.220448971 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.220510006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.221160889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.221215010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.225379944 CEST	465	59723	149.129.214.116	192.168.2.7
Jun 4, 2024 12:43:26.225459099 CEST	59723	465	192.168.2.7	149.129.214.116
Jun 4, 2024 12:43:26.225542068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.226116896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.226676941 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.226910114 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.230521917 CEST	59724	465	192.168.2.7	104.21.41.110
Jun 4, 2024 12:43:26.231018066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.231064081 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.236556053 CEST	465	59724	104.21.41.110	192.168.2.7
Jun 4, 2024 12:43:26.236572981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.236645937 CEST	59724	465	192.168.2.7	104.21.41.110
Jun 4, 2024 12:43:26.236784935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.242161989 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.246859074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.246917963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.251777887 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.254092932 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.254364967 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.254906893 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.254908085 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.256570101 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.301755905 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:26.301821947 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.302184105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.303900957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.308885098 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.323139906 CEST	587	64353	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:26.323318005 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.328519106 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.328639984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.329699039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.330987930 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.331711054 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:26.331912041 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:26.333471060 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:26.333508015 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:26.333605051 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.333661079 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.334034920 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.335755110 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.336641073 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:26.336716890 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:26.337709904 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.338350058 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:26.338417053 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.338476896 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.338918924 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.339695930 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:26.340363026 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.340497971 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.340553999 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.340606928 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:26.340635061 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.340818882 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.342573881 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.342664957 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.342802048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.344609022 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:26.344656944 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:26.344866991 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.345195055 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.345241070 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.345313072 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.345331907 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.345386982 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:26.347724915 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.348670006 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:26.350332975 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.352413893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.352570057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.357429981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.363245010 CEST	59729	465	192.168.2.7	52.101.148.3
Jun 4, 2024 12:43:26.364448071 CEST	64353	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:26.366569042 CEST	59730	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:26.368144989 CEST	465	59729	52.101.148.3	192.168.2.7
Jun 4, 2024 12:43:26.368213892 CEST	59729	465	192.168.2.7	52.101.148.3
Jun 4, 2024 12:43:26.368328094 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.368649006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.368680954 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.371459007 CEST	587	59730	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:26.371622086 CEST	59730	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:26.372159958 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.373990059 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.379913092 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.379914045 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:26.403748989 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:26.408714056 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:26.408895969 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:26.408895969 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.413819075 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.440989017 CEST	587	64353	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:26.442179918 CEST	64353	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:26.442251921 CEST	64353	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:26.442308903 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.447244883 CEST	587	64353	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:26.451256037 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.454415083 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.454458952 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:26.454905987 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:26.455159903 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.455192089 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:26.455756903 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:26.455903053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.456240892 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.456855059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.456855059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.459306002 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.459319115 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:26.459784031 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:26.459971905 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.460016012 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:26.461168051 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.461232901 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.461374044 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.461734056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.466275930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.466504097 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.466631889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.466810942 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.466918945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.469558001 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.470016956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.471380949 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.474935055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.477946043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.477946043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.482940912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.483134985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.483155966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.488111973 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.492645979 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:26.494245052 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.500606060 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.502073050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.502151012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.502206087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.505492926 CEST	587	64347	94.102.6.76	192.168.2.7
Jun 4, 2024 12:43:26.506117105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.506999016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.507009983 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.508136988 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:26.510118961 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.520616055 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.525327921 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:26.526261091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.531168938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.531558037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.531558037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.536201954 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:26.536469936 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.538316011 CEST	59733	587	192.168.2.7	210.59.228.45
Jun 4, 2024 12:43:26.543220997 CEST	587	59733	210.59.228.45	192.168.2.7
Jun 4, 2024 12:43:26.543277979 CEST	59733	587	192.168.2.7	210.59.228.45
Jun 4, 2024 12:43:26.543335915 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.551189899 CEST	53	59715	1.1.1.1	192.168.2.7
Jun 4, 2024 12:43:26.551460028 CEST	59715	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:26.551614046 CEST	59734	587	192.168.2.7	216.239.32.21
Jun 4, 2024 12:43:26.551808119 CEST	64347	587	192.168.2.7	94.102.6.76
Jun 4, 2024 12:43:26.551812887 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.556533098 CEST	587	59734	216.239.32.21	192.168.2.7
Jun 4, 2024 12:43:26.556606054 CEST	59734	587	192.168.2.7	216.239.32.21
Jun 4, 2024 12:43:26.556617975 CEST	53	59715	1.1.1.1	192.168.2.7
Jun 4, 2024 12:43:26.556658983 CEST	59715	53	192.168.2.7	1.1.1.1
Jun 4, 2024 12:43:26.556847095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.561784029 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.566737890 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:26.567203045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.567336082 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:26.567447901 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:26.568445921 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.568510056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.568599939 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:26.568958044 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.569050074 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.569303036 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.570297956 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:26.570658922 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:26.572267056 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:26.572423935 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:26.572423935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.573470116 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:26.573802948 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.573918104 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.574166059 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.575136900 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:26.575186968 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:26.575313091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.575484991 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:26.575530052 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:26.575591087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.577486038 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.577651024 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:26.577933073 CEST	59738	587	192.168.2.7	104.18.2.81
Jun 4, 2024 12:43:26.577989101 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.580924034 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.582806110 CEST	587	59738	104.18.2.81	192.168.2.7
Jun 4, 2024 12:43:26.582864046 CEST	59738	587	192.168.2.7	104.18.2.81
Jun 4, 2024 12:43:26.582967043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.587964058 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.593013048 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.593367100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.598586082 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.601380110 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.601497889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.601497889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.601552963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.601552963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.604511023 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:26.605290890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.606277943 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:26.606580973 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.606604099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.611435890 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.611893892 CEST	59739	587	192.168.2.7	77.75.78.173
Jun 4, 2024 12:43:26.614308119 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:26.616753101 CEST	587	59739	77.75.78.173	192.168.2.7
Jun 4, 2024 12:43:26.616816044 CEST	59739	587	192.168.2.7	77.75.78.173
Jun 4, 2024 12:43:26.616893053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.627048969 CEST	59740	587	192.168.2.7	172.217.18.115
Jun 4, 2024 12:43:26.630105972 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:26.631890059 CEST	587	59740	172.217.18.115	192.168.2.7
Jun 4, 2024 12:43:26.631947041 CEST	59740	587	192.168.2.7	172.217.18.115
Jun 4, 2024 12:43:26.631983995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.637020111 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.645251989 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:26.645495892 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.645564079 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.645570993 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.645570993 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:26.645581961 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.661230087 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:26.692446947 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:26.693273067 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:26.694608927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.694648981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.695559978 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.695620060 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:26.695996046 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:26.696268082 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.698106050 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.700427055 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.700536013 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:26.700855017 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:26.701147079 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.703056097 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.704494953 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.704541922 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.704740047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.704740047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.706595898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.706595898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.709673882 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.710443974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.710481882 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.711575031 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.715301991 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.715313911 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.715464115 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.715595961 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.715677023 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.717416048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.717416048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.720511913 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.722326040 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.728492022 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:26.728609085 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.735683918 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.735716105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.739341021 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:26.740622997 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.754965067 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.754965067 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.770632982 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:26.774892092 CEST	587	64339	160.119.252.132	192.168.2.7
Jun 4, 2024 12:43:26.774998903 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.779844999 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.800240040 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.805099010 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.805270910 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.805270910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.814822912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.816637993 CEST	59743	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:26.817449093 CEST	64339	587	192.168.2.7	160.119.252.132
Jun 4, 2024 12:43:26.821502924 CEST	587	59743	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:26.822165966 CEST	59743	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:26.824506998 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.828903913 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:26.829226971 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.829235077 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.829304934 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.829381943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.829392910 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.829410076 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.829430103 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.829447031 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.829474926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.829561949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.830614090 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.830622911 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.830672979 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.830682993 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.830692053 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.830730915 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.830764055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.830787897 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.830799103 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.830813885 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.830823898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.830831051 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.830923080 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.831864119 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.831880093 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.831921101 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.831969023 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.832037926 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.832102060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.832102060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.832115889 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.832123995 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.832155943 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.832195997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.832222939 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.832254887 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.832289934 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.832334042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.832828045 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.832837105 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.832865000 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.832920074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.834235907 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.834342957 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.834579945 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.835675001 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.835726976 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.835901022 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.836817980 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.837107897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.837150097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.837212086 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.837811947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.843907118 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.843907118 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.846751928 CEST	59744	587	192.168.2.7	188.114.97.3
Jun 4, 2024 12:43:26.848850012 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.851629019 CEST	587	59744	188.114.97.3	192.168.2.7
Jun 4, 2024 12:43:26.851695061 CEST	59744	587	192.168.2.7	188.114.97.3
Jun 4, 2024 12:43:26.851814985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.854950905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.854950905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.859936953 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.880053043 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:26.902128935 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.930986881 CEST	587	59719	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:26.932305098 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:26.932476044 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.932517052 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.933410883 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:26.933499098 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.933659077 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.933926105 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:26.934199095 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.935024977 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.935158014 CEST	59745	587	192.168.2.7	172.65.182.103
Jun 4, 2024 12:43:26.935461998 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.936508894 CEST	59747	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:26.937412977 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.937577963 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.938374043 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.938839912 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:26.939027071 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.939879894 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.939970016 CEST	587	59745	172.65.182.103	192.168.2.7
Jun 4, 2024 12:43:26.940023899 CEST	59745	587	192.168.2.7	172.65.182.103
Jun 4, 2024 12:43:26.940129042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.940314054 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.940361023 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.940391064 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.941363096 CEST	587	59747	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:26.941421032 CEST	59747	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:26.941483021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.943131924 CEST	59748	587	192.168.2.7	163.44.185.233
Jun 4, 2024 12:43:26.945072889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.945455074 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.946650982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.948015928 CEST	587	59748	163.44.185.233	192.168.2.7
Jun 4, 2024 12:43:26.948074102 CEST	59748	587	192.168.2.7	163.44.185.233
Jun 4, 2024 12:43:26.948183060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.953131914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.955195904 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.955571890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.957732916 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.957812071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.960066080 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.960066080 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.960419893 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.962769985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.964920044 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.964984894 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.968466997 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.968475103 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.968516111 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.968573093 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.969535112 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.969573021 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.969619036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.969619036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.969628096 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.970105886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.972191095 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.972201109 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:26.972237110 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:26.972292900 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.973541975 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.973790884 CEST	59719	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:26.973959923 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:26.973968983 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:26.974539995 CEST	59749	587	192.168.2.7	172.67.188.253
Jun 4, 2024 12:43:26.974616051 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.974931002 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.977236032 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.979490995 CEST	587	59749	172.67.188.253	192.168.2.7
Jun 4, 2024 12:43:26.979546070 CEST	59749	587	192.168.2.7	172.67.188.253
Jun 4, 2024 12:43:26.979692936 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.985250950 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:26.988910913 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:26.993916988 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:26.994012117 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:26.994117022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:26.999727964 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.003506899 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.003645897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.004981995 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.005574942 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.007425070 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:27.008548975 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.010960102 CEST	587	50049	103.145.30.229	192.168.2.7
Jun 4, 2024 12:43:27.011054039 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.012283087 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:27.012356043 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:27.012398005 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.015928030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.017443895 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.017486095 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.017601967 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.022448063 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.030519962 CEST	587	59719	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:27.030697107 CEST	59719	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:27.030697107 CEST	59719	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:27.031191111 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.035759926 CEST	587	59719	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:27.041937113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.051892042 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.052506924 CEST	50049	587	192.168.2.7	103.145.30.229
Jun 4, 2024 12:43:27.063462973 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.063668013 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:27.063884974 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.063884974 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.065206051 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:27.065862894 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.067466974 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.068010092 CEST	64347	587	192.168.2.7	94.102.6.76
Jun 4, 2024 12:43:27.068310022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.068562031 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:27.068811893 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.068861008 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:27.070020914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.070045948 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:27.070255995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.070481062 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:27.070595980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.070729017 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:27.070794106 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.070940018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.073129892 CEST	587	64347	94.102.6.76	192.168.2.7
Jun 4, 2024 12:43:27.073190928 CEST	64347	587	192.168.2.7	94.102.6.76
Jun 4, 2024 12:43:27.075027943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.075525999 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.075927019 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:27.076056004 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.081062078 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.093379974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.093379974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.098294020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.106621981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.106621981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.111599922 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.114315033 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.127628088 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:27.127727985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.129990101 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:27.131048918 CEST	59753	587	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:27.132020950 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.132153034 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.135817051 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.135951996 CEST	587	59753	199.59.243.225	192.168.2.7
Jun 4, 2024 12:43:27.135988951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.136017084 CEST	59753	587	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:27.136101007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.137130976 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.140459061 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.140568018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.141184092 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.141469002 CEST	59754	587	192.168.2.7	62.149.128.166
Jun 4, 2024 12:43:27.146346092 CEST	587	59754	62.149.128.166	192.168.2.7
Jun 4, 2024 12:43:27.146454096 CEST	59754	587	192.168.2.7	62.149.128.166
Jun 4, 2024 12:43:27.147787094 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.151109934 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:27.151285887 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.152504921 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.152537107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.152662039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.157433987 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.167344093 CEST	59755	465	192.168.2.7	216.230.229.247
Jun 4, 2024 12:43:27.172491074 CEST	465	59755	216.230.229.247	192.168.2.7
Jun 4, 2024 12:43:27.172564983 CEST	59755	465	192.168.2.7	216.230.229.247
Jun 4, 2024 12:43:27.172730923 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.176830053 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.176831961 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.176981926 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:27.178098917 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:27.179116011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.179348946 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:27.179506063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.184007883 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.187169075 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.187346935 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:27.187346935 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.187586069 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.187900066 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.188792944 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:27.189251900 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:27.189862013 CEST	59756	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:27.191433907 CEST	59757	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:27.191922903 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.192094088 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.192224026 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:27.192312956 CEST	59760	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:27.192315102 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.192437887 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.192488909 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.192497015 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:27.192771912 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.193633080 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:27.194139004 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:27.194710016 CEST	587	59756	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:27.194777966 CEST	59756	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:27.195039988 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.195887089 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.196157932 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.196376085 CEST	587	59757	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:27.196432114 CEST	59757	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:27.196516037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.196790934 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.196854115 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.196927071 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.196949959 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.196978092 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.197134018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.197149992 CEST	587	59760	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:27.197200060 CEST	59760	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:27.197247982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.199558973 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.199759007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.201006889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.201848984 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.202141047 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.213305950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.213305950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.218226910 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.221441984 CEST	59761	587	192.168.2.7	52.101.73.24
Jun 4, 2024 12:43:27.223690987 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:27.223798037 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:27.224396944 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:27.224415064 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:27.224432945 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:27.224446058 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:27.224472046 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:27.224492073 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:27.224580050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.226308107 CEST	587	59761	52.101.73.24	192.168.2.7
Jun 4, 2024 12:43:27.226397038 CEST	59761	587	192.168.2.7	52.101.73.24
Jun 4, 2024 12:43:27.226397038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.229486942 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.229585886 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.231573105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.231832027 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:27.236757994 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:27.236937046 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:27.236951113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.239341974 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.239495993 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.244029999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.244029999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.249394894 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.250675917 CEST	587	50049	103.145.30.229	192.168.2.7
Jun 4, 2024 12:43:27.250782967 CEST	50049	587	192.168.2.7	103.145.30.229
Jun 4, 2024 12:43:27.250782967 CEST	50049	587	192.168.2.7	103.145.30.229
Jun 4, 2024 12:43:27.251497030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.255739927 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.255765915 CEST	587	50049	103.145.30.229	192.168.2.7
Jun 4, 2024 12:43:27.256504059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.261496067 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.285402060 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:27.285509109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.300231934 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:27.300403118 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.303833008 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.305259943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.307274103 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.307394981 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:27.307462931 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:27.308337927 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.308459997 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.309014082 CEST	59763	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:27.312228918 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.312254906 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:27.312308073 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:27.313211918 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.313266993 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.313836098 CEST	587	59763	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:27.313900948 CEST	59763	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:27.314023972 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.317058086 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.317140102 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.317280054 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.319236994 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:27.319399118 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.321372032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.321408987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.322048903 CEST	59765	587	192.168.2.7	208.80.204.162
Jun 4, 2024 12:43:27.322777033 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.324347019 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.324486017 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.325002909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.325036049 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.326498985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.326889038 CEST	587	59765	208.80.204.162	192.168.2.7
Jun 4, 2024 12:43:27.326941967 CEST	59765	587	192.168.2.7	208.80.204.162
Jun 4, 2024 12:43:27.327115059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.329950094 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.333060980 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:27.335263968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.335299015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.340178013 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.340923071 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:27.341098070 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.342467070 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.342505932 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.347353935 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.348752022 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:27.364017010 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:27.364234924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.364363909 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.364363909 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.366261959 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.368951082 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:27.369146109 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.369214058 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:27.369292021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.374442101 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.395593882 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:27.415584087 CEST	587	59745	172.65.182.103	192.168.2.7
Jun 4, 2024 12:43:27.415654898 CEST	59745	587	192.168.2.7	172.65.182.103
Jun 4, 2024 12:43:27.415795088 CEST	59745	587	192.168.2.7	172.65.182.103
Jun 4, 2024 12:43:27.415832996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.420938969 CEST	587	59745	172.65.182.103	192.168.2.7
Jun 4, 2024 12:43:27.432183981 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:27.432532072 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.433881998 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.433916092 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.434837103 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.435472965 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:27.435620070 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:27.437999010 CEST	59767	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:27.438822985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.440283060 CEST	59768	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:27.440382004 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:27.440462112 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:27.442537069 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:27.442923069 CEST	587	59767	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:27.443135023 CEST	59767	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:27.443677902 CEST	64339	587	192.168.2.7	160.119.252.132
Jun 4, 2024 12:43:27.443860054 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.444689035 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.445102930 CEST	587	59768	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:27.445162058 CEST	59768	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:27.445661068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.445831060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.446927071 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.447021008 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.449105978 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.449173927 CEST	587	64339	160.119.252.132	192.168.2.7
Jun 4, 2024 12:43:27.449228048 CEST	64339	587	192.168.2.7	160.119.252.132
Jun 4, 2024 12:43:27.449810028 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.449837923 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.449853897 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.449871063 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.449891090 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.449915886 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.449984074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.450305939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.450334072 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.450345039 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.450357914 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.450427055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.450427055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.450437069 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.450491905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.450514078 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.451925993 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.452732086 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.452812910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.454530001 CEST	59769	587	192.168.2.7	217.76.151.9
Jun 4, 2024 12:43:27.455013990 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.455037117 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.455405951 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.455430031 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.455480099 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:27.455508947 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:27.455552101 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:27.455566883 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:27.455585003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.455585003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.455585003 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:27.455620050 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:27.455689907 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.457792044 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.458228111 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:27.458760023 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.459366083 CEST	587	59769	217.76.151.9	192.168.2.7
Jun 4, 2024 12:43:27.459420919 CEST	59769	587	192.168.2.7	217.76.151.9
Jun 4, 2024 12:43:27.459553003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.460783958 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.460808992 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.463041067 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:27.463057041 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:27.463105917 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:27.463216066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.463666916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.463759899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.464025974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.468065023 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.468580008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.473706007 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:27.483411074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.483459949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.488300085 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.488733053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.488780022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.489339113 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:27.489506006 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.493721008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.495565891 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:27.495959997 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.496036053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.499361992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.499406099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.500493050 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:27.500554085 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:27.500646114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.500920057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.504306078 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.504971981 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.504995108 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:27.509720087 CEST	587	59718	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:27.509959936 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.515142918 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.515151978 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.515284061 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.520387888 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.533596039 CEST	587	59733	210.59.228.45	192.168.2.7
Jun 4, 2024 12:43:27.533806086 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.536199093 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.543256998 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:27.543354988 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.549465895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.549516916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.550178051 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.551841021 CEST	59718	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:27.553102016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.555222988 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.555484056 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.555763006 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.557521105 CEST	587	59748	163.44.185.233	192.168.2.7
Jun 4, 2024 12:43:27.557573080 CEST	59748	587	192.168.2.7	163.44.185.233
Jun 4, 2024 12:43:27.557641983 CEST	59748	587	192.168.2.7	163.44.185.233
Jun 4, 2024 12:43:27.557674885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.558877945 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.560580969 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:27.564706087 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.564722061 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.564735889 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:27.564784050 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.564798117 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.564806938 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.564831018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.564896107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.564934969 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.565893888 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:27.566251993 CEST	587	59748	163.44.185.233	192.168.2.7
Jun 4, 2024 12:43:27.568279982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.568346024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.568546057 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:27.568605900 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:27.568737984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.568948984 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:27.568974018 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.569080114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.569133997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.569303989 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.569350958 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.569402933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.569402933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.569416046 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.569441080 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.569456100 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.569468975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.569489956 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.569519997 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.569582939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.570162058 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:27.570192099 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.570218086 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.570235968 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.570327044 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.572307110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.572922945 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:27.572973013 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:27.573050022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.575197935 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.575934887 CEST	59777	587	192.168.2.7	79.170.40.4
Jun 4, 2024 12:43:27.576370001 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.577167988 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.578227043 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:27.578253031 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.578282118 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:27.578368902 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.581553936 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.581573009 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.582982063 CEST	587	59777	79.170.40.4	192.168.2.7
Jun 4, 2024 12:43:27.583076954 CEST	59777	587	192.168.2.7	79.170.40.4
Jun 4, 2024 12:43:27.583096027 CEST	59733	587	192.168.2.7	210.59.228.45
Jun 4, 2024 12:43:27.583146095 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:27.583630085 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.585027933 CEST	59778	465	192.168.2.7	89.42.218.97
Jun 4, 2024 12:43:27.585467100 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.587975979 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:27.588067055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.588553905 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.588578939 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.588603973 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.588648081 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.588680029 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.588680029 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.588716030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.590620041 CEST	465	59778	89.42.218.97	192.168.2.7
Jun 4, 2024 12:43:27.590673923 CEST	59778	465	192.168.2.7	89.42.218.97
Jun 4, 2024 12:43:27.590704918 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.592911005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.593681097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.595803022 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.597596884 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:27.597845078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.607631922 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.607726097 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.612653971 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.614321947 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:27.614321947 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.614768982 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.630258083 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:27.632674932 CEST	59779	587	192.168.2.7	192.124.249.56
Jun 4, 2024 12:43:27.639039993 CEST	587	59779	192.124.249.56	192.168.2.7
Jun 4, 2024 12:43:27.639110088 CEST	59779	587	192.168.2.7	192.124.249.56
Jun 4, 2024 12:43:27.639137983 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.645576954 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:27.648061991 CEST	59780	465	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:27.652970076 CEST	465	59780	199.59.243.225	192.168.2.7
Jun 4, 2024 12:43:27.653033018 CEST	59780	465	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:27.653053999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.658293009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.661211014 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.671292067 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.671420097 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:27.671478033 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.671690941 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.671746016 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.671998978 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.672132969 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.674176931 CEST	59782	587	192.168.2.7	199.34.228.151
Jun 4, 2024 12:43:27.678194046 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:27.678241968 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:27.678257942 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.678289890 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.678313971 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.678379059 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.678410053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.678597927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.678626060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.678797960 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.679034948 CEST	587	59782	199.34.228.151	192.168.2.7
Jun 4, 2024 12:43:27.679096937 CEST	59782	587	192.168.2.7	199.34.228.151
Jun 4, 2024 12:43:27.679126978 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.683465004 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.895612001 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.920672894 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.920725107 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.920790911 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:27.920803070 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.920815945 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.920874119 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.920892000 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.920908928 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.920974970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.920991898 CEST	587	59754	62.149.128.166	192.168.2.7
Jun 4, 2024 12:43:27.921004057 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.921041012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.921086073 CEST	59754	587	192.168.2.7	62.149.128.166
Jun 4, 2024 12:43:27.921097040 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.921097040 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.921133041 CEST	59754	587	192.168.2.7	62.149.128.166
Jun 4, 2024 12:43:27.921139002 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.921164989 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.921179056 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:27.921257973 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.921315908 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.921328068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.921374083 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.921437979 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.921463966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.921669960 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.921799898 CEST	59783	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.921941042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.921968937 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.921998978 CEST	587	59757	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:27.922046900 CEST	59757	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:27.922086000 CEST	59757	587	192.168.2.7	120.50.131.112
Jun 4, 2024 12:43:27.922095060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.922172070 CEST	587	59765	208.80.204.162	192.168.2.7
Jun 4, 2024 12:43:27.922257900 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.922333956 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:27.922350883 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:27.922367096 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:27.922384977 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:27.922405005 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:27.922437906 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.922485113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.922487974 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:27.922544956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.923170090 CEST	59784	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:27.923417091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.923443079 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.926347017 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.926361084 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.926373959 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.926697016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.926722050 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.926932096 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.926945925 CEST	587	59754	62.149.128.166	192.168.2.7
Jun 4, 2024 12:43:27.926959038 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.926973104 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.926995039 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.927010059 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.927342892 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.927361012 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.927372932 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.927436113 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.927450895 CEST	587	59783	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.927475929 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.927488089 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.927527905 CEST	59783	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.927607059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.927812099 CEST	587	59757	120.50.131.112	192.168.2.7
Jun 4, 2024 12:43:27.927824974 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.927836895 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.927850962 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.927865982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.928320885 CEST	587	59784	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:27.931091070 CEST	59784	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:27.931230068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.931401014 CEST	59785	587	192.168.2.7	80.158.67.40
Jun 4, 2024 12:43:27.936276913 CEST	587	59785	80.158.67.40	192.168.2.7
Jun 4, 2024 12:43:27.938256025 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:27.938338041 CEST	59785	587	192.168.2.7	80.158.67.40
Jun 4, 2024 12:43:27.938343048 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:27.938375950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.938571930 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:27.938599110 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:27.938612938 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:27.938648939 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:27.938714981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.938829899 CEST	59786	587	192.168.2.7	3.64.163.50
Jun 4, 2024 12:43:27.940465927 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.942440033 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:27.942473888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.943202019 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.943397045 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.943598986 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:27.943622112 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.943754911 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.943799973 CEST	587	59786	3.64.163.50	192.168.2.7
Jun 4, 2024 12:43:27.943814039 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.943871021 CEST	59786	587	192.168.2.7	3.64.163.50
Jun 4, 2024 12:43:27.943953037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.944009066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.944057941 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.944084883 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.944103956 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.944134951 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:27.944154024 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.944155931 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.944184065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.944184065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.944185019 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.944236994 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.944247961 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.944247961 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.944269896 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.944308043 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.944358110 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.944544077 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.945147991 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.945563078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.945596933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.946197987 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.946203947 CEST	59787	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:27.946244955 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.946293116 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.946367025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.946417093 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.946638107 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.948400021 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.948429108 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.948565960 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:27.948596001 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:27.948932886 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.948947906 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.948960066 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.949017048 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:27.949079990 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.949695110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.949708939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.949723005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.949898958 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.949912071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.949924946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.950083017 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.950130939 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.950155973 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.951380014 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.951394081 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.951419115 CEST	587	59787	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:27.951431990 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.951447964 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.951484919 CEST	59787	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:27.951535940 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.951589108 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.951612949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.951704979 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.952155113 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.952188015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.953766108 CEST	59789	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:27.953794003 CEST	59790	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:27.958353043 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.959228039 CEST	587	59789	142.250.153.26	192.168.2.7
Jun 4, 2024 12:43:27.959243059 CEST	587	59790	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:27.959296942 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.959300041 CEST	59789	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:27.959315062 CEST	59790	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:27.959374905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.959408045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.964293957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.964308023 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.964387894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.964409113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.966640949 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.966758966 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.970911026 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.971364975 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.973494053 CEST	59791	465	192.168.2.7	64.190.63.222
Jun 4, 2024 12:43:27.973711014 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:27.973711967 CEST	59765	587	192.168.2.7	208.80.204.162
Jun 4, 2024 12:43:27.979113102 CEST	465	59791	64.190.63.222	192.168.2.7
Jun 4, 2024 12:43:27.981672049 CEST	59791	465	192.168.2.7	64.190.63.222
Jun 4, 2024 12:43:27.981719017 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.986799002 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.986972094 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.986987114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.989348888 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:27.989352942 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.989353895 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:27.989358902 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:27.992393970 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.993227005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.993330002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.994266033 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:27.994339943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.994381905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.998230934 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:27.998430014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.998450041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:27.999181032 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.004527092 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.005537033 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.005568027 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.009958982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.012176037 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.024777889 CEST	587	59763	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:28.030257940 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.035223007 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.036317110 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.036564112 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.072887897 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.075176954 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.075196981 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.075251102 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.075309992 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.075345993 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.075398922 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.075419903 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:28.075706005 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:28.075784922 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:28.075818062 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.076234102 CEST	59792	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:28.077486992 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.078346968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.078372955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.082376003 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.082391024 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:28.082406044 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:28.082946062 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:28.082959890 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.082974911 CEST	587	59792	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:28.083115101 CEST	59763	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:28.083146095 CEST	59792	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:28.083971024 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.084064960 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.084634066 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.086673975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.086694956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.090312004 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.090327024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.090473890 CEST	59793	465	192.168.2.7	51.81.206.108
Jun 4, 2024 12:43:28.090842009 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:28.090976954 CEST	59794	587	192.168.2.7	40.85.218.2
Jun 4, 2024 12:43:28.090998888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.091551065 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.097677946 CEST	465	59793	51.81.206.108	192.168.2.7
Jun 4, 2024 12:43:28.097696066 CEST	587	59794	40.85.218.2	192.168.2.7
Jun 4, 2024 12:43:28.097729921 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.097778082 CEST	59793	465	192.168.2.7	51.81.206.108
Jun 4, 2024 12:43:28.097836018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.097836971 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.097846985 CEST	59794	587	192.168.2.7	40.85.218.2
Jun 4, 2024 12:43:28.097965002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.098032951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.098244905 CEST	59795	587	192.168.2.7	109.168.108.106
Jun 4, 2024 12:43:28.102464914 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:28.102919102 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.103043079 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.103059053 CEST	587	59795	109.168.108.106	192.168.2.7
Jun 4, 2024 12:43:28.103171110 CEST	59795	587	192.168.2.7	109.168.108.106
Jun 4, 2024 12:43:28.103265047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.108258009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.109879017 CEST	59796	587	192.168.2.7	62.24.202.42
Jun 4, 2024 12:43:28.114306927 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.114712000 CEST	587	59796	62.24.202.42	192.168.2.7
Jun 4, 2024 12:43:28.114800930 CEST	59796	587	192.168.2.7	62.24.202.42
Jun 4, 2024 12:43:28.114886045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.115164995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.120827913 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.129961967 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.130775928 CEST	59797	465	192.168.2.7	81.28.232.69
Jun 4, 2024 12:43:28.135689974 CEST	465	59797	81.28.232.69	192.168.2.7
Jun 4, 2024 12:43:28.136194944 CEST	59797	465	192.168.2.7	81.28.232.69
Jun 4, 2024 12:43:28.136235952 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.142402887 CEST	587	59763	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:28.144915104 CEST	59763	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:28.145066023 CEST	59763	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:28.145104885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.145605087 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:28.145647049 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:28.149949074 CEST	587	59763	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:28.150217056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.151797056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.151822090 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.155507088 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.155533075 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.156634092 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.161211014 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.161725998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.163934946 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.163994074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.170144081 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.174995899 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:28.175076962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.177385092 CEST	587	59777	79.170.40.4	192.168.2.7
Jun 4, 2024 12:43:28.177504063 CEST	59777	587	192.168.2.7	79.170.40.4
Jun 4, 2024 12:43:28.178014994 CEST	59777	587	192.168.2.7	79.170.40.4
Jun 4, 2024 12:43:28.178035975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.182931900 CEST	587	59777	79.170.40.4	192.168.2.7
Jun 4, 2024 12:43:28.182945967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.192398071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.193345070 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:28.193624973 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.193794012 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:28.194315910 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:28.195164919 CEST	59798	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:28.195519924 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.195962906 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:28.196024895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.196052074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.196079016 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.196274042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.197814941 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.197910070 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.198457003 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:28.198477030 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.198699951 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.198908091 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.198976994 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:28.199018955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.199080944 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.199251890 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.199369907 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.199454069 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.200043917 CEST	587	59798	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:28.200119972 CEST	59798	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:28.200181007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.200351000 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.200437069 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.200498104 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.200813055 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.200866938 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:28.200906992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.200980902 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.202914000 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.203983068 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.205255985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.206043005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.209088087 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.209248066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.210199118 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.210319996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.211170912 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.211200953 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.213186026 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.213277102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.215270996 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.216093063 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.223308086 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.223395109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.223776102 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:28.228157997 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.231148005 CEST	59801	587	192.168.2.7	81.169.145.90
Jun 4, 2024 12:43:28.236051083 CEST	587	59801	81.169.145.90	192.168.2.7
Jun 4, 2024 12:43:28.236166000 CEST	59801	587	192.168.2.7	81.169.145.90
Jun 4, 2024 12:43:28.236253023 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.239396095 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.239398003 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.239411116 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:28.239521027 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.239532948 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.241281986 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.253623962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.253667116 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.255026102 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.255058050 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.255059958 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.258616924 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.279094934 CEST	59802	587	192.168.2.7	172.67.186.83
Jun 4, 2024 12:43:28.283937931 CEST	587	59802	172.67.186.83	192.168.2.7
Jun 4, 2024 12:43:28.284022093 CEST	59802	587	192.168.2.7	172.67.186.83
Jun 4, 2024 12:43:28.284097910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.309933901 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:28.310051918 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.314999104 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.315627098 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.315749884 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:28.315876961 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.316207886 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:28.316884041 CEST	59803	465	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:28.318156958 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:28.318177938 CEST	59804	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.318249941 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.320230007 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:28.320296049 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:28.320307970 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:28.320317984 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:28.320348024 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:28.320389986 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:28.320527077 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.320631981 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:28.320672035 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.321048021 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:28.321765900 CEST	465	59803	173.194.76.27	192.168.2.7
Jun 4, 2024 12:43:28.321835041 CEST	59803	465	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:28.321856976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.322648048 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:28.322746992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.323075056 CEST	587	59804	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:28.323132038 CEST	59804	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.323163986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.325412989 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.325476885 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.326951981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.327208996 CEST	59805	465	192.168.2.7	142.250.150.27
Jun 4, 2024 12:43:28.328425884 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.328625917 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.328660011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.331608057 CEST	59806	587	192.168.2.7	154.53.51.218
Jun 4, 2024 12:43:28.331999063 CEST	465	59805	142.250.150.27	192.168.2.7
Jun 4, 2024 12:43:28.332223892 CEST	59805	465	192.168.2.7	142.250.150.27
Jun 4, 2024 12:43:28.332285881 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.332878113 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:28.332953930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.333472967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.336464882 CEST	587	59806	154.53.51.218	192.168.2.7
Jun 4, 2024 12:43:28.336515903 CEST	59806	587	192.168.2.7	154.53.51.218
Jun 4, 2024 12:43:28.336581945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.336663961 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.336841106 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.337918997 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.339179039 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.339272976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.340526104 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.340536118 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.340575933 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.340627909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.340631008 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.340646029 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.340656996 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.340683937 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.340758085 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.341147900 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.341156960 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.341197968 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.341269970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.341881037 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.345264912 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.345299006 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.345309019 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.345325947 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.345335007 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.345344067 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.345365047 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.345472097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.345490932 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.346308947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.346434116 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.346443892 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.347454071 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.347464085 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.347497940 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.347582102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.348057032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.348087072 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.350500107 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.350552082 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.352547884 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.352992058 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.353259087 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:28.353349924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.356817961 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.356842041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.361685038 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.364389896 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:28.364402056 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:28.364526987 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:28.370676041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.370722055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.375660896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.378739119 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.378854036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.380055904 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:28.380057096 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.380229950 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.383727074 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.384236097 CEST	59807	465	192.168.2.7	87.54.32.247
Jun 4, 2024 12:43:28.389137030 CEST	465	59807	87.54.32.247	192.168.2.7
Jun 4, 2024 12:43:28.389194012 CEST	59807	465	192.168.2.7	87.54.32.247
Jun 4, 2024 12:43:28.389286041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.391038895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.391067028 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.391714096 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.391788960 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.395617008 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:28.395921946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.396636963 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.426877022 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.434972048 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.435424089 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:28.435564041 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:28.436424971 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:28.436753035 CEST	59809	587	192.168.2.7	114.179.184.189
Jun 4, 2024 12:43:28.437567949 CEST	59810	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:28.438189983 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:28.438869953 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.438903093 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.438990116 CEST	59812	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:28.440342903 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:28.440385103 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:28.441402912 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:28.441482067 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:28.441519976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.441745043 CEST	587	59809	114.179.184.189	192.168.2.7
Jun 4, 2024 12:43:28.441803932 CEST	59809	587	192.168.2.7	114.179.184.189
Jun 4, 2024 12:43:28.441873074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.442403078 CEST	587	59810	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:28.442502975 CEST	59810	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:28.442646980 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.443028927 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:28.443099022 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:28.443351984 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.443372011 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.443382978 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.443394899 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.443416119 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.443435907 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:28.443435907 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:28.443507910 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.443897963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.443937063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.443965912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.443989992 CEST	587	59812	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:28.443998098 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.444041014 CEST	59812	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:28.444104910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.444159985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.446029902 CEST	59813	587	192.168.2.7	204.141.43.44
Jun 4, 2024 12:43:28.446707964 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:28.446913004 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.446990967 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.447575092 CEST	59814	465	192.168.2.7	74.125.200.27
Jun 4, 2024 12:43:28.448813915 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.448920012 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.449146986 CEST	59815	465	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:28.449253082 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.451024055 CEST	587	59813	204.141.43.44	192.168.2.7
Jun 4, 2024 12:43:28.451093912 CEST	59813	587	192.168.2.7	204.141.43.44
Jun 4, 2024 12:43:28.451153994 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.452442884 CEST	465	59814	74.125.200.27	192.168.2.7
Jun 4, 2024 12:43:28.452498913 CEST	59814	465	192.168.2.7	74.125.200.27
Jun 4, 2024 12:43:28.452579021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.454016924 CEST	465	59815	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:28.454093933 CEST	59815	465	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:28.454262972 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.454293966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.454335928 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.456403017 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.459244967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.472728014 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:28.472740889 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:28.472784996 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:28.472796917 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:28.472806931 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:28.472918987 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:28.472918987 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:28.472946882 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.477889061 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.477930069 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.483026981 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.483037949 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.483088017 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.483180046 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.488114119 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.488125086 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.488135099 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.488163948 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.488244057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.489382029 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:28.489399910 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:28.489401102 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:28.493165016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.501871109 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:28.502063990 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.504816055 CEST	587	59769	217.76.151.9	192.168.2.7
Jun 4, 2024 12:43:28.505187035 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.505681992 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.510068893 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.520757914 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:28.521178961 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.521502018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.551867008 CEST	59769	587	192.168.2.7	217.76.151.9
Jun 4, 2024 12:43:28.551911116 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:28.557192087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.557310104 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.557898998 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.558084965 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:28.559297085 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:28.559581041 CEST	59817	587	192.168.2.7	114.179.184.189
Jun 4, 2024 12:43:28.560426950 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.562189102 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.562796116 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.562937975 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:28.564228058 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:28.564414978 CEST	587	59817	114.179.184.189	192.168.2.7
Jun 4, 2024 12:43:28.564497948 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:28.564500093 CEST	59817	587	192.168.2.7	114.179.184.189
Jun 4, 2024 12:43:28.564590931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.564632893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.565272093 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.565324068 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.565373898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.567538023 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.570213079 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.570971966 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:28.573990107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.575510025 CEST	465	59791	64.190.63.222	192.168.2.7
Jun 4, 2024 12:43:28.575620890 CEST	59791	465	192.168.2.7	64.190.63.222
Jun 4, 2024 12:43:28.575620890 CEST	59791	465	192.168.2.7	64.190.63.222
Jun 4, 2024 12:43:28.575678110 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.576206923 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.576303005 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.578838110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.580518961 CEST	465	59791	64.190.63.222	192.168.2.7
Jun 4, 2024 12:43:28.581243992 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.596196890 CEST	59819	587	192.168.2.7	87.238.28.12
Jun 4, 2024 12:43:28.601110935 CEST	587	59819	87.238.28.12	192.168.2.7
Jun 4, 2024 12:43:28.601166964 CEST	59819	587	192.168.2.7	87.238.28.12
Jun 4, 2024 12:43:28.601246119 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.602610111 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.602662086 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.607590914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.614396095 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:28.630045891 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.650204897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.654243946 CEST	59820	587	192.168.2.7	208.91.197.132
Jun 4, 2024 12:43:28.659182072 CEST	587	59820	208.91.197.132	192.168.2.7
Jun 4, 2024 12:43:28.659231901 CEST	59820	587	192.168.2.7	208.91.197.132
Jun 4, 2024 12:43:28.659272909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.664602995 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.664971113 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:28.667606115 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:28.667686939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.669886112 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:28.669940948 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:28.669979095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.672565937 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.675204992 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.677879095 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.678730965 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.679932117 CEST	59822	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:28.680578947 CEST	59823	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.680926085 CEST	59824	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.683578968 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.684818983 CEST	587	59822	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:28.684928894 CEST	59822	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:28.685014963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.685484886 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:28.685537100 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:28.685601950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.685601950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.685602903 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:28.685601950 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:28.685616970 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:28.685631037 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:28.685642004 CEST	587	59823	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:28.685669899 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:28.685709000 CEST	59823	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.685722113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.685766935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.685789108 CEST	587	59824	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:28.685821056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.685832977 CEST	59824	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.685883045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.690534115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.690762043 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.690783978 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.690884113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.691385984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.691411018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.692637920 CEST	59718	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:28.692682981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.695527077 CEST	59825	465	192.168.2.7	92.204.80.0
Jun 4, 2024 12:43:28.696470976 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.697815895 CEST	587	59718	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:28.697865009 CEST	59718	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:28.698472977 CEST	587	59796	62.24.202.42	192.168.2.7
Jun 4, 2024 12:43:28.698529005 CEST	59796	587	192.168.2.7	62.24.202.42
Jun 4, 2024 12:43:28.698563099 CEST	59796	587	192.168.2.7	62.24.202.42
Jun 4, 2024 12:43:28.698575974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.700504065 CEST	465	59825	92.204.80.0	192.168.2.7
Jun 4, 2024 12:43:28.700552940 CEST	59825	465	192.168.2.7	92.204.80.0
Jun 4, 2024 12:43:28.700601101 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.703744888 CEST	587	59796	62.24.202.42	192.168.2.7
Jun 4, 2024 12:43:28.703762054 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.708125114 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:28.709796906 CEST	587	59795	109.168.108.106	192.168.2.7
Jun 4, 2024 12:43:28.709942102 CEST	59795	587	192.168.2.7	109.168.108.106
Jun 4, 2024 12:43:28.709942102 CEST	59795	587	192.168.2.7	109.168.108.106
Jun 4, 2024 12:43:28.709942102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.711668015 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:28.711678982 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:28.711689949 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:28.711702108 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:28.711729050 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:28.711764097 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:28.711817980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.714844942 CEST	587	59795	109.168.108.106	192.168.2.7
Jun 4, 2024 12:43:28.714906931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.714929104 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.714968920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.716650009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.716821909 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.719274044 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.719285011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.719894886 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.724263906 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.734764099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.734775066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.739650965 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.741657019 CEST	59826	465	192.168.2.7	202.50.90.1
Jun 4, 2024 12:43:28.742450953 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:28.746325016 CEST	465	59797	81.28.232.69	192.168.2.7
Jun 4, 2024 12:43:28.746393919 CEST	59797	465	192.168.2.7	81.28.232.69
Jun 4, 2024 12:43:28.746433973 CEST	59797	465	192.168.2.7	81.28.232.69
Jun 4, 2024 12:43:28.746464014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.746601105 CEST	465	59826	202.50.90.1	192.168.2.7
Jun 4, 2024 12:43:28.746711016 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.747318029 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:28.747370005 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:28.747400045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.748523951 CEST	59826	465	192.168.2.7	202.50.90.1
Jun 4, 2024 12:43:28.748970985 CEST	587	59783	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.749049902 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.751354933 CEST	465	59797	81.28.232.69	192.168.2.7
Jun 4, 2024 12:43:28.751739979 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.752326012 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.752393007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.753948927 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.801984072 CEST	59783	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.801999092 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.802145004 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.804402113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.804869890 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:28.805658102 CEST	59829	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.805957079 CEST	59828	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.809727907 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:28.810579062 CEST	587	59829	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:28.810667038 CEST	59829	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.810739040 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.810822964 CEST	587	59828	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:28.814151049 CEST	59828	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:28.814204931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.817949057 CEST	59733	587	192.168.2.7	210.59.228.45
Jun 4, 2024 12:43:28.818063021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.820050955 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.820341110 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.820352077 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.820363045 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.820374012 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.820403099 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.820430040 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.820458889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.820458889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.820496082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.821005106 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.821017027 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.821053028 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.821131945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.822187901 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.825900078 CEST	587	59733	210.59.228.45	192.168.2.7
Jun 4, 2024 12:43:28.825967073 CEST	59733	587	192.168.2.7	210.59.228.45
Jun 4, 2024 12:43:28.826298952 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.826456070 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.826611042 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.826622963 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.826670885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.826670885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.826675892 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.826723099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.826723099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.826746941 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.826792955 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.826832056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.827246904 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.827255964 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.827299118 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.827342033 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.828028917 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.828337908 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.828346968 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.828350067 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.828830957 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.828840017 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.830060959 CEST	587	59801	81.169.145.90	192.168.2.7
Jun 4, 2024 12:43:28.830151081 CEST	59801	587	192.168.2.7	81.169.145.90
Jun 4, 2024 12:43:28.830193996 CEST	59801	587	192.168.2.7	81.169.145.90
Jun 4, 2024 12:43:28.830205917 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.834413052 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.834422112 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.834553003 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.834562063 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.834566116 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.834975958 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.835144997 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.837928057 CEST	587	59801	81.169.145.90	192.168.2.7
Jun 4, 2024 12:43:28.837939024 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.845532894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.845685959 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.850397110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.850565910 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.866331100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.866355896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.871239901 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.884422064 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:28.886214018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.891053915 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.926923990 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:28.929230928 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.929373980 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:28.929645061 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.929822922 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:28.936784983 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:28.936795950 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.939642906 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:28.941054106 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.942823887 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.951317072 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:28.952415943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.955348969 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.955379009 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.955471992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.955471992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.955485106 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.955527067 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.960371971 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.963890076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.966700077 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.966711044 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:28.966784000 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:28.966856956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.972404957 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.976170063 CEST	59830	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:28.978924036 CEST	587	59806	154.53.51.218	192.168.2.7
Jun 4, 2024 12:43:28.980248928 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.981336117 CEST	587	59830	89.39.182.172	192.168.2.7
Jun 4, 2024 12:43:28.981401920 CEST	59830	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:28.981483936 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:28.987449884 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:28.989434004 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.005018950 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:29.011913061 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.012011051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.016879082 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.020854950 CEST	59806	587	192.168.2.7	154.53.51.218
Jun 4, 2024 12:43:29.041177034 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:29.041198015 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:29.041208029 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:29.041220903 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:29.041230917 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:29.041248083 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:29.041280985 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:29.041318893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.041318893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.041358948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.046336889 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:29.046396971 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.046406984 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.046493053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.049736023 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.050075054 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.050131083 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:29.050179005 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.050353050 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.054965019 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.054975986 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:29.054985046 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.055190086 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.056822062 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.056849003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.062177896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.067564964 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.071846008 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:29.071971893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.071971893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.072329044 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:29.072415113 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:29.072437048 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:29.072494030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.072551966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.072551966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.073012114 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:29.073060036 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:29.073117018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.074804068 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:29.074883938 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.077147007 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.077402115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.078241110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.087482929 CEST	59831	465	192.168.2.7	195.201.87.79
Jun 4, 2024 12:43:29.089049101 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:29.091010094 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.092339993 CEST	465	59831	195.201.87.79	192.168.2.7
Jun 4, 2024 12:43:29.092418909 CEST	59831	465	192.168.2.7	195.201.87.79
Jun 4, 2024 12:43:29.092580080 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.095901966 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.098889112 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:29.106482983 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.106509924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.111505985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.129995108 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:29.145679951 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:29.171053886 CEST	587	59820	208.91.197.132	192.168.2.7
Jun 4, 2024 12:43:29.171116114 CEST	59820	587	192.168.2.7	208.91.197.132
Jun 4, 2024 12:43:29.171219110 CEST	59820	587	192.168.2.7	208.91.197.132
Jun 4, 2024 12:43:29.171251059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.176377058 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:29.176429987 CEST	587	59820	208.91.197.132	192.168.2.7
Jun 4, 2024 12:43:29.176539898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.181499958 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.184791088 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.184995890 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:29.185014009 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.185342073 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:29.185671091 CEST	59765	587	192.168.2.7	208.80.204.162
Jun 4, 2024 12:43:29.190160036 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.190284014 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:29.190320015 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:29.190603018 CEST	587	59765	208.80.204.162	192.168.2.7
Jun 4, 2024 12:43:29.193383932 CEST	50042	465	192.168.2.7	113.23.205.39
Jun 4, 2024 12:43:29.193418026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.197242975 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.197304964 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.197359085 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.197372913 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.197396040 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.197457075 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.197557926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.197998047 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.198029995 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.198079109 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.198179007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.198431969 CEST	465	50042	113.23.205.39	192.168.2.7
Jun 4, 2024 12:43:29.198498964 CEST	50042	465	192.168.2.7	113.23.205.39
Jun 4, 2024 12:43:29.202761889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.202795982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.203125954 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.206290007 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:29.210011959 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:29.211282969 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:29.211368084 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:29.211844921 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.212152958 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.216825962 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.221282005 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.221308947 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.221551895 CEST	59833	587	192.168.2.7	52.101.73.22
Jun 4, 2024 12:43:29.223757982 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:29.226645947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.226697922 CEST	587	59833	52.101.73.22	192.168.2.7
Jun 4, 2024 12:43:29.226763010 CEST	59833	587	192.168.2.7	52.101.73.22
Jun 4, 2024 12:43:29.226824045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.255008936 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:29.255134106 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:29.255682945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.260644913 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.268313885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.268392086 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.273454905 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.301871061 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:29.311016083 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.311052084 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.311101913 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.311177015 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.311192036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.311228991 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.311479092 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.311543941 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:29.311604977 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:29.311646938 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.311775923 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:29.311845064 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.314346075 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:29.314459085 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.316216946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.316533089 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:29.316562891 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:29.316696882 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.316746950 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.317430019 CEST	50043	587	192.168.2.7	185.71.61.14
Jun 4, 2024 12:43:29.317472935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.322429895 CEST	587	50043	185.71.61.14	192.168.2.7
Jun 4, 2024 12:43:29.322495937 CEST	50043	587	192.168.2.7	185.71.61.14
Jun 4, 2024 12:43:29.322633982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.322757006 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:29.322845936 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.335922956 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.335952997 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.336024046 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.336024046 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.336035967 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.336086988 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.340939045 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.341221094 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.344093084 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.344093084 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.344139099 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:29.344302893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.349143028 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.364373922 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.364383936 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:29.364387989 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.364392996 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.364499092 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:29.364614010 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:29.370831966 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.370918036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.375828981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.395658016 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:29.426875114 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.432533979 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.445223093 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.445308924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.449440956 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.449579954 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.450329065 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.450421095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.454523087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.456475019 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:29.456588030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.461504936 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.489412069 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.489466906 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.501275063 CEST	59834	587	192.168.2.7	75.102.22.71
Jun 4, 2024 12:43:29.501470089 CEST	59835	465	192.168.2.7	67.205.22.228
Jun 4, 2024 12:43:29.502482891 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:29.502609968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.505007029 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.505007982 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:29.506256104 CEST	587	59834	75.102.22.71	192.168.2.7
Jun 4, 2024 12:43:29.506325006 CEST	465	59835	67.205.22.228	192.168.2.7
Jun 4, 2024 12:43:29.506325960 CEST	59834	587	192.168.2.7	75.102.22.71
Jun 4, 2024 12:43:29.506371975 CEST	59835	465	192.168.2.7	67.205.22.228
Jun 4, 2024 12:43:29.506391048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.506427050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.511650085 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.518345118 CEST	59836	587	192.168.2.7	89.40.173.57
Jun 4, 2024 12:43:29.523274899 CEST	587	59836	89.40.173.57	192.168.2.7
Jun 4, 2024 12:43:29.523338079 CEST	59836	587	192.168.2.7	89.40.173.57
Jun 4, 2024 12:43:29.523406029 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.544955969 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:29.545059919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.545063019 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:29.545109034 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:29.545181036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.549963951 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.550023079 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.550071955 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.550544024 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.550597906 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.551865101 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:29.555615902 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.555648088 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.565123081 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:29.565259933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.572463989 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.572531939 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.572618961 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.572657108 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.572668076 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.572688103 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.572700977 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.572864056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.573561907 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.573591948 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.573630095 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.573709011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.577832937 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.577883959 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.578700066 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.600863934 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:29.608808041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.610325098 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.610411882 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.610915899 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:29.613683939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.614453077 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:29.615282059 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.615782976 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:29.615892887 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:29.616583109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.641011000 CEST	587	59765	208.80.204.162	192.168.2.7
Jun 4, 2024 12:43:29.641134024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.645612955 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:29.646017075 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.648333073 CEST	59838	587	192.168.2.7	85.10.159.54
Jun 4, 2024 12:43:29.653260946 CEST	587	59838	85.10.159.54	192.168.2.7
Jun 4, 2024 12:43:29.653322935 CEST	59838	587	192.168.2.7	85.10.159.54
Jun 4, 2024 12:43:29.653362989 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.684201956 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.685101986 CEST	587	59765	208.80.204.162	192.168.2.7
Jun 4, 2024 12:43:29.685234070 CEST	59765	587	192.168.2.7	208.80.204.162
Jun 4, 2024 12:43:29.685235023 CEST	59765	587	192.168.2.7	208.80.204.162
Jun 4, 2024 12:43:29.685261965 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.685303926 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.685712099 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.685951948 CEST	59839	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:29.686017990 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:29.690264940 CEST	587	59765	208.80.204.162	192.168.2.7
Jun 4, 2024 12:43:29.690299988 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.690644979 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.690814972 CEST	587	59839	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:29.690850973 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:29.690994024 CEST	59839	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:29.691066027 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.694399118 CEST	59840	465	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:29.696126938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.699356079 CEST	465	59840	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:29.702152014 CEST	59840	465	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:29.702178001 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.709132910 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:29.710479021 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.710510969 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.710565090 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.710639954 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.714241028 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:29.715723991 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.715786934 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:29.715837002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.720942020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.804024935 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.804636002 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:29.804785013 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.809787989 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:29.809818983 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.811953068 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.812545061 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.812649965 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.812669039 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.815629005 CEST	59842	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:29.817760944 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.820693970 CEST	587	59842	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:29.820807934 CEST	59842	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:29.820875883 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.850361109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.850384951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.855288982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.864402056 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.864403009 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.902306080 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.933262110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.934885025 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:29.935203075 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.935717106 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:29.935738087 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.936320066 CEST	59843	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:29.936625004 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:29.936738968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.937036037 CEST	59844	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:29.937318087 CEST	59845	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:29.939816952 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:29.940115929 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.940677881 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:29.940732002 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.941262007 CEST	587	59843	89.39.182.172	192.168.2.7
Jun 4, 2024 12:43:29.941329956 CEST	59843	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:29.941384077 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.941634893 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.942040920 CEST	587	59844	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:29.942107916 CEST	59844	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:29.942138910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.942240000 CEST	587	59845	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:29.942368984 CEST	59845	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:29.943363905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.945317030 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.945406914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.946605921 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.947091103 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:29.947174072 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.947307110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.948260069 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.950314045 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.952037096 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.963938951 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:29.966186047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.971298933 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.982825994 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:29.982918024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:29.987839937 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:29.989378929 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:29.989381075 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:29.990118027 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.001238108 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.001280069 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.006190062 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.006244898 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.010729074 CEST	465	59835	67.205.22.228	192.168.2.7
Jun 4, 2024 12:43:30.010797977 CEST	59835	465	192.168.2.7	67.205.22.228
Jun 4, 2024 12:43:30.010822058 CEST	59835	465	192.168.2.7	67.205.22.228
Jun 4, 2024 12:43:30.010859013 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.014328003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.014352083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.015747070 CEST	465	59835	67.205.22.228	192.168.2.7
Jun 4, 2024 12:43:30.015777111 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.019195080 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.019268990 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.020629883 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:30.036261082 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:30.051490068 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.052067995 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.052761078 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.052817106 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.053208113 CEST	59846	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:30.056948900 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.057662964 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.057681084 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.058068037 CEST	587	59846	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:30.058136940 CEST	59846	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:30.058171988 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.066266060 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.066384077 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.070907116 CEST	587	59834	75.102.22.71	192.168.2.7
Jun 4, 2024 12:43:30.071002960 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.071327925 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.086508989 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.086601019 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.089469910 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:30.089541912 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.091573954 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.114445925 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.115330935 CEST	59834	587	192.168.2.7	75.102.22.71
Jun 4, 2024 12:43:30.130072117 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.130120993 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:30.138238907 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.175595999 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.176031113 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:30.176084995 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:30.176450014 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:30.176644087 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:30.180949926 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:30.181054115 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:30.181480885 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:30.181513071 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:30.182447910 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:30.182557106 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.186873913 CEST	59847	465	192.168.2.7	217.72.192.67
Jun 4, 2024 12:43:30.187417984 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.191792965 CEST	465	59847	217.72.192.67	192.168.2.7
Jun 4, 2024 12:43:30.191857100 CEST	59847	465	192.168.2.7	217.72.192.67
Jun 4, 2024 12:43:30.191941977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.194072962 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.194180012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.197040081 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.197146893 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.197259903 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.199043036 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.202219009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.210077047 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:30.210155964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.214998007 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.223860025 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:30.239358902 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.239531994 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.249324083 CEST	59848	587	192.168.2.7	103.235.106.10
Jun 4, 2024 12:43:30.254225016 CEST	587	59848	103.235.106.10	192.168.2.7
Jun 4, 2024 12:43:30.254324913 CEST	59848	587	192.168.2.7	103.235.106.10
Jun 4, 2024 12:43:30.254369974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.254992008 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:30.259444952 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.297233105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.297406912 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.297456026 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.297512054 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:30.298264980 CEST	59849	587	192.168.2.7	40.85.218.2
Jun 4, 2024 12:43:30.302331924 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.302360058 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.302373886 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:30.303246975 CEST	587	59849	40.85.218.2	192.168.2.7
Jun 4, 2024 12:43:30.303308964 CEST	59849	587	192.168.2.7	40.85.218.2
Jun 4, 2024 12:43:30.303345919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.311525106 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.311598063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.313096046 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.313194036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.315819025 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.315905094 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.316572905 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.320756912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.361321926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.361543894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.364362955 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.364367008 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.364367008 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.366405010 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.409707069 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:30.414607048 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:30.414681911 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:30.414751053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.425503969 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:30.425538063 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:30.425554037 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:30.425584078 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.425609112 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:30.425643921 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.425677061 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.425991058 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.426084995 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.426620960 CEST	59851	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:30.427087069 CEST	64334	465	192.168.2.7	185.15.192.58
Jun 4, 2024 12:43:30.427119017 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.430620909 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.430829048 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.430892944 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.431154966 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:30.431248903 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.431502104 CEST	587	59851	52.223.34.187	192.168.2.7
Jun 4, 2024 12:43:30.431561947 CEST	59851	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:30.431624889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.432228088 CEST	465	64334	185.15.192.58	192.168.2.7
Jun 4, 2024 12:43:30.432281017 CEST	64334	465	192.168.2.7	185.15.192.58
Jun 4, 2024 12:43:30.432543039 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:30.432637930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.436171055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.437572002 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.457161903 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:30.457324982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.473788023 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:30.473788023 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:30.473838091 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:30.505021095 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:30.506154060 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.507316113 CEST	59852	587	192.168.2.7	144.76.112.115
Jun 4, 2024 12:43:30.512212038 CEST	587	59852	144.76.112.115	192.168.2.7
Jun 4, 2024 12:43:30.512290001 CEST	59852	587	192.168.2.7	144.76.112.115
Jun 4, 2024 12:43:30.512388945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.517410994 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.517438889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.517467976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.522406101 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.525535107 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:30.530488014 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:30.530564070 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:30.530590057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.535819054 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.542304993 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.542475939 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:30.542527914 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:30.542578936 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:30.542620897 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.542684078 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:30.542718887 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.544852972 CEST	59854	465	192.168.2.7	69.49.115.40
Jun 4, 2024 12:43:30.547461987 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:30.547530890 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:30.547574997 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:30.547588110 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.547763109 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:30.547820091 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.549812078 CEST	465	59854	69.49.115.40	192.168.2.7
Jun 4, 2024 12:43:30.549865007 CEST	59854	465	192.168.2.7	69.49.115.40
Jun 4, 2024 12:43:30.549940109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.558725119 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.558820009 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.559725046 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.559809923 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.563730001 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.598742962 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.606136084 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.614382029 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.664948940 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.665096998 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.665146112 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:30.665235996 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.665339947 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:30.665339947 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.669945002 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.670259953 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:30.670311928 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.670327902 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:30.670387983 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.677093983 CEST	59769	587	192.168.2.7	217.76.151.9
Jun 4, 2024 12:43:30.677138090 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.677510023 CEST	64344	587	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:30.677645922 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.682224035 CEST	587	59769	217.76.151.9	192.168.2.7
Jun 4, 2024 12:43:30.682279110 CEST	59769	587	192.168.2.7	217.76.151.9
Jun 4, 2024 12:43:30.682643890 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.682710886 CEST	587	64344	173.194.76.27	192.168.2.7
Jun 4, 2024 12:43:30.682754993 CEST	64344	587	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:30.684748888 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.684830904 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.689224958 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.689294100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.689649105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.694233894 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.694906950 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:30.694992065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.699819088 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.739439964 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.739439964 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:30.739495993 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.754111052 CEST	59855	587	192.168.2.7	103.224.182.246
Jun 4, 2024 12:43:30.755899906 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.755928993 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.758985996 CEST	587	59855	103.224.182.246	192.168.2.7
Jun 4, 2024 12:43:30.759088993 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.759344101 CEST	59855	587	192.168.2.7	103.224.182.246
Jun 4, 2024 12:43:30.760787964 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.761327982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.764019012 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.777957916 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:30.778135061 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.778899908 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:30.778953075 CEST	465	59847	217.72.192.67	192.168.2.7
Jun 4, 2024 12:43:30.778964043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.779002905 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:30.779057980 CEST	59847	465	192.168.2.7	217.72.192.67
Jun 4, 2024 12:43:30.779057980 CEST	59847	465	192.168.2.7	217.72.192.67
Jun 4, 2024 12:43:30.779066086 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:30.779100895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.779232025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.782942057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.783895016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.784035921 CEST	465	59847	217.72.192.67	192.168.2.7
Jun 4, 2024 12:43:30.784069061 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.788701057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.788836956 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:30.789191961 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:30.793659925 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:30.794020891 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:30.802860022 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.803225040 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.804577112 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.805870056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.806015968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.806039095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.811084986 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.833190918 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:30.837155104 CEST	587	59836	89.40.173.57	192.168.2.7
Jun 4, 2024 12:43:30.838186026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.848858118 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.848858118 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.873565912 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:30.873754025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.878659964 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.880028963 CEST	59836	587	192.168.2.7	89.40.173.57
Jun 4, 2024 12:43:30.923933029 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:30.931500912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.931694031 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:30.931777954 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:30.931794882 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:30.931809902 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:30.931848049 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:30.931864023 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:30.932142973 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:30.932200909 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:30.932228088 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.932285070 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.932301044 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.932322979 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.932337046 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.932352066 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.932353973 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.932434082 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.932904005 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.932985067 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.932998896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.933032990 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.933131933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.933202982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.937403917 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:30.938023090 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.938075066 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.938244104 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.938908100 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.938930988 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.944694996 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:30.945534945 CEST	64348	587	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:30.945580959 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.945835114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.950614929 CEST	587	64348	173.194.76.27	192.168.2.7
Jun 4, 2024 12:43:30.950778008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:30.950850010 CEST	64348	587	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:30.973783016 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.973784924 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.973786116 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:30.974138021 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.989404917 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:30.991480112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.998279095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:30.998322964 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:30.998331070 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.002707958 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.002748966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.003184080 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.003233910 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:31.003304958 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:31.003333092 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.007641077 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.008356094 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.021630049 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:31.021807909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.021951914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.021977901 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.024492025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.024513006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.027156115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.029386044 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.034672976 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:31.034785986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.042565107 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.043142080 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.043452978 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.043483019 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.048042059 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.048430920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.052073002 CEST	59783	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.052097082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.053792953 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:31.053924084 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.057254076 CEST	587	59783	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.057307959 CEST	59783	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.058790922 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.065382004 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.065408945 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.065463066 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.065505981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.067503929 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:31.070476055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.072973013 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.073065996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.083132982 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:31.083476067 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:31.084084034 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.089158058 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.098808050 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:31.114399910 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.130038023 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:31.165291071 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:31.167952061 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:31.168076038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.170161963 CEST	587	59858	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:31.170226097 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:31.170365095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.171602011 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.171962976 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:31.172035933 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.172065020 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:31.172365904 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.172434092 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.172547102 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.175434113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.176868916 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:31.176907063 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.176948071 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:31.177227020 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.177253962 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.177395105 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.177455902 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.177547932 CEST	59806	587	192.168.2.7	154.53.51.218
Jun 4, 2024 12:43:31.177576065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.178177118 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.183105946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.183165073 CEST	587	59806	154.53.51.218	192.168.2.7
Jun 4, 2024 12:43:31.183217049 CEST	59806	587	192.168.2.7	154.53.51.218
Jun 4, 2024 12:43:31.223869085 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:31.233978987 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:31.237551928 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:31.238910913 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:31.238975048 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:31.239063025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.242430925 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:31.242489100 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:31.242542028 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.247548103 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.291429996 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.291591883 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.291651011 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:31.291826963 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:31.291969061 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:31.292023897 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:31.292515993 CEST	59862	587	192.168.2.7	185.71.61.14
Jun 4, 2024 12:43:31.296452999 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.296518087 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:31.296716928 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:31.296761990 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:31.296873093 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:31.297372103 CEST	587	59862	185.71.61.14	192.168.2.7
Jun 4, 2024 12:43:31.297461987 CEST	59862	587	192.168.2.7	185.71.61.14
Jun 4, 2024 12:43:31.297528982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.304600000 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.308157921 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.313049078 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.332765102 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:31.332858086 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.348797083 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.378278971 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.379987955 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:31.409347057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.409773111 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:31.409852028 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:31.410305023 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:31.410573006 CEST	59863	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:31.414659977 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:31.414762974 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:31.415148973 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:31.415397882 CEST	587	59863	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:31.415458918 CEST	59863	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:31.415497065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.420567989 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.422688961 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:31.422768116 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.424927950 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:31.425024986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.427831888 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.429940939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.430291891 CEST	59864	465	192.168.2.7	208.113.231.255
Jun 4, 2024 12:43:31.432046890 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.432122946 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.432140112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.432208061 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.435134888 CEST	465	59864	208.113.231.255	192.168.2.7
Jun 4, 2024 12:43:31.435188055 CEST	59864	465	192.168.2.7	208.113.231.255
Jun 4, 2024 12:43:31.435271978 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.437025070 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.437150955 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.437489986 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.437585115 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.440341949 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.442554951 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.464762926 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:31.469690084 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:31.469769955 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:31.469882011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.469985008 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:31.470068932 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.472876072 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:31.473871946 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:31.473872900 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:31.473984957 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.473984957 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.475039005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.477776051 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:31.477839947 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:31.477900028 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.481987953 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:31.482064962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.483187914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.487361908 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.489406109 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.520647049 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:31.527545929 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:31.527657032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.529886007 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:31.529957056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.532507896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.534853935 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.535258055 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:31.535331011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.536252975 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:31.536390066 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.536967993 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:31.537020922 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.537283897 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:31.537678003 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:31.541824102 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:31.541851044 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.542119980 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:31.542495012 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:31.552052021 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.554203033 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.559047937 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.563093901 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:31.563170910 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:31.563188076 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:31.563205004 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:31.563318968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.563318968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.563335896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.563360929 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:31.563361883 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:31.567553997 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:31.568264008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.568393946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.570074081 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.570183992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.575020075 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.580754042 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.580935955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.581228971 CEST	59867	465	192.168.2.7	74.52.185.18
Jun 4, 2024 12:43:31.582400084 CEST	587	59848	103.235.106.10	192.168.2.7
Jun 4, 2024 12:43:31.583148003 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:31.583158970 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:31.583792925 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.586067915 CEST	465	59867	74.52.185.18	192.168.2.7
Jun 4, 2024 12:43:31.586163044 CEST	59867	465	192.168.2.7	74.52.185.18
Jun 4, 2024 12:43:31.586188078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.588648081 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.595443010 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:31.598225117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.598762989 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.603137016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.614382982 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.629981995 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.630116940 CEST	59848	587	192.168.2.7	103.235.106.10
Jun 4, 2024 12:43:31.645750999 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:31.651320934 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:31.651411057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.654447079 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.654583931 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.654654980 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:31.654913902 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.654957056 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.655010939 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.655069113 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.655117035 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:31.655165911 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:31.659512997 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.659538984 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:31.659779072 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.659794092 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.659810066 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.659833908 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.659924030 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:31.659991980 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:31.667162895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.667236090 CEST	59724	465	192.168.2.7	104.21.41.110
Jun 4, 2024 12:43:31.667761087 CEST	59723	465	192.168.2.7	149.129.214.116
Jun 4, 2024 12:43:31.667797089 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.672039032 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.672169924 CEST	465	59724	104.21.41.110	192.168.2.7
Jun 4, 2024 12:43:31.672228098 CEST	59724	465	192.168.2.7	104.21.41.110
Jun 4, 2024 12:43:31.672627926 CEST	465	59723	149.129.214.116	192.168.2.7
Jun 4, 2024 12:43:31.672667027 CEST	59723	465	192.168.2.7	149.129.214.116
Jun 4, 2024 12:43:31.672939062 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:31.673017025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.675335884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.675358057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.676790953 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:31.677385092 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.678514004 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.679687023 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:31.679790020 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.680300951 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.684607983 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.692512989 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:31.723761082 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:31.723769903 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:31.726125956 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:31.727165937 CEST	587	59852	144.76.112.115	192.168.2.7
Jun 4, 2024 12:43:31.727255106 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.753591061 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:31.753720045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.760478020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.766854048 CEST	587	59858	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:31.766947985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.770658016 CEST	59852	587	192.168.2.7	144.76.112.115
Jun 4, 2024 12:43:31.774842024 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.774976015 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:31.775079012 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:31.775154114 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:31.779829979 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:31.779895067 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:31.780057907 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:31.786962032 CEST	59729	465	192.168.2.7	52.101.148.3
Jun 4, 2024 12:43:31.787133932 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.794147968 CEST	465	59729	52.101.148.3	192.168.2.7
Jun 4, 2024 12:43:31.794446945 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:31.794476032 CEST	465	59729	52.101.148.3	192.168.2.7
Jun 4, 2024 12:43:31.794527054 CEST	59729	465	192.168.2.7	52.101.148.3
Jun 4, 2024 12:43:31.794600010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.798479080 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.798557043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.801487923 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.801970005 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:31.815634012 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:31.815789938 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.817609072 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:31.821964979 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.848795891 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.848798037 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:31.864407063 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:31.968647957 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.969166994 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.969219923 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.969270945 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:31.969321966 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:31.969598055 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.969614029 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.969639063 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:31.969652891 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.969676018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.969695091 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.969713926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.969757080 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.969786882 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.969826937 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.970007896 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.970127106 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.970634937 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:31.970860004 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.974781036 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.974879026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.977449894 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.977504015 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.977530003 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:31.977545977 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:31.977559090 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.977572918 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.980525970 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:31.993917942 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:31.998037100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.998478889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.998508930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.998915911 CEST	59868	465	192.168.2.7	54.74.99.47
Jun 4, 2024 12:43:31.999613047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:31.999636889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.003532887 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.003792048 CEST	465	59868	54.74.99.47	192.168.2.7
Jun 4, 2024 12:43:32.003854036 CEST	59868	465	192.168.2.7	54.74.99.47
Jun 4, 2024 12:43:32.003972054 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.004519939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.011630058 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:32.011878014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.016871929 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.020670891 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.020673037 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.020673037 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.020692110 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:32.020693064 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:32.020694017 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.020694017 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.020697117 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.024187088 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.024221897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.028314114 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.028435946 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.028497934 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:32.028548956 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.029119015 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.032469034 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.032500029 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.032516003 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.032531977 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.032581091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.032581091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.032618999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.032655954 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.032655954 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.033399105 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.033413887 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:32.033427954 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.035373926 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.035445929 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.036264896 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:32.036648035 CEST	59734	587	192.168.2.7	216.239.32.21
Jun 4, 2024 12:43:32.036695004 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.037492990 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.037657976 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.040313005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.041588068 CEST	587	59734	216.239.32.21	192.168.2.7
Jun 4, 2024 12:43:32.041640043 CEST	59734	587	192.168.2.7	216.239.32.21
Jun 4, 2024 12:43:32.051903963 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:32.054187059 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.054326057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.059237957 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.066921949 CEST	59869	587	192.168.2.7	133.237.129.136
Jun 4, 2024 12:43:32.071794033 CEST	587	59869	133.237.129.136	192.168.2.7
Jun 4, 2024 12:43:32.071870089 CEST	59869	587	192.168.2.7	133.237.129.136
Jun 4, 2024 12:43:32.071926117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.079255104 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.079293013 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.083144903 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.084141970 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.098786116 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.154861927 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:32.155128956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.165550947 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.165693045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.167854071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.167870045 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.167917967 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.168458939 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.168540001 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.168593884 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:32.168658972 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:32.168698072 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.168762922 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.168807030 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:32.168848991 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.169223070 CEST	59870	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:32.172492027 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.173357964 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.173382998 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.173440933 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:32.173654079 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:32.173669100 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.173861980 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.173877954 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:32.173893929 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.174107075 CEST	587	59870	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:32.174175024 CEST	59870	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:32.174252033 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.177222013 CEST	59834	587	192.168.2.7	75.102.22.71
Jun 4, 2024 12:43:32.177248001 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.177412033 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.178473949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.178545952 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.178817987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.178848982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.182426929 CEST	587	59834	75.102.22.71	192.168.2.7
Jun 4, 2024 12:43:32.182492971 CEST	59834	587	192.168.2.7	75.102.22.71
Jun 4, 2024 12:43:32.183336973 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.183475971 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.183892012 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.186011076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.186120987 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.186196089 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.188091993 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:32.188164949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.191140890 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.191158056 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.192953110 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.193048954 CEST	59740	587	192.168.2.7	172.217.18.115
Jun 4, 2024 12:43:32.197813034 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.197995901 CEST	587	59740	172.217.18.115	192.168.2.7
Jun 4, 2024 12:43:32.198055983 CEST	59740	587	192.168.2.7	172.217.18.115
Jun 4, 2024 12:43:32.208141088 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:32.208153009 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.232178926 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.232305050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.233434916 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.233510971 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.233990908 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.234082937 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.237907887 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:32.237982035 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.238392115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.239423990 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:32.242866039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.283231020 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.283339024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.286885977 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.286890030 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.286904097 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.286906958 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:32.293239117 CEST	587	50040	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:32.293322086 CEST	50040	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:32.293369055 CEST	50040	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:32.293414116 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.298233986 CEST	587	50040	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:32.298285007 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.299235106 CEST	587	50041	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:32.299288988 CEST	50041	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:32.299340963 CEST	50041	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:32.299376965 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.304183006 CEST	587	50041	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:32.311356068 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.311491966 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:32.311661005 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:32.311794043 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.311959982 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:32.312002897 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:32.316325903 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:32.316740990 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:32.316756010 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.316844940 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:32.316945076 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:32.324599028 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:32.324728012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.332252026 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:32.332389116 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.333250046 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.337282896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.364434958 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:32.370209932 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.370486021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.380114079 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:32.411386967 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.415843964 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:32.415860891 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:32.415877104 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:32.415947914 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:32.416060925 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:32.416062117 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:32.416094065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.418350935 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.420631886 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:32.420739889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.421158075 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.421243906 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.421295881 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.421372890 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.425666094 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.428818941 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.428878069 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.428920984 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.428925037 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.428940058 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.428978920 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.429007053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.429007053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.429084063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.429471016 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.429487944 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.429513931 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.429527998 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.429536104 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.429546118 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.429574013 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.429656982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.429868937 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.429883003 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.429927111 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.429971933 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.430016994 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.430048943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.430110931 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.430192947 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.430224895 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.430238008 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.430269003 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.430324078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.430942059 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.430967093 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.430998087 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.431022882 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.431046963 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.431061983 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.431072950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.431090117 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.431155920 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.431693077 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.431816101 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.431866884 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.432199955 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.432214022 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.432251930 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.432303905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.432482958 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.432483912 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:32.432518005 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.433871984 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.434040070 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.434525967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.434623003 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.434838057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.434988976 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.435188055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.435981035 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.436021090 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.436161995 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.436733007 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.436758041 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.437258959 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.437493086 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.437509060 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.437560081 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:32.442315102 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:32.447221041 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:32.447285891 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.447302103 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.447309971 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:32.447328091 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.447343111 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.447345018 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.447361946 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.447381973 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.447397947 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.447448015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.447498083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.447947979 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.447962999 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.447994947 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.448075056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.450309992 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.450325012 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.450361013 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.450361967 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.450390100 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.450402975 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.450428009 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.450490952 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.451011896 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.451026917 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.451061010 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.451111078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.452354908 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.452568054 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.452583075 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.453021049 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.453198910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.453542948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.455555916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.455615044 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.456098080 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.458425045 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.473844051 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.473845959 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.473963022 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:32.474723101 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.474737883 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.489428997 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.537373066 CEST	59872	587	192.168.2.7	93.115.28.104
Jun 4, 2024 12:43:32.542304993 CEST	587	59872	93.115.28.104	192.168.2.7
Jun 4, 2024 12:43:32.542392969 CEST	59872	587	192.168.2.7	93.115.28.104
Jun 4, 2024 12:43:32.542458057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.555090904 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:32.555227995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.560122967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.563535929 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.563950062 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:32.564021111 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:32.564062119 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.564294100 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:32.564452887 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:32.567302942 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.567334890 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.567620039 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.567709923 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.567753077 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.567764997 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.567799091 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.567806959 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.567835093 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.567877054 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.568068981 CEST	59836	587	192.168.2.7	89.40.173.57
Jun 4, 2024 12:43:32.568094969 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568340063 CEST	59744	587	192.168.2.7	188.114.97.3
Jun 4, 2024 12:43:32.568361998 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568526983 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.568577051 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.568622112 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.568722010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568770885 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:32.568828106 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:32.568847895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568859100 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:32.568870068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568870068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568880081 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:32.568895102 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:32.568909883 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568937063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568937063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.568937063 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:32.568948030 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:32.568984032 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.569009066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.569019079 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:32.569135904 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:32.569299936 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:32.570441961 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.570476055 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.570529938 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.570566893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.572963953 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.573390961 CEST	587	59836	89.40.173.57	192.168.2.7
Jun 4, 2024 12:43:32.573450089 CEST	59836	587	192.168.2.7	89.40.173.57
Jun 4, 2024 12:43:32.573841095 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.573995113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.574029922 CEST	587	59744	188.114.97.3	192.168.2.7
Jun 4, 2024 12:43:32.574090958 CEST	59744	587	192.168.2.7	188.114.97.3
Jun 4, 2024 12:43:32.574183941 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.574352980 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.574404001 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.574502945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.574517965 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.574527979 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.574613094 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.575601101 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.579431057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.581526041 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:32.581579924 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:32.581613064 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:32.581629992 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:32.581650019 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:32.581685066 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:32.581692934 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:32.581746101 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.581825972 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.584450006 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:32.584561110 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.586697102 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.586852074 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.587409973 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.587440968 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.587485075 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.587538004 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.589478970 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.592535019 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.593223095 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.593252897 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.593298912 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.593341112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.596441984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.596468925 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.598365068 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.598834038 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:32.601448059 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.607157946 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:32.607263088 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.630311012 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:32.630357981 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:32.643641949 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:32.648571014 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:32.648648977 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:32.648757935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.653647900 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.661597967 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:32.673671007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.673702955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.678859949 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.679203033 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:32.685270071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.686534882 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.686604977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.686695099 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.686747074 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.687160969 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:32.691410065 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.691499949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.691613913 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.691665888 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.692038059 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:32.693902969 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.693995953 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.696074009 CEST	59874	587	192.168.2.7	194.158.122.55
Jun 4, 2024 12:43:32.696424961 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.701009989 CEST	587	59874	194.158.122.55	192.168.2.7
Jun 4, 2024 12:43:32.701071978 CEST	59874	587	192.168.2.7	194.158.122.55
Jun 4, 2024 12:43:32.701137066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.702620029 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.702718019 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.706414938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.709150076 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.709182024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.714128017 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.724296093 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:32.739737034 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.739876032 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.753907919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.753937006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.755011082 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.758164883 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.758929014 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.804150105 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:32.804208994 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:32.804239988 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:32.804255962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.804255962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.804261923 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:32.804276943 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:32.804277897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.804325104 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:32.804327011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.804327011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.804349899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.807013035 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.807341099 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:32.807657003 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.807657003 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.807710886 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.807770967 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:32.807815075 CEST	59875	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:32.808515072 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.809181929 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.809427977 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.809456110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.809494972 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.809544086 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.809571981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.812334061 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:32.812853098 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.812881947 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.812932968 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.812962055 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:32.812993050 CEST	587	59875	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:32.813069105 CEST	59875	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:32.813132048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.813393116 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:32.813451052 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:32.813496113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.817944050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.818039894 CEST	59749	587	192.168.2.7	172.67.188.253
Jun 4, 2024 12:43:32.818396091 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.818571091 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.822920084 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.823093891 CEST	587	59749	172.67.188.253	192.168.2.7
Jun 4, 2024 12:43:32.823158979 CEST	59749	587	192.168.2.7	172.67.188.253
Jun 4, 2024 12:43:32.825438023 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:32.825521946 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.825686932 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.825742960 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.825763941 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.825763941 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.825778008 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.825789928 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.825813055 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.825846910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.825846910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.825846910 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.825901031 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.826322079 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.826375008 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.826412916 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.826422930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.826422930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.826453924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.830605984 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.830717087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.830940008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.830991030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.831020117 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.831053019 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.831100941 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.831437111 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.831631899 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.831682920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.835506916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.835536957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.840527058 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.857455969 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.857491970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.862693071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.862740040 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.868936062 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.868968964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.873842001 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.873965979 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.880024910 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:32.891999960 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:32.892230988 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.896833897 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:32.896946907 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.897166014 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.901879072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.924280882 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.924493074 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:32.924793005 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.924848080 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:32.924998045 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:32.927263021 CEST	59753	587	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:32.927290916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.927897930 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:32.927936077 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:32.927973032 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:32.927983999 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:32.928030014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.928030014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.928086996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.929409981 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:32.929748058 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.929780006 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:32.929872990 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:32.932944059 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.932977915 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.938164949 CEST	587	59753	199.59.243.225	192.168.2.7
Jun 4, 2024 12:43:32.942564964 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:32.942584038 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:32.952269077 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.952301025 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.952372074 CEST	587	59753	199.59.243.225	192.168.2.7
Jun 4, 2024 12:43:32.952380896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.952435017 CEST	59753	587	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:32.952533007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.954217911 CEST	59877	465	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:32.957331896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.959187984 CEST	465	59877	199.59.243.225	192.168.2.7
Jun 4, 2024 12:43:32.959270000 CEST	59877	465	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:32.959336996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.964085102 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.964118004 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:32.964164972 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:32.964224100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.964224100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.964250088 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.964432001 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.969314098 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.973774910 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:32.975087881 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.975121975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:32.980035067 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:32.998195887 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:32.998332024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.005027056 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.005038023 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.017453909 CEST	59878	587	192.168.2.7	204.11.56.48
Jun 4, 2024 12:43:33.022269964 CEST	587	50051	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:33.022355080 CEST	50051	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:33.022442102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.022454023 CEST	50051	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:33.022562027 CEST	587	59878	204.11.56.48	192.168.2.7
Jun 4, 2024 12:43:33.022624016 CEST	59878	587	192.168.2.7	204.11.56.48
Jun 4, 2024 12:43:33.022667885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.027365923 CEST	587	50051	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:33.027441978 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.043457985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.043626070 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:33.043683052 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.043761015 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.043812037 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:33.043869972 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:33.043977976 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:33.044045925 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:33.047609091 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:33.047710896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.048618078 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:33.048674107 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.048804045 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.048835039 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:33.048886061 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:33.048917055 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:33.048989058 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:33.051978111 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:33.052613020 CEST	59755	465	192.168.2.7	216.230.229.247
Jun 4, 2024 12:43:33.052644968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.058228970 CEST	465	59755	216.230.229.247	192.168.2.7
Jun 4, 2024 12:43:33.058258057 CEST	465	59755	216.230.229.247	192.168.2.7
Jun 4, 2024 12:43:33.058322906 CEST	59755	465	192.168.2.7	216.230.229.247
Jun 4, 2024 12:43:33.058574915 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.064116001 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.064246893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.068454027 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.069066048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.072886944 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.073019028 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.073999882 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.098778963 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:33.110492945 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:33.110574961 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.114391088 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.114413023 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.114463091 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.115478992 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.161549091 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:33.176357985 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:33.176503897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.185503006 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.187556982 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.187685013 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.187732935 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.192477942 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.192687988 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.192713022 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.197125912 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.198306084 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:33.207112074 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.207175016 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:33.207328081 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.214824915 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:33.223658085 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:33.223961115 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:33.223961115 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:33.224509954 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:33.228801012 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:33.228908062 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:33.229424000 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:33.230892897 CEST	587	50055	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:33.230967999 CEST	50055	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:33.232156038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.237883091 CEST	587	50056	52.223.34.187	192.168.2.7
Jun 4, 2024 12:43:33.237929106 CEST	50056	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:33.239280939 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.241724968 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:33.270533085 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.270536900 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:33.270544052 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.271325111 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:33.279592037 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:33.282159090 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.282874107 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:33.283004999 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:33.299902916 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.303178072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.303214073 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.303266048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.304409027 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.304441929 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.304506063 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.304527044 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.304564953 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.304601908 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.304609060 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.305063009 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.305094957 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.305109024 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.306072950 CEST	50056	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:33.306184053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.311026096 CEST	587	50056	52.223.34.187	192.168.2.7
Jun 4, 2024 12:43:33.311059952 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.325835943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.325933933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.330938101 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.333048105 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:33.336443901 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:33.345215082 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:33.347409010 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.348644018 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.362471104 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:33.376868963 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:33.396445990 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.396687984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.396722078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.403075933 CEST	59848	587	192.168.2.7	103.235.106.10
Jun 4, 2024 12:43:33.403105974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.403693914 CEST	50055	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:33.403856039 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.404418945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.404493093 CEST	59761	587	192.168.2.7	52.101.73.24
Jun 4, 2024 12:43:33.404517889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.404828072 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.404972076 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.405034065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.405148029 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.405473948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.405565977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.406482935 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:33.406502962 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:33.406753063 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:33.406786919 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:33.406835079 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:33.406883001 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.406940937 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:33.406985044 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.407037020 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:33.411295891 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:33.416815042 CEST	59852	587	192.168.2.7	144.76.112.115
Jun 4, 2024 12:43:33.416832924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.426907063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.428312063 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:33.614644051 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:33.630167961 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.635018110 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:33.635166883 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:33.635298967 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635366917 CEST	587	64328	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:33.635369062 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635437965 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.635468960 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.635503054 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.635510921 CEST	64328	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:33.635544062 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.635544062 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635544062 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635555983 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.635561943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635586023 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:33.635617971 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635627985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.635656118 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635690928 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:33.635725021 CEST	64328	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:33.635755062 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.635776043 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:33.635813951 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.635848999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635869026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.635874033 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.635922909 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:33.635972977 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.636020899 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:33.636073112 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:33.636187077 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.636249065 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.636708975 CEST	587	59878	204.11.56.48	192.168.2.7
Jun 4, 2024 12:43:33.636966944 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.636981964 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:33.637001991 CEST	59878	587	192.168.2.7	204.11.56.48
Jun 4, 2024 12:43:33.637068033 CEST	59878	587	192.168.2.7	204.11.56.48
Jun 4, 2024 12:43:33.637094975 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:33.637131929 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.637160063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.637335062 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.637365103 CEST	587	64336	142.250.153.26	192.168.2.7
Jun 4, 2024 12:43:33.637394905 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:33.637451887 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:33.637465954 CEST	64336	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:33.637578011 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.637582064 CEST	64336	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:33.637625933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.637639999 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:33.637670994 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.637687922 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:33.637816906 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.637828112 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:33.637865067 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.637950897 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.638169050 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638221979 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638408899 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638509035 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638757944 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638808966 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638838053 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638865948 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638895988 CEST	587	50055	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:33.638926029 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638953924 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.638982058 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639003038 CEST	59881	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.639031887 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639060020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639072895 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639086008 CEST	587	59848	103.235.106.10	192.168.2.7
Jun 4, 2024 12:43:33.639113903 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639143944 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639195919 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639199018 CEST	59848	587	192.168.2.7	103.235.106.10
Jun 4, 2024 12:43:33.639225006 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:33.639255047 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:33.639282942 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:33.639312029 CEST	587	59858	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:33.639342070 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:33.639370918 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.639420033 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:33.639450073 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.639478922 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:33.639518023 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639552116 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.639683008 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:33.639718056 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.639784098 CEST	587	59761	52.101.73.24	192.168.2.7
Jun 4, 2024 12:43:33.639818907 CEST	587	59852	144.76.112.115	192.168.2.7
Jun 4, 2024 12:43:33.639837980 CEST	59761	587	192.168.2.7	52.101.73.24
Jun 4, 2024 12:43:33.639864922 CEST	59852	587	192.168.2.7	144.76.112.115
Jun 4, 2024 12:43:33.640198946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643110037 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643162966 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643260956 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643287897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643301010 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643318892 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643332005 CEST	587	64328	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:33.643343925 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.643486977 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.643500090 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643579960 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.643594027 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.643619061 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:33.643635988 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.643724918 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:33.643755913 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:33.645422935 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.645437956 CEST	587	59878	204.11.56.48	192.168.2.7
Jun 4, 2024 12:43:33.645452023 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:33.645467997 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.645524025 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.645538092 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.645561934 CEST	587	64336	142.250.153.26	192.168.2.7
Jun 4, 2024 12:43:33.645564079 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.645576000 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.645589113 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.645605087 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:33.645612001 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:33.645620108 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.645683050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.645731926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.645857096 CEST	587	59881	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.645927906 CEST	59881	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.647456884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.647636890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.647674084 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.650692940 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.650708914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.650897026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.650924921 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.652394056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.652477980 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.652544022 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.655836105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.655864954 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.670157909 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.672408104 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.674151897 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.674218893 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.677015066 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:33.677273035 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:33.687041998 CEST	587	64338	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:33.688319921 CEST	64338	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:33.688397884 CEST	64338	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:33.688474894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.693329096 CEST	587	64338	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:33.693394899 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.695636034 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.696079969 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:33.696245909 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.696384907 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.696477890 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:33.696583033 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.700994015 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:33.701179981 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.701304913 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.701494932 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:33.701528072 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.707298040 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:33.707324028 CEST	59882	465	192.168.2.7	85.220.165.130
Jun 4, 2024 12:43:33.710690022 CEST	59884	587	192.168.2.7	116.202.134.231
Jun 4, 2024 12:43:33.712294102 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:33.712347984 CEST	465	59882	85.220.165.130	192.168.2.7
Jun 4, 2024 12:43:33.712385893 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:33.712416887 CEST	59882	465	192.168.2.7	85.220.165.130
Jun 4, 2024 12:43:33.712455988 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.712487936 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.715660095 CEST	587	59884	116.202.134.231	192.168.2.7
Jun 4, 2024 12:43:33.716558933 CEST	59884	587	192.168.2.7	116.202.134.231
Jun 4, 2024 12:43:33.716624022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.717607975 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.766141891 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.786175966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.786732912 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:33.786786079 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:33.786822081 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:33.786885977 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:33.787348032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.787364960 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.791269064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.791816950 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:33.792018890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.792278051 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.792341948 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.792386055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.792462111 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.796370983 CEST	587	59858	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:33.797039032 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.797198057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.798764944 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:33.799546957 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:33.799576998 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:33.799629927 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:33.799655914 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:33.799664974 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:33.799731970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.799745083 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:33.799827099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.803119898 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.803823948 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:33.803924084 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:33.804011106 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.804589987 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.804769993 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.804802895 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.805006027 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.809293985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.812660933 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.816565037 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:33.817023993 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:33.817090988 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.817169905 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:33.819093943 CEST	59886	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:33.821499109 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:33.821978092 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:33.822012901 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.822115898 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:33.822192907 CEST	587	64345	81.236.63.162	192.168.2.7
Jun 4, 2024 12:43:33.822259903 CEST	64345	587	192.168.2.7	81.236.63.162
Jun 4, 2024 12:43:33.822323084 CEST	64345	587	192.168.2.7	81.236.63.162
Jun 4, 2024 12:43:33.822371960 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.823951006 CEST	587	59886	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:33.824052095 CEST	59886	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:33.824228048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.825258017 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:33.825357914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.827238083 CEST	587	64345	81.236.63.162	192.168.2.7
Jun 4, 2024 12:43:33.829402924 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.829651117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.829691887 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.833374977 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:33.834631920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.838372946 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:33.840187073 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.843127012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.843162060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.845117092 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.848242998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.848839045 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:33.857748032 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:33.857784033 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:33.857835054 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:33.857865095 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:33.857892036 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:33.857961893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.857985973 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:33.858040094 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.862984896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.863117933 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.864959002 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:33.868371010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.880176067 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:33.880197048 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:33.888204098 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:33.888473034 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.891009092 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:33.891110897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.893431902 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.895390034 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.895443916 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.895474911 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.895510912 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.895561934 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.895766020 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.895999908 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896054983 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.896055937 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896054983 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.896086931 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896117926 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.896141052 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896171093 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896197081 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.896205902 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896239042 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896254063 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.896553040 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.896716118 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896745920 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.896780968 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.896801949 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.896945953 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.897017002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.897351980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.897574902 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.898931980 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.900569916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.901089907 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.901151896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.901191950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.901429892 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.901537895 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.901595116 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.901942015 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.901973963 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.902054071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.902193069 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.902560949 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.903527021 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:33.903803110 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:33.903889894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.903919935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.906064034 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.908906937 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.911339998 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:33.942668915 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.942671061 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.942672968 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:33.942692995 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:33.942702055 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.942820072 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.944221973 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.944221973 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.947966099 CEST	587	64349	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:33.948112011 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.948206902 CEST	64349	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:33.948251963 CEST	64349	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:33.948307991 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.948360920 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.948432922 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.952052116 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.952140093 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.952172041 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.952184916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.952184916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.952203035 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.952208042 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.952234983 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.952241898 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:33.952258110 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:33.952291012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.952291012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.952337980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.953105927 CEST	587	64349	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:33.953228951 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.953351974 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.957142115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.957344055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.957374096 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.958157063 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.958211899 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.958230972 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:33.958245993 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.958246946 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:33.958267927 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.958282948 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.958343029 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.958868980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.959074020 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.959109068 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.959146023 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.959167957 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.959184885 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.959297895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.959297895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.959307909 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.959358931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.959363937 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.959394932 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.959450960 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.959506989 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.960009098 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.960038900 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:33.960094929 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:33.960144997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.961484909 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:33.963203907 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.963218927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.963869095 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.963920116 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.964272022 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.964445114 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.964519978 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.964580059 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.965176105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.968686104 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.980423927 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:33.980479002 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:33.980530024 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:33.980562925 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:33.980576992 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:33.980597973 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:33.980618000 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:33.980679035 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.980773926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.983987093 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:33.984209061 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:33.985786915 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.985897064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:33.989157915 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.005157948 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.005161047 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:34.020798922 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:34.029927969 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.032561064 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.033086061 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.033117056 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.033190012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.033190012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.033204079 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.033277035 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.034570932 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.034600973 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.034657001 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.034708977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.036335945 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:34.038110971 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.038348913 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.039690018 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.061167955 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.064521074 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.064596891 CEST	50062	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:34.065043926 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.065109968 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:34.066622019 CEST	59887	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.067120075 CEST	59888	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.068881989 CEST	59780	465	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:34.068907022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.069020987 CEST	59778	465	192.168.2.7	89.42.218.97
Jun 4, 2024 12:43:34.069041014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.069116116 CEST	59782	587	192.168.2.7	199.34.228.151
Jun 4, 2024 12:43:34.069120884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.069350004 CEST	59779	587	192.168.2.7	192.124.249.56
Jun 4, 2024 12:43:34.069367886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.069606066 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.069658041 CEST	587	50062	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:34.069976091 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.070029020 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:34.071556091 CEST	587	59887	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.071981907 CEST	587	59888	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.072073936 CEST	59887	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.072237015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.072288990 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.072302103 CEST	59888	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.073846102 CEST	465	59780	199.59.243.225	192.168.2.7
Jun 4, 2024 12:43:34.073925972 CEST	59780	465	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:34.074143887 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.074197054 CEST	587	59782	199.34.228.151	192.168.2.7
Jun 4, 2024 12:43:34.074229002 CEST	465	59778	89.42.218.97	192.168.2.7
Jun 4, 2024 12:43:34.074496984 CEST	465	59778	89.42.218.97	192.168.2.7
Jun 4, 2024 12:43:34.074965000 CEST	587	59782	199.34.228.151	192.168.2.7
Jun 4, 2024 12:43:34.074995041 CEST	587	59779	192.124.249.56	192.168.2.7
Jun 4, 2024 12:43:34.075018883 CEST	59778	465	192.168.2.7	89.42.218.97
Jun 4, 2024 12:43:34.075043917 CEST	59782	587	192.168.2.7	199.34.228.151
Jun 4, 2024 12:43:34.075062990 CEST	59779	587	192.168.2.7	192.124.249.56
Jun 4, 2024 12:43:34.077722073 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.083266973 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.086709976 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.086860895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.096976042 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.097006083 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.097064972 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.097148895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.098834991 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.098865032 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.098961115 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.099972963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.100517988 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.100543976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.102215052 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.104924917 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.105484962 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.130086899 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.146214008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.187038898 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.187191010 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.187561989 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:34.187644958 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:34.187663078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.187836885 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.187863111 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:34.187916994 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.188004971 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:34.192145109 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.192640066 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:34.192675114 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.192773104 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.192827940 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:34.192857981 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.192892075 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:34.206374884 CEST	59890	587	192.168.2.7	185.111.97.36
Jun 4, 2024 12:43:34.210859060 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.210896969 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.210933924 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.210968971 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.210997105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.210997105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.211040974 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.211076021 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.211108923 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.211141109 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.211183071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.211214066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.211246014 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.211266994 CEST	587	59890	185.111.97.36	192.168.2.7
Jun 4, 2024 12:43:34.211343050 CEST	59890	587	192.168.2.7	185.111.97.36
Jun 4, 2024 12:43:34.211380005 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.212882996 CEST	587	59716	74.208.236.198	192.168.2.7
Jun 4, 2024 12:43:34.212944031 CEST	59716	587	192.168.2.7	74.208.236.198
Jun 4, 2024 12:43:34.213049889 CEST	59716	587	192.168.2.7	74.208.236.198
Jun 4, 2024 12:43:34.213109016 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.215965986 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.216257095 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.216309071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.216337919 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.216367006 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.216502905 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.216535091 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.216631889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.217928886 CEST	587	59716	74.208.236.198	192.168.2.7
Jun 4, 2024 12:43:34.217962980 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.218565941 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.218591928 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.223545074 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.223575115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.239427090 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:34.308038950 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.308199883 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:34.308525085 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.308558941 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.308635950 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.313102961 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:34.313385963 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.313632011 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.313750029 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.318443060 CEST	59786	587	192.168.2.7	3.64.163.50
Jun 4, 2024 12:43:34.318483114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.320538998 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:34.320642948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.322228909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.322261095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.323373079 CEST	587	59786	3.64.163.50	192.168.2.7
Jun 4, 2024 12:43:34.323427916 CEST	59786	587	192.168.2.7	3.64.163.50
Jun 4, 2024 12:43:34.323525906 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.324605942 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.324688911 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.325623989 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.325685024 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.325726032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.327152967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.329582930 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.330616951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.330632925 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.330734968 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.335628033 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.350114107 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.350148916 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.350239038 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.350303888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.350303888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.350303888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.355204105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.355366945 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.355397940 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.364420891 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.364449978 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:34.371371031 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:34.371490002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.376435041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.380126953 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.397013903 CEST	587	59881	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.397138119 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.402231932 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.411462069 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:34.426727057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.427795887 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:34.428010941 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:34.428234100 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:34.428272009 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:34.429078102 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:34.429713011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.429838896 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.430728912 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:34.430828094 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.431936979 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:34.432100058 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.434705019 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.435602903 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:34.435739994 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.439790010 CEST	59891	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:34.442629099 CEST	59881	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.444024086 CEST	59789	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:34.444047928 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.444643974 CEST	587	59891	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:34.444751978 CEST	59891	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:34.444792986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.448591948 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.448715925 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.448823929 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.448904037 CEST	587	59789	142.250.153.26	192.168.2.7
Jun 4, 2024 12:43:34.448914051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.449095011 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.449146986 CEST	59789	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:34.451217890 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.451343060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.453727961 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.456249952 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.463447094 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.463553905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.463994026 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.464348078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.469243050 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.471487999 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:34.473850012 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:34.475975990 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.476063967 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.489480019 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.489581108 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.505151033 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.505162001 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.505177021 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.520791054 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.522151947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.536149025 CEST	587	59881	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.536533117 CEST	59881	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.537256002 CEST	59881	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.537292957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.542262077 CEST	587	59881	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.542311907 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.557714939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.558370113 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:34.558540106 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:34.558695078 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:34.558751106 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.561685085 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:34.561822891 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.563230991 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:34.563404083 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:34.563515902 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:34.563553095 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.564364910 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.564507008 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.568097115 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.568116903 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.568130016 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.568142891 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.568217039 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.568217039 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.568665028 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.568721056 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.568732023 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.568840027 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.568862915 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.569752932 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.570703030 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.570720911 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.570730925 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.570760965 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.570771933 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.570883036 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.570883036 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.570910931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.571348906 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.571357965 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.571413040 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.571474075 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.573645115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.573764086 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.573775053 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.575931072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.575963974 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.576426983 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.587009907 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.587028980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.588222027 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.588359118 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.588538885 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.588654995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.591955900 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.594052076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.594960928 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.595081091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.599879026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.599890947 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.604757071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.614439011 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.614562988 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:34.629323959 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:34.629448891 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.630116940 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.630872965 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.634316921 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.641908884 CEST	587	59884	116.202.134.231	192.168.2.7
Jun 4, 2024 12:43:34.642033100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.645783901 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.648024082 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.648134947 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.653027058 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.669236898 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.669343948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.669517040 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.669567108 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.669615984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.675175905 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.676980972 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:34.682930946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.683077097 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.683137894 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.683207035 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:34.683602095 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:34.684506893 CEST	59892	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.687344074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.687396049 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.687962055 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.688005924 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.688054085 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:34.688420057 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:34.689435005 CEST	587	59892	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.689594984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.689632893 CEST	59892	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.692487001 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.692605972 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:34.692621946 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:34.692631006 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:34.692636967 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.692676067 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:34.692715883 CEST	59884	587	192.168.2.7	116.202.134.231
Jun 4, 2024 12:43:34.693061113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.693154097 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.693655968 CEST	59793	465	192.168.2.7	51.81.206.108
Jun 4, 2024 12:43:34.697971106 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.698029041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.698915005 CEST	465	59793	51.81.206.108	192.168.2.7
Jun 4, 2024 12:43:34.698982000 CEST	59793	465	192.168.2.7	51.81.206.108
Jun 4, 2024 12:43:34.699786901 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.699928999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.704853058 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.706523895 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.706561089 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.706607103 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.706625938 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.706625938 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.706645966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.708205938 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.709960938 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.709990978 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.710043907 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.710048914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.710048914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.710063934 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.711627960 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.713092089 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.714904070 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.715085030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.715097904 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.722800016 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.722846985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.727838039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.727857113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.740380049 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.790895939 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:34.791002989 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.793893099 CEST	587	59888	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.793984890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.795872927 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.798969030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.800604105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.800961018 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.801038980 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:34.801122904 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:34.801198006 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.801388025 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:34.801434994 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:34.801474094 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.801534891 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:34.803064108 CEST	59893	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.803118944 CEST	59894	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:34.805793047 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.805852890 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:34.805926085 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:34.806274891 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.806375980 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:34.806473970 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:34.806484938 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.806494951 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:34.806849003 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:34.806947947 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.807936907 CEST	587	59893	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.808017015 CEST	59893	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.808060884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.808108091 CEST	587	59894	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:34.808160067 CEST	59894	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:34.808222055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.810650110 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:34.810738087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.813155890 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.816776991 CEST	587	59887	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.816867113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.819262981 CEST	59895	587	192.168.2.7	193.181.34.163
Jun 4, 2024 12:43:34.821218967 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.821274996 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.821284056 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.821291924 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.821302891 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.821307898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.821307898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.821357012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.821400881 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.821460009 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.821460009 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.821717024 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.822534084 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.822577000 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.822598934 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.822602987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.822602987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.822643995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.824189901 CEST	587	59895	193.181.34.163	192.168.2.7
Jun 4, 2024 12:43:34.824258089 CEST	59895	587	192.168.2.7	193.181.34.163
Jun 4, 2024 12:43:34.824364901 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.826343060 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.826489925 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.826622009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.827599049 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.829350948 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.833178997 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:34.834155083 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:34.834271908 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.845324993 CEST	587	59730	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:34.845386028 CEST	59730	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:34.845459938 CEST	59730	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:34.845515966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.848809004 CEST	59888	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.849147081 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:34.850332975 CEST	587	59730	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:34.850363016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.864468098 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.864474058 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:34.868505955 CEST	59887	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.873554945 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:34.878508091 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:34.878591061 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:34.878644943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.880152941 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:34.898267031 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:34.898299932 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:34.898335934 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:34.898371935 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:34.898374081 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:34.898386955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.898405075 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:34.898408890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.898408890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.898438931 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:34.898463964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.898463964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.898472071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.900293112 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:34.900365114 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:34.900371075 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.903697968 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.903722048 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.903825998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.903858900 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.907757998 CEST	587	59888	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.907882929 CEST	59888	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.907882929 CEST	59888	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.907923937 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.912933111 CEST	587	59888	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.913146973 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.923789978 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:34.923927069 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.926733017 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.927906036 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:34.928158045 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.928199053 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:34.928248882 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:34.928297043 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:34.928503036 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.928570032 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:34.928631067 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:34.928822041 CEST	59897	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:34.929208994 CEST	59898	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.932816029 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:34.933259964 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.933269978 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:34.933279991 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:34.933291912 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:34.933547974 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.933557034 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:34.933568001 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:34.933670044 CEST	587	59897	89.39.182.172	192.168.2.7
Jun 4, 2024 12:43:34.933729887 CEST	59897	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:34.933794975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.934017897 CEST	587	59898	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.934067965 CEST	59898	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.934108019 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.946472883 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.946715117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.946752071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.947045088 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:34.947257042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.947400093 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.947473049 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.956051111 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.956120014 CEST	587	59887	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.956177950 CEST	59887	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.956221104 CEST	59887	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.956250906 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.960926056 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.960937023 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.960999012 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.961031914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.961154938 CEST	587	59887	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:34.965982914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.967650890 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:34.967739105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:34.972651005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:34.973777056 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:34.985807896 CEST	59899	465	192.168.2.7	178.63.100.23
Jun 4, 2024 12:43:34.989401102 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:34.989403009 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:34.990760088 CEST	465	59899	178.63.100.23	192.168.2.7
Jun 4, 2024 12:43:34.990817070 CEST	59899	465	192.168.2.7	178.63.100.23
Jun 4, 2024 12:43:34.990854025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.020807028 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:35.038183928 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.042228937 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:35.042264938 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:35.042278051 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:35.042308092 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:35.042313099 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:35.042329073 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:35.042350054 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:35.042397022 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.042447090 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.043479919 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:35.043508053 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:35.043523073 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:35.043576002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.045706987 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.045753956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.045823097 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.045891047 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.046154022 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:35.046196938 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.046258926 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:35.047310114 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:35.047346115 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:35.047369003 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:35.047389030 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:35.047391891 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:35.047404051 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:35.047422886 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:35.047425032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.047425032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.047432899 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.047471046 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.047486067 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.047518969 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.047755957 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.048428059 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.048568010 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.050836086 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.050851107 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.050961018 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:35.051107883 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.051259041 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:35.052541971 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.052555084 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.052563906 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.052581072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.056410074 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.056509972 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.058350086 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.058377028 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.058387995 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.058401108 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.058408976 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.058430910 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.058595896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.061382055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.062922001 CEST	587	59738	104.18.2.81	192.168.2.7
Jun 4, 2024 12:43:35.062992096 CEST	59738	587	192.168.2.7	104.18.2.81
Jun 4, 2024 12:43:35.063046932 CEST	59738	587	192.168.2.7	104.18.2.81
Jun 4, 2024 12:43:35.063077927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.063630104 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.064064980 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.064105988 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.064120054 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.067929029 CEST	587	59738	104.18.2.81	192.168.2.7
Jun 4, 2024 12:43:35.067961931 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.082727909 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.082819939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.083156109 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:35.085942984 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:35.086863041 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:35.086915970 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:35.086941957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.086941957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.086952925 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:35.086963892 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:35.086963892 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:35.087033987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.087058067 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:35.087693930 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.090842962 CEST	587	59900	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:35.090909958 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:35.090991020 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.091824055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.092036009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.092097998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.092108965 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.096019030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.097132921 CEST	59901	587	192.168.2.7	129.232.148.154
Jun 4, 2024 12:43:35.097812891 CEST	587	59739	77.75.78.173	192.168.2.7
Jun 4, 2024 12:43:35.097867966 CEST	59739	587	192.168.2.7	77.75.78.173
Jun 4, 2024 12:43:35.097904921 CEST	59739	587	192.168.2.7	77.75.78.173
Jun 4, 2024 12:43:35.097954035 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.098133087 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.098201036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.098848104 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:35.098959923 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.100213051 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:35.102101088 CEST	587	59901	129.232.148.154	192.168.2.7
Jun 4, 2024 12:43:35.102180958 CEST	59901	587	192.168.2.7	129.232.148.154
Jun 4, 2024 12:43:35.102859974 CEST	587	59739	77.75.78.173	192.168.2.7
Jun 4, 2024 12:43:35.102886915 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.103100061 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.105879068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.106026888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.110843897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.110910892 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.130064011 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.145678043 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:35.145679951 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:35.172538042 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:35.172663927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.177526951 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.180351973 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.180375099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.180463076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.181135893 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:35.181195974 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:35.181308031 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:35.185280085 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.185986996 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.186306000 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:35.186316967 CEST	587	59858	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:35.192112923 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.192142963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.192529917 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.193191051 CEST	59802	587	192.168.2.7	172.67.186.83
Jun 4, 2024 12:43:35.193226099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.193291903 CEST	59805	465	192.168.2.7	142.250.150.27
Jun 4, 2024 12:43:35.193334103 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.193423033 CEST	59803	465	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:35.193434000 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.193680048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.193795919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.193819046 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.195960045 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:35.196013927 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:35.196024895 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:35.196037054 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:35.196054935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.196054935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.196059942 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:35.196094036 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:35.196147919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.196993113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.198338985 CEST	587	59802	172.67.186.83	192.168.2.7
Jun 4, 2024 12:43:35.198359966 CEST	587	59802	172.67.186.83	192.168.2.7
Jun 4, 2024 12:43:35.198405027 CEST	59802	587	192.168.2.7	172.67.186.83
Jun 4, 2024 12:43:35.198662996 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.198683023 CEST	465	59805	142.250.150.27	192.168.2.7
Jun 4, 2024 12:43:35.198694944 CEST	465	59803	173.194.76.27	192.168.2.7
Jun 4, 2024 12:43:35.198726892 CEST	59805	465	192.168.2.7	142.250.150.27
Jun 4, 2024 12:43:35.198757887 CEST	59803	465	192.168.2.7	173.194.76.27
Jun 4, 2024 12:43:35.198806047 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.201021910 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.201073885 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.203464985 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:35.203552961 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.203988075 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.204009056 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.204020977 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.204056025 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.204061031 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.204072952 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.204077959 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.204113007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.204113007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.204118013 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.204139948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.204818964 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.204829931 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.204870939 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.204902887 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.209017992 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.209033966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.209038019 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.209076881 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.209121943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.209705114 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.213886023 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.223746061 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:35.239412069 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.245862961 CEST	59902	465	192.168.2.7	77.247.67.170
Jun 4, 2024 12:43:35.250790119 CEST	465	59902	77.247.67.170	192.168.2.7
Jun 4, 2024 12:43:35.250869989 CEST	59902	465	192.168.2.7	77.247.67.170
Jun 4, 2024 12:43:35.250896931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.254142046 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.255060911 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:35.256001949 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.293271065 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:35.293364048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.296236992 CEST	587	59743	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:35.296379089 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.296380043 CEST	59743	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:35.296380043 CEST	59743	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:35.298068047 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:35.298115969 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:35.298127890 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:35.298149109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.298149109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.298151970 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:35.298156023 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:35.298161983 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.298183918 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:35.298190117 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.298288107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.298309088 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:35.298548937 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:35.298712969 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:35.299109936 CEST	59903	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:35.299514055 CEST	59904	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:35.301245928 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.301285982 CEST	587	59743	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:35.303050041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.303339958 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.303349972 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.303359985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.303483009 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.303493977 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:35.303503036 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:35.303544044 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:35.303970098 CEST	587	59903	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:35.304027081 CEST	59903	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:35.304070950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.304410934 CEST	587	59904	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:35.304460049 CEST	59904	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:35.304493904 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.306197882 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.306266069 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.307321072 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.307349920 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.307358980 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.307369947 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.307385921 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.307409048 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.307413101 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.307450056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.307495117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.308813095 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.308824062 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.308862925 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.308893919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.309040070 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.309478045 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.311094046 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.312438011 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.312535048 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.312544107 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.312552929 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.313711882 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.313772917 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.319329023 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:35.319403887 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.324242115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.324764967 CEST	59905	587	192.168.2.7	91.195.240.13
Jun 4, 2024 12:43:35.329622984 CEST	587	59905	91.195.240.13	192.168.2.7
Jun 4, 2024 12:43:35.329699993 CEST	59905	587	192.168.2.7	91.195.240.13
Jun 4, 2024 12:43:35.329794884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.333241940 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:35.334774017 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.338587046 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.338608027 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.338673115 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:35.338676929 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.338713884 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.338725090 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.338758945 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:35.338793039 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.338859081 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.339693069 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.339705944 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:35.339754105 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:35.339831114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.343039036 CEST	587	59858	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:35.343137980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.343677044 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.343727112 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.343736887 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.343746901 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.343750000 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.343750000 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.343767881 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.343775034 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.343800068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.343878031 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.343888998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.344691038 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.344811916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.347950935 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.348623037 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.348639965 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.348819017 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.364537001 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:35.381736994 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:35.381827116 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.386710882 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.395644903 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:35.419245005 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.419367075 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:35.419434071 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:35.419478893 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:35.419543982 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:35.419591904 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.419631958 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.419684887 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.421828032 CEST	587	59747	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:35.421895027 CEST	59747	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:35.421931982 CEST	59747	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:35.421950102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.424350023 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:35.424360037 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:35.424367905 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:35.424438000 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:35.424516916 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.424638987 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.424683094 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.426793098 CEST	587	59747	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:35.426902056 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:35.427306890 CEST	59807	465	192.168.2.7	87.54.32.247
Jun 4, 2024 12:43:35.427340984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.428216934 CEST	59906	587	192.168.2.7	49.213.103.199
Jun 4, 2024 12:43:35.432257891 CEST	465	59807	87.54.32.247	192.168.2.7
Jun 4, 2024 12:43:35.432313919 CEST	59807	465	192.168.2.7	87.54.32.247
Jun 4, 2024 12:43:35.432396889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.433116913 CEST	587	59906	49.213.103.199	192.168.2.7
Jun 4, 2024 12:43:35.433173895 CEST	59906	587	192.168.2.7	49.213.103.199
Jun 4, 2024 12:43:35.433769941 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.446079016 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.446248055 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.446258068 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.446300030 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.449757099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.449930906 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.454756021 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.454900026 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.457798004 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:35.457892895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.459688902 CEST	587	59892	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.468760014 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:35.468854904 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:35.468904972 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:35.470143080 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.473822117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.474977016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.489324093 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.497817039 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:35.497867107 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:35.497876883 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:35.497888088 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:35.497909069 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:35.497920990 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:35.504884958 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:35.510531902 CEST	59892	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.522162914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.524133921 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:35.537060022 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.567408085 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:35.571702003 CEST	587	59893	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.578624010 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:35.580763102 CEST	465	59899	178.63.100.23	192.168.2.7
Jun 4, 2024 12:43:35.580832005 CEST	59899	465	192.168.2.7	178.63.100.23
Jun 4, 2024 12:43:35.581552982 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:35.581595898 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:35.583028078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.599102020 CEST	587	59892	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.599174023 CEST	59892	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.600363970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.601088047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.601237059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.601773024 CEST	50061	587	192.168.2.7	194.19.134.85
Jun 4, 2024 12:43:35.601824045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.602387905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.602488995 CEST	59899	465	192.168.2.7	178.63.100.23
Jun 4, 2024 12:43:35.602518082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.603055000 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.603250980 CEST	59892	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.603425980 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.603482008 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:35.603542089 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:35.607043028 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.607167006 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.607558966 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.607662916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.607681036 CEST	587	50061	194.19.134.85	192.168.2.7
Jun 4, 2024 12:43:35.607690096 CEST	465	59899	178.63.100.23	192.168.2.7
Jun 4, 2024 12:43:35.607767105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.608124018 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.608207941 CEST	587	59892	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.608259916 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.608386993 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:35.608405113 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:35.614597082 CEST	59893	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.628246069 CEST	59814	465	192.168.2.7	74.125.200.27
Jun 4, 2024 12:43:35.628277063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.630109072 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:35.633228064 CEST	465	59814	74.125.200.27	192.168.2.7
Jun 4, 2024 12:43:35.633369923 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.633485079 CEST	59814	465	192.168.2.7	74.125.200.27
Jun 4, 2024 12:43:35.634875059 CEST	59815	465	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:35.634901047 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.635031939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.635138035 CEST	59813	587	192.168.2.7	204.141.43.44
Jun 4, 2024 12:43:35.640758991 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.640922070 CEST	465	59815	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:35.640957117 CEST	587	59813	204.141.43.44	192.168.2.7
Jun 4, 2024 12:43:35.640976906 CEST	59815	465	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:35.641012907 CEST	59813	587	192.168.2.7	204.141.43.44
Jun 4, 2024 12:43:35.662947893 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:35.667856932 CEST	587	59756	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:35.668282986 CEST	59756	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:35.669559002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.669821024 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:35.670016050 CEST	59756	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:35.670048952 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.670166016 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.674511909 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:35.674566984 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:35.674576998 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:35.674591064 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:35.674601078 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.674617052 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:35.674643040 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:35.674897909 CEST	587	59756	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:35.674985886 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.677244902 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.677257061 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.677268028 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.677278996 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.677313089 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.677359104 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.677856922 CEST	587	59760	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:35.677903891 CEST	59760	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:35.679963112 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.682931900 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.682980061 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.682991982 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.683005095 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.683032990 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.683069944 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.683634043 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.683645010 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.683680058 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.684715986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.689379930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.689620018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.689637899 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.689655066 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.689694881 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.689740896 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.690432072 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.690659046 CEST	59760	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:35.690689087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.694305897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.694608927 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.694648981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.694775105 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.694794893 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.694842100 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.695034981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.695205927 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:35.695275068 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:35.695677042 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.695810080 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.695821047 CEST	587	59760	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:35.696254015 CEST	587	59898	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.698915005 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:35.698972940 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.699021101 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.699065924 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.700170040 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:35.700212002 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:35.701397896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.703743935 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:35.703763962 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.703819036 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.703829050 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.706302881 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.708195925 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:35.711302042 CEST	587	59893	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.712557077 CEST	59893	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.712614059 CEST	59893	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.712639093 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.717469931 CEST	587	59893	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.723758936 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.723759890 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:35.739375114 CEST	59898	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.743319035 CEST	59907	587	192.168.2.7	41.193.157.227
Jun 4, 2024 12:43:35.746350050 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:35.748178005 CEST	587	59907	41.193.157.227	192.168.2.7
Jun 4, 2024 12:43:35.748234987 CEST	59907	587	192.168.2.7	41.193.157.227
Jun 4, 2024 12:43:35.748322010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.751214981 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:35.751262903 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:35.751327038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.753187895 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.758328915 CEST	59909	587	192.168.2.7	52.45.199.183
Jun 4, 2024 12:43:35.762324095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.762362957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.763828039 CEST	587	59909	52.45.199.183	192.168.2.7
Jun 4, 2024 12:43:35.763897896 CEST	59909	587	192.168.2.7	52.45.199.183
Jun 4, 2024 12:43:35.763962984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.767692089 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.768945932 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.769562006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.769594908 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.769742012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.769772053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.774502039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.774647951 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.812098980 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.812206030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.812287092 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.812364101 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.812412024 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.812454939 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.812824965 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:35.813432932 CEST	59910	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:35.817759037 CEST	59825	465	192.168.2.7	92.204.80.0
Jun 4, 2024 12:43:35.817785978 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.819051981 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.819063902 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.819072962 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.819084883 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:35.819189072 CEST	587	59910	142.250.153.26	192.168.2.7
Jun 4, 2024 12:43:35.819247007 CEST	59910	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:35.819312096 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.822693110 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.822704077 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.822714090 CEST	465	59825	92.204.80.0	192.168.2.7
Jun 4, 2024 12:43:35.822750092 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.822763920 CEST	59825	465	192.168.2.7	92.204.80.0
Jun 4, 2024 12:43:35.822849035 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.822866917 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.827750921 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.834939003 CEST	587	59898	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.836731911 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.836760998 CEST	59898	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.836760998 CEST	59898	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.841816902 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.841893911 CEST	587	59898	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.850482941 CEST	587	59900	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:35.850565910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.853455067 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:35.853774071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.858709097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.862390995 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:35.862401009 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:35.862432003 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:35.862446070 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:35.862457037 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:35.862473965 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:35.862508059 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:35.862601042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.864386082 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:35.867480040 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.867903948 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:35.868110895 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:35.868141890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.868153095 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:35.868190050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.872874975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.873063087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.878870964 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:35.878950119 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.883780003 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.895663023 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:35.895663977 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:35.911282063 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:35.917275906 CEST	587	59767	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:35.917359114 CEST	59767	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:35.917421103 CEST	59767	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:35.917447090 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.922497988 CEST	587	59767	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:35.925978899 CEST	587	59768	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:35.926031113 CEST	59768	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:35.926079035 CEST	59768	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:35.926110029 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.926887989 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:35.930995941 CEST	587	59768	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:35.951268911 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.954685926 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:35.954900980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.956912994 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.957546949 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:35.958372116 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:35.959299088 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.959616899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.959638119 CEST	59826	465	192.168.2.7	202.50.90.1
Jun 4, 2024 12:43:35.959790945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.959888935 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.959956884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.960309982 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:35.960570097 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.961200953 CEST	59911	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.962481022 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:35.963298082 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:35.964596987 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.964613914 CEST	465	59826	202.50.90.1	192.168.2.7
Jun 4, 2024 12:43:35.964668036 CEST	59826	465	192.168.2.7	202.50.90.1
Jun 4, 2024 12:43:35.964864969 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.965811014 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:35.966162920 CEST	587	59911	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:35.966228008 CEST	59911	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:35.966289997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.966315985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.970125914 CEST	59912	587	192.168.2.7	94.177.209.28
Jun 4, 2024 12:43:35.970258951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.970288992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.971381903 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.971906900 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.971925020 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.975027084 CEST	587	59912	94.177.209.28	192.168.2.7
Jun 4, 2024 12:43:35.975105047 CEST	59912	587	192.168.2.7	94.177.209.28
Jun 4, 2024 12:43:35.975155115 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:35.975183010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:35.976811886 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.005070925 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.005074978 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.005177975 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.006511927 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:36.010459900 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:36.010514975 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:36.010579109 CEST	50044	587	192.168.2.7	195.32.69.33
Jun 4, 2024 12:43:36.010629892 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.015470028 CEST	587	50044	195.32.69.33	192.168.2.7
Jun 4, 2024 12:43:36.015486002 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.020782948 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:36.061317921 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:36.061449051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.069688082 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.070480108 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.075448036 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.075517893 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.075594902 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.075660944 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:36.075679064 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.075717926 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.075797081 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:36.076168060 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:36.076216936 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.076273918 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.076286077 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.076344013 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.076561928 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:36.080662966 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:36.080770969 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.080853939 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:36.081037045 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:36.081130981 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.081201077 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.081228971 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.081449986 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:36.096955061 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.097035885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.098711014 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.098892927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.103837013 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.114386082 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.114397049 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:36.117599964 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:36.121709108 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.130074024 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.132513046 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.145675898 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.145677090 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.161269903 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:36.170156956 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.182988882 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:36.187025070 CEST	59914	587	192.168.2.7	202.138.49.32
Jun 4, 2024 12:43:36.187900066 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:36.187967062 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:36.188071012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.191915035 CEST	587	59914	202.138.49.32	192.168.2.7
Jun 4, 2024 12:43:36.192003965 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.192120075 CEST	59914	587	192.168.2.7	202.138.49.32
Jun 4, 2024 12:43:36.193165064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.193718910 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.193856001 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:36.194114923 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.194165945 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.194355965 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.194592953 CEST	59915	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:36.198755026 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:36.199120998 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.199151993 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.199238062 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.199618101 CEST	587	59915	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:36.199682951 CEST	59915	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:36.199719906 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.199760914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.199850082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.204152107 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.204299927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.204936981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.213035107 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:36.213114977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.214428902 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.214499950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.216222048 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.216294050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.218156099 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.221271038 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.243024111 CEST	59916	587	192.168.2.7	79.143.126.202
Jun 4, 2024 12:43:36.247941971 CEST	587	59916	79.143.126.202	192.168.2.7
Jun 4, 2024 12:43:36.248055935 CEST	59916	587	192.168.2.7	79.143.126.202
Jun 4, 2024 12:43:36.248126984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.255028009 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:36.255027056 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.255027056 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.255069017 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.270679951 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.294203043 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.298571110 CEST	587	59909	52.45.199.183	192.168.2.7
Jun 4, 2024 12:43:36.298657894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.303632021 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.315280914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.315406084 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:36.315715075 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.315886974 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:36.315934896 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:36.317703962 CEST	59831	465	192.168.2.7	195.201.87.79
Jun 4, 2024 12:43:36.317728996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.317967892 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.318063974 CEST	59884	587	192.168.2.7	116.202.134.231
Jun 4, 2024 12:43:36.318464994 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:36.318542004 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.320115089 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:36.320219994 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.320280075 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:36.320615053 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.320789099 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:36.320895910 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:36.321866035 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:36.321935892 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.323057890 CEST	465	59831	195.201.87.79	192.168.2.7
Jun 4, 2024 12:43:36.323112011 CEST	59831	465	192.168.2.7	195.201.87.79
Jun 4, 2024 12:43:36.323483944 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.323761940 CEST	587	59884	116.202.134.231	192.168.2.7
Jun 4, 2024 12:43:36.323823929 CEST	59884	587	192.168.2.7	116.202.134.231
Jun 4, 2024 12:43:36.327229977 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.328727007 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:36.328799963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.338269949 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.338350058 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.343303919 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.348788023 CEST	59909	587	192.168.2.7	52.45.199.183
Jun 4, 2024 12:43:36.364445925 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:36.364448071 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:36.364447117 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:36.380076885 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.380078077 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:36.432276011 CEST	587	59785	80.158.67.40	192.168.2.7
Jun 4, 2024 12:43:36.432307959 CEST	587	59784	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:36.432344913 CEST	59785	587	192.168.2.7	80.158.67.40
Jun 4, 2024 12:43:36.432373047 CEST	59784	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:36.432411909 CEST	59785	587	192.168.2.7	80.158.67.40
Jun 4, 2024 12:43:36.432450056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.432451963 CEST	59784	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:36.432481050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.433904886 CEST	587	59787	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:36.433959961 CEST	59787	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.433988094 CEST	59787	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.434012890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.437375069 CEST	587	59785	80.158.67.40	192.168.2.7
Jun 4, 2024 12:43:36.437906981 CEST	587	59784	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:36.438051939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.438776016 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.438889980 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.439148903 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.439228058 CEST	587	59787	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:36.439254999 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:36.439338923 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.439449072 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.439635038 CEST	59917	587	192.168.2.7	74.208.236.198
Jun 4, 2024 12:43:36.439851046 CEST	59918	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.441272974 CEST	587	59790	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:36.441329956 CEST	59790	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:36.441358089 CEST	59790	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:36.441380024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.443865061 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.443984985 CEST	59833	587	192.168.2.7	52.101.73.22
Jun 4, 2024 12:43:36.444000006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.444058895 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.444089890 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:36.444289923 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.444392920 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.444547892 CEST	587	59917	74.208.236.198	192.168.2.7
Jun 4, 2024 12:43:36.444720030 CEST	587	59918	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:36.444789886 CEST	59917	587	192.168.2.7	74.208.236.198
Jun 4, 2024 12:43:36.444840908 CEST	59918	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.444842100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.444891930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.446338892 CEST	587	59790	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:36.446487904 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.447515011 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:36.447597027 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.449312925 CEST	587	59833	52.101.73.22	192.168.2.7
Jun 4, 2024 12:43:36.449381113 CEST	59833	587	192.168.2.7	52.101.73.22
Jun 4, 2024 12:43:36.450516939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.455915928 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.456033945 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.460978985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.463466883 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.463505030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.468682051 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.475495100 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.475605965 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.477716923 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.480592012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.485739946 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.489450932 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:36.505089045 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.506999016 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:36.507102966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.520617008 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.524506092 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.552542925 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:36.557437897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.557564974 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:36.557634115 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:36.562494040 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:36.562601089 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:36.562865973 CEST	587	59792	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:36.563049078 CEST	59792	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.563049078 CEST	59792	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.563081980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.568095922 CEST	587	59792	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:36.568706036 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.568794012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.573796034 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.578128099 CEST	587	59794	40.85.218.2	192.168.2.7
Jun 4, 2024 12:43:36.578260899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.578308105 CEST	59794	587	192.168.2.7	40.85.218.2
Jun 4, 2024 12:43:36.578308105 CEST	59794	587	192.168.2.7	40.85.218.2
Jun 4, 2024 12:43:36.578325033 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:36.578432083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.583281040 CEST	587	59794	40.85.218.2	192.168.2.7
Jun 4, 2024 12:43:36.583415985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.584307909 CEST	587	59912	94.177.209.28	192.168.2.7
Jun 4, 2024 12:43:36.584376097 CEST	59912	587	192.168.2.7	94.177.209.28
Jun 4, 2024 12:43:36.584424973 CEST	59912	587	192.168.2.7	94.177.209.28
Jun 4, 2024 12:43:36.584460020 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.589382887 CEST	587	59912	94.177.209.28	192.168.2.7
Jun 4, 2024 12:43:36.609711885 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:36.609812975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.614408970 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.614768982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.630079031 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:36.661254883 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:36.873660088 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:36.873691082 CEST	587	59798	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:36.873701096 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:36.873722076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.873800993 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.873811007 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.873828888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.873841047 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.873852968 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.873863935 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:36.873872995 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:36.873876095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.873883963 CEST	587	59911	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.873924971 CEST	59798	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.873924971 CEST	59798	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.873970985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874012947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.874022961 CEST	587	59804	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:36.874032974 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:36.874058008 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874059916 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:36.874085903 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:36.874097109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874097109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874108076 CEST	59804	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:36.874133110 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:36.874136925 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874161959 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.874171019 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.874181986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874191999 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.874200106 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874211073 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874222040 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.874234915 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.874255896 CEST	587	59911	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.874274015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874274015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874303102 CEST	59804	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:36.874317884 CEST	59911	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.874320030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874430895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874461889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874490976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874507904 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874532938 CEST	59911	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.874551058 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:36.874551058 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874780893 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:36.874806881 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874838114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.874840021 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:36.875134945 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.875174046 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:36.875225067 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:36.875281096 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:36.875655890 CEST	50054	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.875763893 CEST	59919	465	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:36.878133059 CEST	587	59911	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.878170967 CEST	587	59798	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:36.878180027 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.878185987 CEST	59911	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.878190041 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.878209114 CEST	59798	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:36.878247976 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.878257990 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.879267931 CEST	587	59798	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:36.879416943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.880214930 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.880223989 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.880234003 CEST	587	59804	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:36.880254030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.880270958 CEST	587	59911	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.880491972 CEST	59838	587	192.168.2.7	85.10.159.54
Jun 4, 2024 12:43:36.880516052 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.880522966 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:36.880572081 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:36.880580902 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:36.880598068 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.880609035 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:36.881019115 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:36.881027937 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.881161928 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:36.881206036 CEST	587	50054	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.881217003 CEST	465	59919	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:36.881269932 CEST	59919	465	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:36.881364107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.885514975 CEST	587	59838	85.10.159.54	192.168.2.7
Jun 4, 2024 12:43:36.885571003 CEST	59838	587	192.168.2.7	85.10.159.54
Jun 4, 2024 12:43:36.886384010 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.893279076 CEST	59920	465	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:36.894227028 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.894254923 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.898264885 CEST	465	59920	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:36.898329020 CEST	59920	465	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:36.898386002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.899195910 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.901379108 CEST	59921	465	192.168.2.7	142.250.186.179
Jun 4, 2024 12:43:36.902131081 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:36.902180910 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:36.906228065 CEST	465	59921	142.250.186.179	192.168.2.7
Jun 4, 2024 12:43:36.906281948 CEST	59921	465	192.168.2.7	142.250.186.179
Jun 4, 2024 12:43:36.906316996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.910120964 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:36.910176039 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.911396980 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.913253069 CEST	587	59809	114.179.184.189	192.168.2.7
Jun 4, 2024 12:43:36.913311958 CEST	59809	587	192.168.2.7	114.179.184.189
Jun 4, 2024 12:43:36.913347006 CEST	59809	587	192.168.2.7	114.179.184.189
Jun 4, 2024 12:43:36.913364887 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.917191029 CEST	587	59812	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:36.917237997 CEST	59812	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:36.917273998 CEST	59812	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:36.917288065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.918293953 CEST	587	59809	114.179.184.189	192.168.2.7
Jun 4, 2024 12:43:36.921952963 CEST	587	59810	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:36.922014952 CEST	59810	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:36.922045946 CEST	59810	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:36.922064066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.922179937 CEST	587	59812	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:36.922203064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.924201965 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:36.924273014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.926892996 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:36.926892996 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:36.926908016 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:36.926911116 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:36.926923990 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:36.926923990 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:36.927086115 CEST	587	59810	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:36.945557117 CEST	59922	465	192.168.2.7	177.70.110.120
Jun 4, 2024 12:43:36.946393967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.950473070 CEST	465	59922	177.70.110.120	192.168.2.7
Jun 4, 2024 12:43:36.950526953 CEST	59922	465	192.168.2.7	177.70.110.120
Jun 4, 2024 12:43:36.950604916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.960037947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.960105896 CEST	587	59915	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:36.960163116 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:36.960342884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.960498095 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:36.960503101 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:36.960675955 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:36.960712910 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:36.964948893 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:36.965353966 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:36.965363026 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:36.965517044 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:36.965528011 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:36.970648050 CEST	587	59905	91.195.240.13	192.168.2.7
Jun 4, 2024 12:43:36.970701933 CEST	59905	587	192.168.2.7	91.195.240.13
Jun 4, 2024 12:43:36.970861912 CEST	59905	587	192.168.2.7	91.195.240.13
Jun 4, 2024 12:43:36.970865011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.973797083 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:36.974016905 CEST	59840	465	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:36.974031925 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.975743055 CEST	587	59905	91.195.240.13	192.168.2.7
Jun 4, 2024 12:43:36.975796938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:36.978950977 CEST	465	59840	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:36.979000092 CEST	59840	465	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:36.981771946 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.981801987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:36.986821890 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.005044937 CEST	59915	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:37.013067007 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:37.013211012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.034373999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.034413099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.039254904 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.042150974 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:37.042227030 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:37.042244911 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:37.042253017 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.042284012 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:37.042330980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.042340040 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:37.042349100 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:37.042395115 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:37.042414904 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.047214985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.047452927 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.053963900 CEST	587	59817	114.179.184.189	192.168.2.7
Jun 4, 2024 12:43:37.054023981 CEST	59817	587	192.168.2.7	114.179.184.189
Jun 4, 2024 12:43:37.054053068 CEST	59817	587	192.168.2.7	114.179.184.189
Jun 4, 2024 12:43:37.054089069 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.058955908 CEST	587	59817	114.179.184.189	192.168.2.7
Jun 4, 2024 12:43:37.059032917 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.067500114 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:37.077280998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.081739902 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:37.081789970 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:37.081845045 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:37.081880093 CEST	587	59819	87.238.28.12	192.168.2.7
Jun 4, 2024 12:43:37.081923962 CEST	59819	587	192.168.2.7	87.238.28.12
Jun 4, 2024 12:43:37.081990957 CEST	59819	587	192.168.2.7	87.238.28.12
Jun 4, 2024 12:43:37.082019091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.084645033 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:37.084733963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.086971998 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:37.086982965 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:37.086992979 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.087002993 CEST	587	59819	87.238.28.12	192.168.2.7
Jun 4, 2024 12:43:37.089639902 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.097184896 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:37.097280979 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.110538006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.110572100 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.113900900 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:37.113976955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.115896940 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:37.115915060 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.116061926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.116228104 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:37.116271973 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:37.116298914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.117388010 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.117413044 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.117465973 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.117465973 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.117485046 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:37.117491961 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.117522001 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.117522955 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.117522001 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.117563009 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:37.117609978 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.118262053 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.118307114 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.118331909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.118331909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.118343115 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:37.118383884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.119554996 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.120522976 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:37.120604992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.121931076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.122430086 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.122631073 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.122641087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.123377085 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.124353886 CEST	59923	587	192.168.2.7	195.15.132.130
Jun 4, 2024 12:43:37.125452042 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.126317978 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.126405954 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.129251003 CEST	587	59923	195.15.132.130	192.168.2.7
Jun 4, 2024 12:43:37.129306078 CEST	59923	587	192.168.2.7	195.15.132.130
Jun 4, 2024 12:43:37.129338026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.130019903 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:37.135006905 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.137727022 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.137803078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.146595955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.146622896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.148163080 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:37.151545048 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.161267042 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:37.161271095 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:37.167313099 CEST	587	59822	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:37.167387009 CEST	59822	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:37.167428017 CEST	59822	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:37.167464972 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.169949055 CEST	587	59824	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:37.170011997 CEST	59824	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:37.170042038 CEST	59824	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:37.170068026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.170835018 CEST	587	59823	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:37.170933962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.171022892 CEST	59823	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:37.171022892 CEST	59823	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:37.172305107 CEST	587	59822	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:37.175026894 CEST	587	59824	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:37.175093889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.175947905 CEST	587	59823	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:37.176947117 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.176954985 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.183429003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.183451891 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.188384056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.196999073 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:37.197220087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.199198008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.199548960 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:37.199733973 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:37.204355955 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:37.204566002 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:37.206597090 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:37.206906080 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.211775064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.239375114 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:37.255136967 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:37.277311087 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.277404070 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.287277937 CEST	587	59828	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:37.287333965 CEST	59828	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:37.287369967 CEST	59828	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:37.287396908 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.289833069 CEST	587	59829	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:37.289880991 CEST	59829	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:37.289935112 CEST	59829	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:37.289969921 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.292197943 CEST	587	59828	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:37.292243958 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.294775963 CEST	587	59829	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:37.301650047 CEST	59924	587	192.168.2.7	193.120.143.144
Jun 4, 2024 12:43:37.306543112 CEST	587	59924	193.120.143.144	192.168.2.7
Jun 4, 2024 12:43:37.306619883 CEST	59924	587	192.168.2.7	193.120.143.144
Jun 4, 2024 12:43:37.306665897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.311702013 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.311764956 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.311865091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.317673922 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.320882082 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.321023941 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:37.321074963 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:37.321106911 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:37.321161985 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:37.321213007 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.325943947 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:37.325969934 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.325984955 CEST	587	59858	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:37.326028109 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:37.326097012 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.328294039 CEST	59925	587	192.168.2.7	40.99.150.66
Jun 4, 2024 12:43:37.333201885 CEST	587	59925	40.99.150.66	192.168.2.7
Jun 4, 2024 12:43:37.333676100 CEST	59925	587	192.168.2.7	40.99.150.66
Jun 4, 2024 12:43:37.333712101 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.335191011 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:37.335267067 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.336261988 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:37.336306095 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:37.336328030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.338644028 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:37.338712931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.340116024 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.343683004 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.344563961 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.344578981 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.344604969 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.344623089 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.344624043 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:37.344638109 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.344667912 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.344680071 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:37.344743013 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.349728107 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.349742889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.364438057 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.380104065 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:37.394196033 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.445756912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.445954084 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.446223974 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.446389914 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:37.446490049 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:37.446536064 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:37.446583986 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:37.447025061 CEST	59926	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:37.450836897 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.451129913 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.451265097 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:37.451416016 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:37.451457977 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:37.451472998 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:37.451870918 CEST	587	59926	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:37.451956987 CEST	59926	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:37.451972961 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.454406023 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.454503059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.457081079 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.457226992 CEST	587	59830	89.39.182.172	192.168.2.7
Jun 4, 2024 12:43:37.457276106 CEST	59830	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:37.457304001 CEST	59830	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:37.457330942 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.458457947 CEST	59854	465	192.168.2.7	69.49.115.40
Jun 4, 2024 12:43:37.458489895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.458544016 CEST	59855	587	192.168.2.7	103.224.182.246
Jun 4, 2024 12:43:37.458583117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.458769083 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:37.458851099 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.459441900 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.460370064 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.460398912 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.462254047 CEST	587	59830	89.39.182.172	192.168.2.7
Jun 4, 2024 12:43:37.462274075 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.463485003 CEST	465	59854	69.49.115.40	192.168.2.7
Jun 4, 2024 12:43:37.463521004 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.463536978 CEST	59854	465	192.168.2.7	69.49.115.40
Jun 4, 2024 12:43:37.463536978 CEST	587	59855	103.224.182.246	192.168.2.7
Jun 4, 2024 12:43:37.463592052 CEST	59855	587	192.168.2.7	103.224.182.246
Jun 4, 2024 12:43:37.463840008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.465600967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.475405931 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:37.476255894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.478549004 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.478728056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.481173992 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.483345032 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.483421087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.483627081 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.485848904 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.485882044 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.488342047 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.490931034 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.504971027 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.504983902 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:37.520823956 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:37.520945072 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:37.536823988 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:37.767827988 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:37.767854929 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:37.767868042 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:37.767884970 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:37.767977953 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.768013000 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:37.768013000 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:37.768045902 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.768089056 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.768165112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.768378973 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:37.768394947 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:37.768419027 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:37.768419981 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:37.768469095 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.768516064 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.768623114 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:37.768656015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.768712044 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.768739939 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:37.768770933 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.768816948 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:37.768886089 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.768934011 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:37.768997908 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:37.769062042 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.769238949 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.769386053 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.769401073 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.769457102 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:37.769478083 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:37.769550085 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.769584894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.769609928 CEST	59927	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:37.769618034 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.769665003 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.769686937 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.769778013 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.769814968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.769843102 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:37.769843102 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.769857883 CEST	587	59907	41.193.157.227	192.168.2.7
Jun 4, 2024 12:43:37.769890070 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.769928932 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.770179033 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.770217896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.770380974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.770406008 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.771585941 CEST	59928	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:37.771939993 CEST	59930	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.772455931 CEST	59931	465	192.168.2.7	217.72.192.67
Jun 4, 2024 12:43:37.773072004 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773087978 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773303986 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773330927 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773591995 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773605108 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773842096 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773865938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773881912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773915052 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:37.773942947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.773988962 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:37.774132967 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:37.774157047 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.774945021 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.775043964 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.775109053 CEST	587	59927	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:37.775156975 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.775160074 CEST	59927	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:37.775208950 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:37.775221109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.775763988 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.775801897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.775840998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.775877953 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.775906086 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.776506901 CEST	587	59928	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:37.776554108 CEST	59928	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:37.776582956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.776782036 CEST	587	59930	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.776829958 CEST	59930	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.776866913 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.776920080 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.777278900 CEST	465	59931	217.72.192.67	192.168.2.7
Jun 4, 2024 12:43:37.777335882 CEST	59931	465	192.168.2.7	217.72.192.67
Jun 4, 2024 12:43:37.777363062 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.780073881 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.781568050 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.781987906 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.782485962 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.799386024 CEST	59932	587	192.168.2.7	46.255.231.19
Jun 4, 2024 12:43:37.804296970 CEST	587	59932	46.255.231.19	192.168.2.7
Jun 4, 2024 12:43:37.804371119 CEST	59932	587	192.168.2.7	46.255.231.19
Jun 4, 2024 12:43:37.804450989 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.809526920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.810714960 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.810746908 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.815645933 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.817507982 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:37.817523003 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:37.817533016 CEST	59907	587	192.168.2.7	41.193.157.227
Jun 4, 2024 12:43:37.817537069 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.817608118 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:37.818903923 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:37.819026947 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:37.820640087 CEST	587	59923	195.15.132.130	192.168.2.7
Jun 4, 2024 12:43:37.820718050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.825624943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.845644951 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.845747948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.849237919 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.849296093 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.850529909 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.851017952 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:37.851069927 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:37.851135969 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:37.851278067 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:37.851383924 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:37.852389097 CEST	59933	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:37.855415106 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:37.855937004 CEST	587	59900	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:37.855969906 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:37.856050968 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:37.856205940 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:37.856468916 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:37.857287884 CEST	587	59933	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:37.857356071 CEST	59933	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:37.857424021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.862473011 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.864444971 CEST	59923	587	192.168.2.7	195.15.132.130
Jun 4, 2024 12:43:37.895667076 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:37.896467924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.896498919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.901504993 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.947782040 CEST	59934	587	192.168.2.7	199.224.64.207
Jun 4, 2024 12:43:37.952689886 CEST	587	59934	199.224.64.207	192.168.2.7
Jun 4, 2024 12:43:37.952800989 CEST	59934	587	192.168.2.7	199.224.64.207
Jun 4, 2024 12:43:37.953418016 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.966460943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.966844082 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:37.967158079 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:37.967240095 CEST	59935	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:37.967389107 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:37.967546940 CEST	59936	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:37.971756935 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.972182035 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:37.972213030 CEST	587	59935	89.39.182.172	192.168.2.7
Jun 4, 2024 12:43:37.972246885 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:37.972273111 CEST	59935	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:37.972351074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.972435951 CEST	587	59936	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:37.972495079 CEST	59936	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:37.972521067 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.974101067 CEST	59863	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:37.974102974 CEST	59864	465	192.168.2.7	208.113.231.255
Jun 4, 2024 12:43:37.974136114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.974188089 CEST	59862	587	192.168.2.7	185.71.61.14
Jun 4, 2024 12:43:37.974575043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.974605083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.977402925 CEST	59937	587	192.168.2.7	47.43.18.10
Jun 4, 2024 12:43:37.977416039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.977435112 CEST	59938	587	192.168.2.7	74.125.200.27
Jun 4, 2024 12:43:37.979069948 CEST	587	59863	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:37.979232073 CEST	59863	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:37.979358912 CEST	465	59864	208.113.231.255	192.168.2.7
Jun 4, 2024 12:43:37.979404926 CEST	59864	465	192.168.2.7	208.113.231.255
Jun 4, 2024 12:43:37.979408979 CEST	587	59862	185.71.61.14	192.168.2.7
Jun 4, 2024 12:43:37.979460001 CEST	59862	587	192.168.2.7	185.71.61.14
Jun 4, 2024 12:43:37.979536057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:37.979835033 CEST	587	59901	129.232.148.154	192.168.2.7
Jun 4, 2024 12:43:37.979926109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.982340097 CEST	587	59937	47.43.18.10	192.168.2.7
Jun 4, 2024 12:43:37.982368946 CEST	587	59938	74.125.200.27	192.168.2.7
Jun 4, 2024 12:43:37.982399940 CEST	59937	587	192.168.2.7	47.43.18.10
Jun 4, 2024 12:43:37.982420921 CEST	59938	587	192.168.2.7	74.125.200.27
Jun 4, 2024 12:43:37.982455969 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.982481956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:37.987938881 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.005740881 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:38.005860090 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.012821913 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.012856007 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.013838053 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:38.013930082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.014005899 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:38.014075041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.017713070 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.018812895 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.019413948 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:38.019532919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.020653963 CEST	59901	587	192.168.2.7	129.232.148.154
Jun 4, 2024 12:43:38.022768021 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:38.022841930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.024620056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.027514935 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.027589083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.028438091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.028538942 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.028538942 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.028584003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030369997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030458927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030483961 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.030488014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030512094 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.030525923 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.030553102 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.030554056 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.030558109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030558109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030566931 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.030580997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030592918 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.030620098 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030620098 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.030637026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.031702042 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.031728983 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.031750917 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.031790972 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.032650948 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.033387899 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.033844948 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.033862114 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.035270929 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.035573006 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.035588980 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.035614967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.035696030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.036622047 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.051960945 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:38.067578077 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.067578077 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:38.067579031 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:38.067578077 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:38.067578077 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:38.072808981 CEST	587	59925	40.99.150.66	192.168.2.7
Jun 4, 2024 12:43:38.072897911 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.077661037 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.077729940 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.077753067 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.083535910 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.084058046 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.084067106 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.084104061 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.084155083 CEST	50057	587	192.168.2.7	23.81.68.43
Jun 4, 2024 12:43:38.084211111 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.084259987 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.084321976 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:38.088958979 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.089003086 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.089018106 CEST	587	50057	23.81.68.43	192.168.2.7
Jun 4, 2024 12:43:38.089034081 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.089061022 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.089124918 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:38.097601891 CEST	587	59900	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:38.097677946 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.112212896 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.112262964 CEST	59925	587	192.168.2.7	40.99.150.66
Jun 4, 2024 12:43:38.112292051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.117364883 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.120738029 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:38.120816946 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.130008936 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.145652056 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:38.161267042 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.161267042 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:38.162319899 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.164648056 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.166165113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.168807030 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.168828964 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.168869972 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.168901920 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.168901920 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.168919086 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.169557095 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.173731089 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.173876047 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.176417112 CEST	587	59839	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:38.176464081 CEST	59839	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:38.176496029 CEST	59839	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:38.176531076 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.181485891 CEST	587	59839	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:38.181524992 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.208162069 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.211235046 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.211350918 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.211415052 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.211808920 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:38.211842060 CEST	59727	587	192.168.2.7	84.116.6.3
Jun 4, 2024 12:43:38.211889982 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:38.211939096 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:38.216285944 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.216340065 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.216639996 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:38.216725111 CEST	587	59727	84.116.6.3	192.168.2.7
Jun 4, 2024 12:43:38.216739893 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:38.216892958 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:38.224176884 CEST	59867	465	192.168.2.7	74.52.185.18
Jun 4, 2024 12:43:38.224210978 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.229188919 CEST	465	59867	74.52.185.18	192.168.2.7
Jun 4, 2024 12:43:38.229233980 CEST	59867	465	192.168.2.7	74.52.185.18
Jun 4, 2024 12:43:38.229685068 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:38.229768038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.233345032 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:38.233386993 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:38.233403921 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:38.233419895 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:38.233437061 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.233437061 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.233437061 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:38.233458996 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:38.233520985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.234622955 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.238456964 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.238473892 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.246861935 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:38.246968985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.251957893 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.251975060 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.252034903 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.270771027 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:38.298194885 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.301969051 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.302015066 CEST	587	59842	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:38.302022934 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:38.302059889 CEST	59842	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:38.302342892 CEST	59842	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:38.302372932 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.307199001 CEST	587	59842	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:38.307425022 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.336729050 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.337488890 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:38.337519884 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.337574959 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.337663889 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:38.338198900 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.338716030 CEST	59939	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.339600086 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.339771032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.339858055 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:38.339925051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.342741966 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.342767954 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:38.342798948 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.342813969 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:38.343034029 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.343556881 CEST	587	59939	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.343615055 CEST	59939	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.343652964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.344825029 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.345333099 CEST	59940	465	192.168.2.7	108.177.15.27
Jun 4, 2024 12:43:38.345530987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.345561981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.346306086 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.346415997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.350194931 CEST	465	59940	108.177.15.27	192.168.2.7
Jun 4, 2024 12:43:38.350275040 CEST	59940	465	192.168.2.7	108.177.15.27
Jun 4, 2024 12:43:38.350306988 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.350445032 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.351335049 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.367950916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.367981911 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.370989084 CEST	59941	465	192.168.2.7	3.64.163.50
Jun 4, 2024 12:43:38.371298075 CEST	465	59931	217.72.192.67	192.168.2.7
Jun 4, 2024 12:43:38.371409893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.371471882 CEST	59931	465	192.168.2.7	217.72.192.67
Jun 4, 2024 12:43:38.371471882 CEST	59931	465	192.168.2.7	217.72.192.67
Jun 4, 2024 12:43:38.373095989 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.375339985 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.375485897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.375869989 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:38.375895023 CEST	465	59941	3.64.163.50	192.168.2.7
Jun 4, 2024 12:43:38.375947952 CEST	59941	465	192.168.2.7	3.64.163.50
Jun 4, 2024 12:43:38.375947952 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.376012087 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.376241922 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.376370907 CEST	465	59931	217.72.192.67	192.168.2.7
Jun 4, 2024 12:43:38.380017042 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.381326914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.395658970 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:38.395749092 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.420950890 CEST	587	59843	89.39.182.172	192.168.2.7
Jun 4, 2024 12:43:38.421109915 CEST	59843	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:38.421183109 CEST	59843	587	192.168.2.7	89.39.182.172
Jun 4, 2024 12:43:38.421207905 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.421895981 CEST	587	59845	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:38.421947002 CEST	59845	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:38.421989918 CEST	59845	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:38.422012091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.422842026 CEST	587	59844	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:38.422902107 CEST	59844	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:38.422920942 CEST	59844	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:38.422939062 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.426170111 CEST	587	59843	89.39.182.172	192.168.2.7
Jun 4, 2024 12:43:38.426898956 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.426922083 CEST	587	59845	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:38.426951885 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:38.426987886 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.427845001 CEST	587	59844	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:38.436244965 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.436348915 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.441272020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.455908060 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:38.455986977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.463371038 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:38.463402033 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:38.463427067 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:38.463444948 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:38.463510036 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.463514090 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:38.463529110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.463546991 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:38.463547945 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:38.463604927 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.463634014 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.463644981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.464106083 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:38.464374065 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:38.464420080 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.464467049 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.464765072 CEST	59942	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:38.465161085 CEST	59943	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:38.468580961 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.468748093 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.468764067 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.469259977 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:38.469311953 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:38.469357967 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.469439030 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.469893932 CEST	587	59942	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:38.469960928 CEST	59942	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:38.469984055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.470015049 CEST	587	59943	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:38.470060110 CEST	59943	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:38.470093012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.473987103 CEST	59868	465	192.168.2.7	54.74.99.47
Jun 4, 2024 12:43:38.474009991 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.474571943 CEST	587	59928	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:38.474644899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.475425959 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.479018927 CEST	465	59868	54.74.99.47	192.168.2.7
Jun 4, 2024 12:43:38.479068041 CEST	59868	465	192.168.2.7	54.74.99.47
Jun 4, 2024 12:43:38.479665995 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.489387989 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.494546890 CEST	59944	587	192.168.2.7	23.227.38.65
Jun 4, 2024 12:43:38.494961023 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.494986057 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.499504089 CEST	587	59944	23.227.38.65	192.168.2.7
Jun 4, 2024 12:43:38.499567986 CEST	59944	587	192.168.2.7	23.227.38.65
Jun 4, 2024 12:43:38.499602079 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.499660015 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:38.499725103 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.500056982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.500937939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.500960112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.504663944 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.505096912 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:38.505121946 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:38.505840063 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.512775898 CEST	587	59936	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:38.512881994 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.520740032 CEST	59928	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:38.530780077 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.535671949 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.537906885 CEST	587	59846	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:38.537982941 CEST	59846	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:38.542617083 CEST	59846	587	192.168.2.7	187.6.211.40
Jun 4, 2024 12:43:38.542644024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.546338081 CEST	587	59930	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.546422958 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.547466993 CEST	587	59846	187.6.211.40	192.168.2.7
Jun 4, 2024 12:43:38.551388979 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.551923990 CEST	59936	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:38.551923990 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:38.582860947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.583776951 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:38.583848953 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:38.583961010 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:38.584156036 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:38.584383965 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.584470034 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.588644028 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:38.588756084 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:38.588895082 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:38.588994026 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:38.589303970 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.589493990 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.589932919 CEST	587	59928	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:38.589983940 CEST	59928	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:38.590019941 CEST	59928	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:38.590049028 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.591857910 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:38.591871977 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:38.591888905 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:38.591928005 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:38.591943979 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:38.591958046 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:38.591989040 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:38.592030048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.592072964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.594938040 CEST	587	59928	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:38.596250057 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:38.596266031 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:38.596306086 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:38.596344948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.597042084 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.597109079 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.597229958 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.597255945 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.597333908 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.598318100 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.598408937 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.599133968 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.599500895 CEST	59930	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.599762917 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.601362944 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.603321075 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.615838051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.620934010 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.623977900 CEST	587	59926	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.624047041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.645667076 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.645668983 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.645697117 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.645791054 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:38.656431913 CEST	59946	587	192.168.2.7	211.29.132.105
Jun 4, 2024 12:43:38.661339045 CEST	587	59946	211.29.132.105	192.168.2.7
Jun 4, 2024 12:43:38.661850929 CEST	59946	587	192.168.2.7	211.29.132.105
Jun 4, 2024 12:43:38.661889076 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.666937113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.676877022 CEST	59926	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.686933041 CEST	587	59930	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.687038898 CEST	59930	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.687038898 CEST	59930	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.687058926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.689524889 CEST	59947	587	192.168.2.7	208.215.218.15
Jun 4, 2024 12:43:38.691946983 CEST	587	59930	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.694417953 CEST	587	59947	208.215.218.15	192.168.2.7
Jun 4, 2024 12:43:38.694518089 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.694571972 CEST	59947	587	192.168.2.7	208.215.218.15
Jun 4, 2024 12:43:38.696651936 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:38.696727037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.697923899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.697952986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.699717999 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.702439070 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.702929020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.703213930 CEST	59915	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:38.703216076 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:38.703267097 CEST	59948	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:38.703613997 CEST	59949	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.708236933 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:38.708251953 CEST	587	59915	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:38.708266020 CEST	587	59948	193.81.82.81	192.168.2.7
Jun 4, 2024 12:43:38.708348989 CEST	59948	587	192.168.2.7	193.81.82.81
Jun 4, 2024 12:43:38.708528042 CEST	587	59949	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.708585024 CEST	59949	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.708950996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.708980083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.713499069 CEST	59950	587	192.168.2.7	94.100.132.8
Jun 4, 2024 12:43:38.714346886 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.716419935 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.716495037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.718389988 CEST	587	59950	94.100.132.8	192.168.2.7
Jun 4, 2024 12:43:38.718456984 CEST	59950	587	192.168.2.7	94.100.132.8
Jun 4, 2024 12:43:38.718516111 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.718947887 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.719023943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.723503113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.725747108 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.725774050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.730734110 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.735268116 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:38.735364914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.739398956 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:38.760623932 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:38.760705948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.765635967 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.770705938 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.770705938 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.781960011 CEST	587	59849	40.85.218.2	192.168.2.7
Jun 4, 2024 12:43:38.782041073 CEST	59849	587	192.168.2.7	40.85.218.2
Jun 4, 2024 12:43:38.782099009 CEST	59849	587	192.168.2.7	40.85.218.2
Jun 4, 2024 12:43:38.782135963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.783135891 CEST	587	59934	199.224.64.207	192.168.2.7
Jun 4, 2024 12:43:38.783211946 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.786305904 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:38.786963940 CEST	587	59849	40.85.218.2	192.168.2.7
Jun 4, 2024 12:43:38.788146019 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.801918030 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:38.828993082 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.829152107 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:38.829890013 CEST	59951	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:38.830172062 CEST	59952	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.830827951 CEST	59953	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.831005096 CEST	59954	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:38.833297014 CEST	59934	587	192.168.2.7	199.224.64.207
Jun 4, 2024 12:43:38.834028006 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:38.834767103 CEST	587	59951	52.223.34.187	192.168.2.7
Jun 4, 2024 12:43:38.834830046 CEST	59951	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:38.834861994 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.835036039 CEST	587	59952	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:38.835130930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.835447073 CEST	59952	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:38.835632086 CEST	587	59953	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:38.835679054 CEST	59953	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:38.835710049 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.835875034 CEST	587	59954	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:38.835915089 CEST	59954	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:38.835953951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.842017889 CEST	59955	587	192.168.2.7	200.147.36.31
Jun 4, 2024 12:43:38.842647076 CEST	587	59927	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:38.842721939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.843163013 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.843575954 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:38.843641043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.845451117 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:38.845478058 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:38.845493078 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:38.845508099 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:38.845530987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.845530987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.845531940 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:38.845566988 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:38.845617056 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:38.845618010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.845684052 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.847042084 CEST	587	59955	200.147.36.31	192.168.2.7
Jun 4, 2024 12:43:38.847100019 CEST	59955	587	192.168.2.7	200.147.36.31
Jun 4, 2024 12:43:38.847129107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.848519087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.850635052 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.850831985 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.870301962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.870326042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.875169039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.895709038 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:38.895710945 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:38.895826101 CEST	59927	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:38.905253887 CEST	587	59851	52.223.34.187	192.168.2.7
Jun 4, 2024 12:43:38.905339003 CEST	59851	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:38.905385971 CEST	59851	587	192.168.2.7	52.223.34.187
Jun 4, 2024 12:43:38.905433893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.910235882 CEST	587	59851	52.223.34.187	192.168.2.7
Jun 4, 2024 12:43:38.948254108 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.948396921 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:38.948504925 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:38.948504925 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:38.948868036 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:38.948924065 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:38.949374914 CEST	59956	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:38.953223944 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:38.953439951 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:38.953474998 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:38.953752995 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:38.953768969 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:38.954245090 CEST	587	59956	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:38.954309940 CEST	59956	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:38.954340935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.961743116 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:38.962191105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.966156960 CEST	59957	587	192.168.2.7	187.86.131.25
Jun 4, 2024 12:43:38.967056990 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:38.971040964 CEST	587	59957	187.86.131.25	192.168.2.7
Jun 4, 2024 12:43:38.971322060 CEST	587	59915	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:38.971402884 CEST	59957	587	192.168.2.7	187.86.131.25
Jun 4, 2024 12:43:38.971436977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.971466064 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:38.976536989 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.005024910 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:39.020632982 CEST	59915	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:39.077195883 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.077413082 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:39.077912092 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.077914000 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:39.078284025 CEST	59958	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:39.078583956 CEST	59959	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:39.082288980 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:39.082750082 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.082766056 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:39.083182096 CEST	587	59958	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:39.083486080 CEST	587	59959	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:39.083553076 CEST	59959	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:39.083576918 CEST	59958	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:39.083862066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.083900928 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.084275961 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:39.084347010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.088794947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.095913887 CEST	587	59939	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.095999002 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.101102114 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.110878944 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:39.112992048 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:39.113116980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.113152027 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.118671894 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.123330116 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.123370886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.128376961 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.130755901 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:39.145699024 CEST	59939	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.155288935 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:39.155405998 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.155410051 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:39.161276102 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:39.167382002 CEST	587	59942	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:39.167459965 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.172348022 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.186270952 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:39.186434031 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.188607931 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:39.188709021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.193624020 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.200876951 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.201081038 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:39.201081038 CEST	59781	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.201128960 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.201880932 CEST	59800	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:39.203140020 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.203249931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.206077099 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:39.206093073 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.206106901 CEST	587	59781	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.206729889 CEST	587	59800	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:39.210155010 CEST	59942	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:39.218364000 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.218389034 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.223258018 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.233637094 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:39.234872103 CEST	587	59939	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.234930038 CEST	59939	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.234972000 CEST	59939	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.235021114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.239409924 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:39.239842892 CEST	587	59939	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.242603064 CEST	59960	587	192.168.2.7	163.173.128.32
Jun 4, 2024 12:43:39.247498035 CEST	587	59960	163.173.128.32	192.168.2.7
Jun 4, 2024 12:43:39.247577906 CEST	59960	587	192.168.2.7	163.173.128.32
Jun 4, 2024 12:43:39.247618914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.252716064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.255033970 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.282910109 CEST	587	59942	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:39.282965899 CEST	59942	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:39.283000946 CEST	59942	587	192.168.2.7	195.130.132.10
Jun 4, 2024 12:43:39.283030987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.287938118 CEST	587	59942	195.130.132.10	192.168.2.7
Jun 4, 2024 12:43:39.288475990 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.288507938 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.293454885 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.312314034 CEST	587	59932	46.255.231.19	192.168.2.7
Jun 4, 2024 12:43:39.312402964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.317800999 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:39.318150997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.323461056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.323580980 CEST	64330	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.323652029 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:39.324214935 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:39.324327946 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:39.324327946 CEST	59961	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.324383974 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:39.328435898 CEST	587	64330	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.328510046 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:39.329112053 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:39.329173088 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:39.329188108 CEST	587	59961	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.329226971 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:39.329243898 CEST	59961	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.329289913 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.331962109 CEST	59962	587	192.168.2.7	104.19.239.228
Jun 4, 2024 12:43:39.334446907 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.336790085 CEST	587	59962	104.19.239.228	192.168.2.7
Jun 4, 2024 12:43:39.336853981 CEST	59962	587	192.168.2.7	104.19.239.228
Jun 4, 2024 12:43:39.336926937 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.338175058 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.338300943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.338912010 CEST	59963	587	192.168.2.7	180.55.189.114
Jun 4, 2024 12:43:39.343137980 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.343813896 CEST	587	59963	180.55.189.114	192.168.2.7
Jun 4, 2024 12:43:39.343869925 CEST	59963	587	192.168.2.7	180.55.189.114
Jun 4, 2024 12:43:39.343945026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.364433050 CEST	59932	587	192.168.2.7	46.255.231.19
Jun 4, 2024 12:43:39.364434004 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:39.380110979 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.390161991 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.435739040 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.435842037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.440993071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.442014933 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.442375898 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:39.442420006 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:39.442641020 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:39.442774057 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:39.443049908 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:39.443080902 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:39.443136930 CEST	59788	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.447278023 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:39.447393894 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:39.447457075 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:39.447660923 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:39.447978973 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:39.448024035 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:39.448065996 CEST	587	59788	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.449857950 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:39.449960947 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.454056025 CEST	587	59949	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.454144955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.456521034 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.456634998 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.459088087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.461513042 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.462135077 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.462245941 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.462656021 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:39.462724924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.467721939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.479510069 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.479541063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.482510090 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:39.482609034 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.484416008 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.489408970 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.505032063 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:39.505049944 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.505072117 CEST	59949	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.505073071 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:39.511807919 CEST	59964	465	192.168.2.7	177.154.191.243
Jun 4, 2024 12:43:39.516699076 CEST	465	59964	177.154.191.243	192.168.2.7
Jun 4, 2024 12:43:39.516845942 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.516865015 CEST	59964	465	192.168.2.7	177.154.191.243
Jun 4, 2024 12:43:39.521693945 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.530786037 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:39.530879021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.532051086 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:39.532125950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.536294937 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:39.536978006 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.543853045 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.543879986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.548765898 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.558439970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.558466911 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.563390970 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.563852072 CEST	587	59943	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:39.564708948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.568252087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.574965000 CEST	59907	587	192.168.2.7	41.193.157.227
Jun 4, 2024 12:43:39.579864025 CEST	587	59907	41.193.157.227	192.168.2.7
Jun 4, 2024 12:43:39.580622911 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:39.582186937 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.583175898 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:39.583619118 CEST	59877	465	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:39.583620071 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:39.583645105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.586502075 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.586528063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.587110043 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.587459087 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:39.587537050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.588510036 CEST	587	59953	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.588610888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.588706017 CEST	465	59877	199.59.243.225	192.168.2.7
Jun 4, 2024 12:43:39.588759899 CEST	59877	465	192.168.2.7	199.59.243.225
Jun 4, 2024 12:43:39.591547966 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.592046022 CEST	587	59949	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.592103958 CEST	59949	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.592137098 CEST	59949	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.592165947 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.592571974 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.596303940 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.596471071 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.597012043 CEST	587	59949	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.597162962 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.601550102 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:39.601721048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.603207111 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:39.603423119 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.604707003 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:39.604851007 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:39.604851007 CEST	59775	587	192.168.2.7	34.160.157.95
Jun 4, 2024 12:43:39.604876995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.606620073 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.609850883 CEST	587	59775	34.160.157.95	192.168.2.7
Jun 4, 2024 12:43:39.609890938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.615436077 CEST	59943	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:39.615820885 CEST	59965	587	192.168.2.7	213.186.33.4
Jun 4, 2024 12:43:39.618002892 CEST	587	59937	47.43.18.10	192.168.2.7
Jun 4, 2024 12:43:39.618184090 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.620981932 CEST	587	59965	213.186.33.4	192.168.2.7
Jun 4, 2024 12:43:39.621412039 CEST	59965	587	192.168.2.7	213.186.33.4
Jun 4, 2024 12:43:39.621491909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.625293016 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:39.625380993 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.626492977 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.630023003 CEST	59953	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.630023956 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:39.630023956 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:39.640312910 CEST	587	59937	47.43.18.10	192.168.2.7
Jun 4, 2024 12:43:39.640367985 CEST	59937	587	192.168.2.7	47.43.18.10
Jun 4, 2024 12:43:39.640402079 CEST	59937	587	192.168.2.7	47.43.18.10
Jun 4, 2024 12:43:39.640429974 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.645284891 CEST	587	59937	47.43.18.10	192.168.2.7
Jun 4, 2024 12:43:39.645349979 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.645659924 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:39.645662069 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.657391071 CEST	587	59959	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:39.657474041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.675173044 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:39.675256014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.676893950 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:39.680499077 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.688721895 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.688883066 CEST	59923	587	192.168.2.7	195.15.132.130
Jun 4, 2024 12:43:39.689129114 CEST	59799	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.690129042 CEST	59966	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:39.693752050 CEST	587	59923	195.15.132.130	192.168.2.7
Jun 4, 2024 12:43:39.693958998 CEST	587	59799	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.694962025 CEST	587	59966	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:39.695028067 CEST	59966	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:39.695054054 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.698616028 CEST	59967	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:39.703459978 CEST	587	59967	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:39.703526974 CEST	59967	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:39.703599930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.708141088 CEST	59959	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:39.708570957 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.723795891 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:39.724236012 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:39.724524021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.726499081 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:39.726582050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.726588011 CEST	587	59953	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.726644039 CEST	59953	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.726665974 CEST	59953	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.726696014 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.731489897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.731626987 CEST	587	59953	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.770656109 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:39.770663977 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:39.773287058 CEST	59968	587	192.168.2.7	190.8.176.9
Jun 4, 2024 12:43:39.774131060 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.778150082 CEST	587	59968	190.8.176.9	192.168.2.7
Jun 4, 2024 12:43:39.778215885 CEST	59968	587	192.168.2.7	190.8.176.9
Jun 4, 2024 12:43:39.778259993 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.783267975 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.785636902 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:39.785654068 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:39.785679102 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:39.785691977 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:39.785809994 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.785844088 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:39.785844088 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:39.790728092 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.790741920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.793540955 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:39.793659925 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.798561096 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.806921005 CEST	587	59869	133.237.129.136	192.168.2.7
Jun 4, 2024 12:43:39.806992054 CEST	59869	587	192.168.2.7	133.237.129.136
Jun 4, 2024 12:43:39.807034969 CEST	59869	587	192.168.2.7	133.237.129.136
Jun 4, 2024 12:43:39.807070971 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.811896086 CEST	587	59869	133.237.129.136	192.168.2.7
Jun 4, 2024 12:43:39.811954021 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.821077108 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.821316004 CEST	59901	587	192.168.2.7	129.232.148.154
Jun 4, 2024 12:43:39.821624994 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:39.821902037 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:39.821933985 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:39.821933985 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:39.821953058 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:39.826215982 CEST	587	59901	129.232.148.154	192.168.2.7
Jun 4, 2024 12:43:39.826508999 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:39.826757908 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:39.826783895 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:39.826800108 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:39.826970100 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:39.833136082 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:39.838905096 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.838932991 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.843908072 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.904356956 CEST	587	59954	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:39.904501915 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.919312954 CEST	587	59923	195.15.132.130	192.168.2.7
Jun 4, 2024 12:43:39.919395924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.924315929 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.955945015 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.956403971 CEST	59925	587	192.168.2.7	40.99.150.66
Jun 4, 2024 12:43:39.956454039 CEST	64350	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:39.956516027 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:39.958188057 CEST	59954	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:39.961668968 CEST	587	59925	40.99.150.66	192.168.2.7
Jun 4, 2024 12:43:39.961675882 CEST	587	64350	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:39.961688995 CEST	587	59900	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:39.968321085 CEST	587	59907	41.193.157.227	192.168.2.7
Jun 4, 2024 12:43:39.968379974 CEST	587	59950	94.100.132.8	192.168.2.7
Jun 4, 2024 12:43:39.968477011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.968511105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.973844051 CEST	59923	587	192.168.2.7	195.15.132.130
Jun 4, 2024 12:43:39.974030972 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.976522923 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:39.976603985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.984899044 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:39.984999895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:39.988657951 CEST	59969	465	192.168.2.7	142.250.186.83
Jun 4, 2024 12:43:39.989908934 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:39.993532896 CEST	465	59969	142.250.186.83	192.168.2.7
Jun 4, 2024 12:43:39.993607998 CEST	59969	465	192.168.2.7	142.250.186.83
Jun 4, 2024 12:43:39.993638039 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.020724058 CEST	59907	587	192.168.2.7	41.193.157.227
Jun 4, 2024 12:43:40.020876884 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:40.020880938 CEST	59950	587	192.168.2.7	94.100.132.8
Jun 4, 2024 12:43:40.023215055 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:40.023322105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.028233051 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.036487103 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:40.056883097 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.057040930 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.061934948 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.067742109 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:40.072242975 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:40.072272062 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:40.072288036 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:40.072304010 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:40.072465897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.072478056 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:40.073291063 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:40.073363066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.075464964 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:40.075541019 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.077349901 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.077769041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.077816010 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.077898979 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:40.077951908 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.078012943 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.078289032 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:40.078454018 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:40.078495979 CEST	59818	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.078931093 CEST	59970	587	192.168.2.7	93.115.28.104
Jun 4, 2024 12:43:40.080430031 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.081069946 CEST	587	59961	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.081140995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.082767963 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:40.082792997 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.082807064 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.083143950 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:40.083353996 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:40.083369970 CEST	587	59818	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.083740950 CEST	587	59970	93.115.28.104	192.168.2.7
Jun 4, 2024 12:43:40.083791018 CEST	59970	587	192.168.2.7	93.115.28.104
Jun 4, 2024 12:43:40.083986044 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.088933945 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.114485979 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:40.124358892 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.124461889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.130122900 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:40.130125046 CEST	59961	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.138644934 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.143667936 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.176949024 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.200268984 CEST	587	59900	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:40.200360060 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.208051920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.208784103 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.208837986 CEST	59731	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:40.209115982 CEST	50046	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.209364891 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.209516048 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:40.209980011 CEST	59971	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:40.210630894 CEST	59972	587	192.168.2.7	104.19.239.228
Jun 4, 2024 12:43:40.213654995 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.213671923 CEST	587	59731	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:40.213973999 CEST	587	50046	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.214179993 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.214343071 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:40.214819908 CEST	587	59971	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:40.214874983 CEST	59971	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:40.214927912 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.215527058 CEST	587	59972	104.19.239.228	192.168.2.7
Jun 4, 2024 12:43:40.215639114 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.215949059 CEST	59972	587	192.168.2.7	104.19.239.228
Jun 4, 2024 12:43:40.217725992 CEST	587	59925	40.99.150.66	192.168.2.7
Jun 4, 2024 12:43:40.217798948 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.220282078 CEST	587	59961	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.220330954 CEST	59961	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.220370054 CEST	59961	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.220393896 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.220712900 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.221357107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.221385956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.221509933 CEST	59973	587	192.168.2.7	91.189.182.67
Jun 4, 2024 12:43:40.224464893 CEST	59882	465	192.168.2.7	85.220.165.130
Jun 4, 2024 12:43:40.224498987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.225208044 CEST	587	59961	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.225267887 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.226270914 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.226416111 CEST	587	59973	91.189.182.67	192.168.2.7
Jun 4, 2024 12:43:40.226485014 CEST	59973	587	192.168.2.7	91.189.182.67
Jun 4, 2024 12:43:40.226547956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.229557037 CEST	465	59882	85.220.165.130	192.168.2.7
Jun 4, 2024 12:43:40.229707956 CEST	59882	465	192.168.2.7	85.220.165.130
Jun 4, 2024 12:43:40.231703997 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.255095005 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:40.270664930 CEST	59925	587	192.168.2.7	40.99.150.66
Jun 4, 2024 12:43:40.270801067 CEST	587	59960	163.173.128.32	192.168.2.7
Jun 4, 2024 12:43:40.271454096 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.278551102 CEST	587	59901	129.232.148.154	192.168.2.7
Jun 4, 2024 12:43:40.278640032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.283283949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.283530951 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.285063982 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.285175085 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.290132046 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.291420937 CEST	59974	587	192.168.2.7	77.78.119.119
Jun 4, 2024 12:43:40.296283007 CEST	587	59974	77.78.119.119	192.168.2.7
Jun 4, 2024 12:43:40.296339989 CEST	59974	587	192.168.2.7	77.78.119.119
Jun 4, 2024 12:43:40.296497107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.317533970 CEST	59960	587	192.168.2.7	163.173.128.32
Jun 4, 2024 12:43:40.324963093 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:40.325067997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.327081919 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.327111006 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.329931021 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.330321074 CEST	587	59968	190.8.176.9	192.168.2.7
Jun 4, 2024 12:43:40.330405951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.331988096 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.333178997 CEST	59901	587	192.168.2.7	129.232.148.154
Jun 4, 2024 12:43:40.333832026 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.334906101 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.334980011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.335783958 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.335877895 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.337198973 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.337270975 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.338458061 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.338532925 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.339848042 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.340625048 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:40.340692997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.342156887 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.345577955 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.363261938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.363730907 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.363943100 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:40.363967896 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:40.364027023 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:40.368643045 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.368793011 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:40.368871927 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:40.368887901 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.380039930 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.380045891 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.380048990 CEST	59968	587	192.168.2.7	190.8.176.9
Jun 4, 2024 12:43:40.380213022 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:40.380213022 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:40.380806923 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.380806923 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.385117054 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.385142088 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.390175104 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.452295065 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.452447891 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.454771042 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.454866886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.456559896 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.456639051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.457273006 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.458236933 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.458460093 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.461572886 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.470890999 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.470987082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.473236084 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.473249912 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.473345995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.473437071 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:40.475895882 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.476022959 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:40.476097107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.476861000 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.476927996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.481080055 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.505175114 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.505175114 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.505187988 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.510226965 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.510394096 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:40.510647058 CEST	59936	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:40.511384964 CEST	50047	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.511454105 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:40.511490107 CEST	50045	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.511534929 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.512011051 CEST	59975	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:40.512188911 CEST	59976	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:40.515238047 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:40.515497923 CEST	587	59936	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:40.516238928 CEST	587	50047	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.516359091 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:40.516375065 CEST	587	50045	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.516475916 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.516843081 CEST	587	59975	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:40.516921043 CEST	59975	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:40.516994953 CEST	587	59976	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:40.516994953 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.517047882 CEST	59976	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:40.517076015 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.520735025 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.520744085 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.520750999 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:40.522268057 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.548151970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.548176050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.553055048 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.553630114 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.553706884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.566977024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.566977024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.567307949 CEST	59977	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:40.571896076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.572182894 CEST	587	59977	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:40.572246075 CEST	59977	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:40.572314024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.586026907 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.586127043 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:40.586167097 CEST	64337	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:40.586199999 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.591198921 CEST	587	64337	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.591252089 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.598824024 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:40.607979059 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:40.608104944 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.612332106 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:40.612370014 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:40.612406015 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:40.612436056 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:40.612489939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.612555027 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.612557888 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:40.612557888 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:40.617396116 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.617448092 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.618844986 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:40.619543076 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.619575024 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.619622946 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:40.619627953 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.619663000 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:40.619703054 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:40.621551037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.621587992 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.623841047 CEST	587	59952	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.623929977 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.624902010 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.625006914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.626449108 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.626683950 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.629993916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.654238939 CEST	587	59870	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:40.654419899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.654422045 CEST	59870	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:40.654422045 CEST	59870	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:40.659393072 CEST	587	59870	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:40.661283016 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:40.661286116 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:40.668126106 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.668253899 CEST	59926	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.668518066 CEST	59735	587	192.168.2.7	5.135.40.30
Jun 4, 2024 12:43:40.668570995 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.668622971 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.668908119 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:40.668977022 CEST	59978	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.673064947 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:40.673147917 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.673188925 CEST	587	59926	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.673408985 CEST	587	59735	5.135.40.30	192.168.2.7
Jun 4, 2024 12:43:40.673491955 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.673631907 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.673938990 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:40.673971891 CEST	587	59978	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.674066067 CEST	59978	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.674068928 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.676906109 CEST	59952	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.676908970 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.679270983 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.692862034 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.723804951 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:40.742208004 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.765513897 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:40.765579939 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:40.765631914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.765746117 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:40.765774012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.770644903 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.770678043 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.776329994 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:40.776462078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.781374931 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.785437107 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.785577059 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:40.785939932 CEST	59934	587	192.168.2.7	199.224.64.207
Jun 4, 2024 12:43:40.786122084 CEST	59927	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:40.786155939 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:40.786212921 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:40.790478945 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:40.790865898 CEST	587	59934	199.224.64.207	192.168.2.7
Jun 4, 2024 12:43:40.791106939 CEST	587	59927	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:40.791162014 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:40.791194916 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:40.801121950 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.801150084 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.806065083 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.817589998 CEST	587	59955	200.147.36.31	192.168.2.7
Jun 4, 2024 12:43:40.817636967 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:40.817756891 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.819654942 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:40.819751978 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.824909925 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.864464998 CEST	59955	587	192.168.2.7	200.147.36.31
Jun 4, 2024 12:43:40.864593029 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:40.911926031 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.912502050 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:40.912908077 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:40.912956953 CEST	59915	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:40.913001060 CEST	59821	587	192.168.2.7	50.116.87.133
Jun 4, 2024 12:43:40.917412043 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:40.917784929 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:40.917815924 CEST	587	59915	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:40.917850018 CEST	587	59821	50.116.87.133	192.168.2.7
Jun 4, 2024 12:43:40.921852112 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.921888113 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.921925068 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.921936989 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.921962023 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.921964884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.921964884 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.922004938 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.922064066 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.923692942 CEST	587	59926	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.923774004 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.923985004 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.924021006 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.924055099 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.924061060 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.924088955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.924088955 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.924109936 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.924132109 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.924140930 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:40.924155951 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.924211979 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.926435947 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:40.926512003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.927042007 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.927093983 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.927314043 CEST	59890	587	192.168.2.7	185.111.97.36
Jun 4, 2024 12:43:40.927347898 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.938165903 CEST	587	59890	185.111.97.36	192.168.2.7
Jun 4, 2024 12:43:40.947146893 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.948512077 CEST	587	59934	199.224.64.207	192.168.2.7
Jun 4, 2024 12:43:40.948546886 CEST	587	59890	185.111.97.36	192.168.2.7
Jun 4, 2024 12:43:40.948616028 CEST	59890	587	192.168.2.7	185.111.97.36
Jun 4, 2024 12:43:40.948904991 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.973845959 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.973845959 CEST	59926	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:40.973845959 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:40.987468958 CEST	59979	587	192.168.2.7	52.63.237.70
Jun 4, 2024 12:43:40.989461899 CEST	59934	587	192.168.2.7	199.224.64.207
Jun 4, 2024 12:43:40.991980076 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.992017984 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.992394924 CEST	587	59979	52.63.237.70	192.168.2.7
Jun 4, 2024 12:43:40.992472887 CEST	59979	587	192.168.2.7	52.63.237.70
Jun 4, 2024 12:43:40.992506981 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:40.996869087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:40.997575998 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.015418053 CEST	587	59872	93.115.28.104	192.168.2.7
Jun 4, 2024 12:43:41.015485048 CEST	59872	587	192.168.2.7	93.115.28.104
Jun 4, 2024 12:43:41.015516043 CEST	59872	587	192.168.2.7	93.115.28.104
Jun 4, 2024 12:43:41.015542030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.020421982 CEST	587	59872	93.115.28.104	192.168.2.7
Jun 4, 2024 12:43:41.027014971 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.027015924 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.031938076 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.039894104 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.040107965 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:41.040282965 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:41.040393114 CEST	59776	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:41.040452957 CEST	64354	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.040473938 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:41.044771910 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:41.044852018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.045033932 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:41.045214891 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:41.045269966 CEST	587	59776	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:41.045322895 CEST	587	64354	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.045356035 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:41.045562983 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:41.045650005 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.050633907 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.051599026 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.051625967 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.052151918 CEST	59891	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:41.052172899 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.054497004 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:41.054591894 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.056046009 CEST	587	59976	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:41.056121111 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.056559086 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.057152987 CEST	587	59891	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:41.057205915 CEST	59891	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:41.058269024 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:41.058357000 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.059592962 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.063364029 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.073640108 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.073668957 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.078744888 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.086318016 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:41.086349964 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:41.086396933 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:41.086404085 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:41.086440086 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:41.086476088 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:41.086571932 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:41.086580038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.086580038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.086580038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.086580038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.086580038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.086580038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.088316917 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:41.088370085 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:41.088397980 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.091548920 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.091846943 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.091876030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.093357086 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.098835945 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:41.098835945 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:41.098835945 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:41.102137089 CEST	59976	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:41.102137089 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:41.146724939 CEST	587	59927	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:41.146935940 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.163484097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.164138079 CEST	59932	587	192.168.2.7	46.255.231.19
Jun 4, 2024 12:43:41.164397955 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:41.164452076 CEST	50048	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.164659977 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.164664030 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:41.165142059 CEST	59980	587	192.168.2.7	142.250.150.27
Jun 4, 2024 12:43:41.169037104 CEST	587	59932	46.255.231.19	192.168.2.7
Jun 4, 2024 12:43:41.169420004 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:41.169452906 CEST	587	50048	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.169651985 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.171401024 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:41.171561956 CEST	587	59980	142.250.150.27	192.168.2.7
Jun 4, 2024 12:43:41.171633959 CEST	59980	587	192.168.2.7	142.250.150.27
Jun 4, 2024 12:43:41.171696901 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.176105976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.176131964 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.177139997 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:41.177705050 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.180461884 CEST	587	59915	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:41.180537939 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.181224108 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.182877064 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.191921949 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.191956043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.192637920 CEST	59927	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:41.194854021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.194899082 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.196981907 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.197283030 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:41.197377920 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.199767113 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.202737093 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.204793930 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:41.204889059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.221656084 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.221848011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.225007057 CEST	59915	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:41.225008011 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:41.227077961 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.239406109 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:41.255064964 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:41.270661116 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.278816938 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:41.284719944 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.295639038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.296504021 CEST	50052	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.296909094 CEST	59750	587	192.168.2.7	108.167.188.20
Jun 4, 2024 12:43:41.296979904 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:41.297235012 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:41.297286987 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:41.303150892 CEST	587	50052	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.303913116 CEST	587	59750	108.167.188.20	192.168.2.7
Jun 4, 2024 12:43:41.303944111 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:41.303972960 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:41.304380894 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:41.310261011 CEST	587	59875	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:41.310327053 CEST	59875	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:41.310378075 CEST	59875	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:41.310405016 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.311950922 CEST	59981	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:41.317473888 CEST	587	59875	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:41.317524910 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.320322990 CEST	587	59981	142.251.9.27	192.168.2.7
Jun 4, 2024 12:43:41.320389986 CEST	59981	587	192.168.2.7	142.251.9.27
Jun 4, 2024 12:43:41.320517063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.330988884 CEST	587	59957	187.86.131.25	192.168.2.7
Jun 4, 2024 12:43:41.331060886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.333142996 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:41.337559938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.339742899 CEST	587	59977	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:41.339816093 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.348503113 CEST	59982	587	192.168.2.7	150.214.40.4
Jun 4, 2024 12:43:41.355006933 CEST	587	59982	150.214.40.4	192.168.2.7
Jun 4, 2024 12:43:41.355081081 CEST	59982	587	192.168.2.7	150.214.40.4
Jun 4, 2024 12:43:41.355144024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.361885071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.372873068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.372900963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.377933979 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.380048990 CEST	59977	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:41.380054951 CEST	59957	587	192.168.2.7	187.86.131.25
Jun 4, 2024 12:43:41.400898933 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:41.401154041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.405410051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.405433893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.408409119 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:41.408508062 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.410300970 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.410705090 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.410998106 CEST	59943	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:41.411042929 CEST	59752	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:41.411607981 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.416013956 CEST	587	59943	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:41.416068077 CEST	587	59752	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:41.416471958 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.418018103 CEST	587	59932	46.255.231.19	192.168.2.7
Jun 4, 2024 12:43:41.418100119 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.418653965 CEST	587	59978	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.418723106 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.422050953 CEST	59983	465	192.168.2.7	92.204.80.0
Jun 4, 2024 12:43:41.422985077 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.425484896 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.425584078 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.427030087 CEST	465	59983	92.204.80.0	192.168.2.7
Jun 4, 2024 12:43:41.427094936 CEST	59983	465	192.168.2.7	92.204.80.0
Jun 4, 2024 12:43:41.427567959 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.430546045 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.442589998 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:41.451831102 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:41.451884031 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:41.452006102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.452045918 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:41.456064939 CEST	587	64352	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:41.456195116 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.456890106 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.458230972 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:41.473769903 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.473783970 CEST	59932	587	192.168.2.7	46.255.231.19
Jun 4, 2024 12:43:41.473784924 CEST	59978	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.475092888 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.475128889 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.480101109 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.484414101 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:41.484620094 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.484618902 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:41.484620094 CEST	59717	587	192.168.2.7	208.91.199.225
Jun 4, 2024 12:43:41.489624023 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.489675999 CEST	587	59717	208.91.199.225	192.168.2.7
Jun 4, 2024 12:43:41.505177021 CEST	64352	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:41.536427975 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.537225008 CEST	59751	587	192.168.2.7	107.155.89.162
Jun 4, 2024 12:43:41.537426949 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:41.537580967 CEST	59959	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:41.537636042 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:41.537761927 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:41.537774086 CEST	59984	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:41.537836075 CEST	50063	587	192.168.2.7	52.96.111.82
Jun 4, 2024 12:43:41.542285919 CEST	587	59751	107.155.89.162	192.168.2.7
Jun 4, 2024 12:43:41.542346954 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:41.542475939 CEST	587	59959	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:41.542507887 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:41.542685986 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:41.542721987 CEST	587	59984	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:41.542781115 CEST	587	50063	52.96.111.82	192.168.2.7
Jun 4, 2024 12:43:41.542845011 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.542893887 CEST	59984	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:41.545852900 CEST	59985	587	192.168.2.7	142.250.150.27
Jun 4, 2024 12:43:41.547700882 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.547724962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.550757885 CEST	587	59985	142.250.150.27	192.168.2.7
Jun 4, 2024 12:43:41.550827026 CEST	59985	587	192.168.2.7	142.250.150.27
Jun 4, 2024 12:43:41.550851107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.552129030 CEST	59895	587	192.168.2.7	193.181.34.163
Jun 4, 2024 12:43:41.552160025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.552690029 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.557847977 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.557902098 CEST	587	59895	193.181.34.163	192.168.2.7
Jun 4, 2024 12:43:41.557955980 CEST	59895	587	192.168.2.7	193.181.34.163
Jun 4, 2024 12:43:41.562519073 CEST	587	59978	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.562581062 CEST	59978	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.562614918 CEST	59978	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.562642097 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.567506075 CEST	587	59978	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.610162973 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.630908012 CEST	587	59766	97.74.81.106	192.168.2.7
Jun 4, 2024 12:43:41.637255907 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.642118931 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.656903982 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.657273054 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:41.657681942 CEST	59954	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:41.657736063 CEST	59923	587	192.168.2.7	195.15.132.130
Jun 4, 2024 12:43:41.657787085 CEST	59950	587	192.168.2.7	94.100.132.8
Jun 4, 2024 12:43:41.657840014 CEST	59907	587	192.168.2.7	41.193.157.227
Jun 4, 2024 12:43:41.658615112 CEST	59986	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:41.659132004 CEST	59987	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:41.662204981 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:41.662542105 CEST	587	59954	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:41.662640095 CEST	587	59923	195.15.132.130	192.168.2.7
Jun 4, 2024 12:43:41.662875891 CEST	587	59950	94.100.132.8	192.168.2.7
Jun 4, 2024 12:43:41.662913084 CEST	587	59907	41.193.157.227	192.168.2.7
Jun 4, 2024 12:43:41.663477898 CEST	587	59986	117.50.20.113	192.168.2.7
Jun 4, 2024 12:43:41.663537979 CEST	59986	587	192.168.2.7	117.50.20.113
Jun 4, 2024 12:43:41.663919926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.663954020 CEST	587	59987	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:41.664007902 CEST	59987	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:41.664048910 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.669014931 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.671108007 CEST	587	64333	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.671319008 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.676924944 CEST	59766	587	192.168.2.7	97.74.81.106
Jun 4, 2024 12:43:41.699804068 CEST	587	59959	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:41.699906111 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.704830885 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.706610918 CEST	587	59741	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:41.706680059 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.720278025 CEST	587	59832	107.180.3.104	192.168.2.7
Jun 4, 2024 12:43:41.720551968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.722161055 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.722193003 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.723781109 CEST	64333	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.725390911 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.727034092 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.755076885 CEST	59741	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:41.755076885 CEST	59959	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:41.770682096 CEST	59832	587	192.168.2.7	107.180.3.104
Jun 4, 2024 12:43:41.777698040 CEST	59988	587	192.168.2.7	108.177.15.109
Jun 4, 2024 12:43:41.781764030 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.781918049 CEST	59774	587	192.168.2.7	142.171.118.47
Jun 4, 2024 12:43:41.782027960 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:41.782139063 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:41.782140017 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:41.782329082 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:41.782387972 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:41.782464981 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:41.782641888 CEST	587	59988	108.177.15.109	192.168.2.7
Jun 4, 2024 12:43:41.782706022 CEST	59988	587	192.168.2.7	108.177.15.109
Jun 4, 2024 12:43:41.782747030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.786746025 CEST	587	59774	142.171.118.47	192.168.2.7
Jun 4, 2024 12:43:41.786793947 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:41.787084103 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:41.787094116 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:41.787180901 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:41.787198067 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:41.787250996 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:41.796621084 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.796655893 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.799459934 CEST	587	59850	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:41.799571037 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.801572084 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.804434061 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.812386990 CEST	587	59827	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:41.812474966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.841613054 CEST	587	59943	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:41.841694117 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.846566916 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.848838091 CEST	59850	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:41.853003025 CEST	587	59979	52.63.237.70	192.168.2.7
Jun 4, 2024 12:43:41.853085995 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.864439011 CEST	59827	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:41.882056952 CEST	59989	587	192.168.2.7	189.124.16.18
Jun 4, 2024 12:43:41.886933088 CEST	587	59989	189.124.16.18	192.168.2.7
Jun 4, 2024 12:43:41.887016058 CEST	59989	587	192.168.2.7	189.124.16.18
Jun 4, 2024 12:43:41.887056112 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.888117075 CEST	587	59923	195.15.132.130	192.168.2.7
Jun 4, 2024 12:43:41.888303041 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.891880035 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.895714045 CEST	59943	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:41.895714998 CEST	59979	587	192.168.2.7	52.63.237.70
Jun 4, 2024 12:43:41.896364927 CEST	587	59950	94.100.132.8	192.168.2.7
Jun 4, 2024 12:43:41.896723986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.901586056 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.902244091 CEST	587	59954	2.207.150.234	192.168.2.7
Jun 4, 2024 12:43:41.902328968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.902551889 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.902669907 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:41.902730942 CEST	59925	587	192.168.2.7	40.99.150.66
Jun 4, 2024 12:43:41.903202057 CEST	59960	587	192.168.2.7	163.173.128.32
Jun 4, 2024 12:43:41.903251886 CEST	59901	587	192.168.2.7	129.232.148.154
Jun 4, 2024 12:43:41.904239893 CEST	59990	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:41.907515049 CEST	587	59900	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:41.907560110 CEST	587	59925	40.99.150.66	192.168.2.7
Jun 4, 2024 12:43:41.908021927 CEST	587	59960	163.173.128.32	192.168.2.7
Jun 4, 2024 12:43:41.909496069 CEST	587	59901	129.232.148.154	192.168.2.7
Jun 4, 2024 12:43:41.909507990 CEST	587	59990	142.250.153.26	192.168.2.7
Jun 4, 2024 12:43:41.909634113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.909634113 CEST	59990	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:41.914491892 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.942512989 CEST	59923	587	192.168.2.7	195.15.132.130
Jun 4, 2024 12:43:41.942528963 CEST	59950	587	192.168.2.7	94.100.132.8
Jun 4, 2024 12:43:41.943036079 CEST	59954	587	192.168.2.7	2.207.150.234
Jun 4, 2024 12:43:41.954480886 CEST	587	59837	54.39.244.15	192.168.2.7
Jun 4, 2024 12:43:41.954571962 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.957933903 CEST	59991	465	192.168.2.7	191.252.112.194
Jun 4, 2024 12:43:41.962874889 CEST	465	59991	191.252.112.194	192.168.2.7
Jun 4, 2024 12:43:41.962959051 CEST	59991	465	192.168.2.7	191.252.112.194
Jun 4, 2024 12:43:41.969008923 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:41.973916054 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:41.993376017 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:42.005068064 CEST	59837	587	192.168.2.7	54.39.244.15
Jun 4, 2024 12:43:42.007219076 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.021706104 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.025461912 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:42.025573015 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:42.025646925 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:42.025866032 CEST	587	59871	149.13.75.27	192.168.2.7
Jun 4, 2024 12:43:42.032030106 CEST	587	59861	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:42.035897017 CEST	587	59816	213.209.1.145	192.168.2.7
Jun 4, 2024 12:43:42.036166906 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.036267996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.036298037 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.036300898 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:42.036459923 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.036519051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.036519051 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.036901951 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.036969900 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:42.037030935 CEST	59968	587	192.168.2.7	190.8.176.9
Jun 4, 2024 12:43:42.037273884 CEST	59773	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.037317038 CEST	59720	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.038116932 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.038297892 CEST	59728	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.038358927 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:42.041430950 CEST	59992	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.041543961 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.041749001 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.041883945 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:42.042118073 CEST	587	59968	190.8.176.9	192.168.2.7
Jun 4, 2024 12:43:42.042160988 CEST	587	59773	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.042190075 CEST	587	59720	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.043231964 CEST	587	59728	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.043294907 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.046456099 CEST	587	59992	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.046540022 CEST	59992	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.046626091 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.049468994 CEST	587	59907	41.193.157.227	192.168.2.7
Jun 4, 2024 12:43:42.049552917 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.051855087 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.071346998 CEST	59871	587	192.168.2.7	149.13.75.27
Jun 4, 2024 12:43:42.083173990 CEST	59861	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:42.083174944 CEST	59816	587	192.168.2.7	213.209.1.145
Jun 4, 2024 12:43:42.098148108 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.098711967 CEST	59907	587	192.168.2.7	41.193.157.227
Jun 4, 2024 12:43:42.133124113 CEST	587	59841	203.114.168.20	192.168.2.7
Jun 4, 2024 12:43:42.133214951 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.135205030 CEST	587	59900	104.131.176.42	192.168.2.7
Jun 4, 2024 12:43:42.136802912 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.138092995 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.140058994 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.140094042 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.141153097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.141211987 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.142597914 CEST	59725	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.142802000 CEST	59721	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.142838001 CEST	59726	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.143119097 CEST	50060	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.143523932 CEST	59859	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.144500017 CEST	59993	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:42.144897938 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.146020889 CEST	587	59960	163.173.128.32	192.168.2.7
Jun 4, 2024 12:43:42.147022009 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.147114038 CEST	59902	465	192.168.2.7	77.247.67.170
Jun 4, 2024 12:43:42.147588968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.148056030 CEST	587	59725	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.148686886 CEST	587	59726	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.148698092 CEST	587	59721	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.148710012 CEST	587	50060	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.149228096 CEST	587	59859	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.149966002 CEST	587	59993	188.114.96.3	192.168.2.7
Jun 4, 2024 12:43:42.150022030 CEST	59993	587	192.168.2.7	188.114.96.3
Jun 4, 2024 12:43:42.150593996 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.151911974 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.152776957 CEST	465	59902	77.247.67.170	192.168.2.7
Jun 4, 2024 12:43:42.152834892 CEST	59902	465	192.168.2.7	77.247.67.170
Jun 4, 2024 12:43:42.155858040 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.157776117 CEST	587	59925	40.99.150.66	192.168.2.7
Jun 4, 2024 12:43:42.159229994 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.161087036 CEST	587	59968	190.8.176.9	192.168.2.7
Jun 4, 2024 12:43:42.162389040 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.167318106 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.169737101 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.169905901 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.169909954 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.169909954 CEST	64332	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.174874067 CEST	587	64332	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.176919937 CEST	59841	587	192.168.2.7	203.114.168.20
Jun 4, 2024 12:43:42.176919937 CEST	59900	587	192.168.2.7	104.131.176.42
Jun 4, 2024 12:43:42.191478968 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.191505909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.192564964 CEST	59960	587	192.168.2.7	163.173.128.32
Jun 4, 2024 12:43:42.196472883 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.206733942 CEST	587	59873	222.124.219.187	192.168.2.7
Jun 4, 2024 12:43:42.206835032 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.208190918 CEST	59925	587	192.168.2.7	40.99.150.66
Jun 4, 2024 12:43:42.208221912 CEST	59968	587	192.168.2.7	190.8.176.9
Jun 4, 2024 12:43:42.212862015 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.214232922 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.238281965 CEST	59994	587	192.168.2.7	209.202.254.90
Jun 4, 2024 12:43:42.243206978 CEST	587	59994	209.202.254.90	192.168.2.7
Jun 4, 2024 12:43:42.243289948 CEST	59994	587	192.168.2.7	209.202.254.90
Jun 4, 2024 12:43:42.243319035 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.248575926 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.255120993 CEST	59873	587	192.168.2.7	222.124.219.187
Jun 4, 2024 12:43:42.275454044 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.275573969 CEST	59736	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:42.275953054 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:42.276211023 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:42.276266098 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:42.276290894 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:42.276823997 CEST	59995	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.280388117 CEST	587	59736	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:42.280813932 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:42.281012058 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.281030893 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:42.281256914 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:42.281789064 CEST	587	59995	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.281871080 CEST	59995	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.281905890 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.285623074 CEST	59996	587	192.168.2.7	147.182.189.184
Jun 4, 2024 12:43:42.290498972 CEST	587	59996	147.182.189.184	192.168.2.7
Jun 4, 2024 12:43:42.290559053 CEST	59996	587	192.168.2.7	147.182.189.184
Jun 4, 2024 12:43:42.290605068 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.292133093 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.292241096 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.292397022 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.292440891 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.292478085 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.295625925 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.297426939 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.300488949 CEST	59997	587	192.168.2.7	67.219.246.213
Jun 4, 2024 12:43:42.302259922 CEST	587	59886	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:42.302304983 CEST	59886	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:42.302396059 CEST	59886	587	192.168.2.7	76.223.84.192
Jun 4, 2024 12:43:42.302431107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.302457094 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.302467108 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.302503109 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.302532911 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.302556992 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.302643061 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:42.302643061 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:42.302696943 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.303205967 CEST	587	64346	77.75.77.165	192.168.2.7
Jun 4, 2024 12:43:42.303297997 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.305329084 CEST	587	59997	67.219.246.213	192.168.2.7
Jun 4, 2024 12:43:42.305382967 CEST	59997	587	192.168.2.7	67.219.246.213
Jun 4, 2024 12:43:42.305460930 CEST	587	59909	52.45.199.183	192.168.2.7
Jun 4, 2024 12:43:42.305474043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.305555105 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.307343960 CEST	587	59886	76.223.84.192	192.168.2.7
Jun 4, 2024 12:43:42.307614088 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.307621956 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.309345961 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.310612917 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.344475031 CEST	587	59746	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.344575882 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.345110893 CEST	587	59742	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.345192909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.348879099 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:42.348879099 CEST	64346	587	192.168.2.7	77.75.77.165
Jun 4, 2024 12:43:42.349564075 CEST	59909	587	192.168.2.7	52.45.199.183
Jun 4, 2024 12:43:42.350111961 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.353643894 CEST	587	59808	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:42.353727102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.358721018 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.358752966 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.362504959 CEST	587	59901	129.232.148.154	192.168.2.7
Jun 4, 2024 12:43:42.362590075 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.363604069 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.367476940 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.395745993 CEST	59808	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:42.396414995 CEST	59746	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.396421909 CEST	59742	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.398041964 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.398185015 CEST	59952	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.398243904 CEST	50058	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.398309946 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:42.398659945 CEST	50059	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.398726940 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:42.403183937 CEST	587	59952	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.403196096 CEST	587	50058	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.403207064 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:42.403563023 CEST	587	50059	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.403569937 CEST	59901	587	192.168.2.7	129.232.148.154
Jun 4, 2024 12:43:42.403577089 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:42.411489964 CEST	59955	587	192.168.2.7	200.147.36.31
Jun 4, 2024 12:43:42.411525965 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.416980028 CEST	587	59955	200.147.36.31	192.168.2.7
Jun 4, 2024 12:43:42.417329073 CEST	59955	587	192.168.2.7	200.147.36.31
Jun 4, 2024 12:43:42.427501917 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.427560091 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.427607059 CEST	64340	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.427649021 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.432663918 CEST	587	64340	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.432673931 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.435895920 CEST	59998	465	192.168.2.7	193.57.27.27
Jun 4, 2024 12:43:42.440809011 CEST	465	59998	193.57.27.27	192.168.2.7
Jun 4, 2024 12:43:42.440875053 CEST	59998	465	192.168.2.7	193.57.27.27
Jun 4, 2024 12:43:42.440897942 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.444631100 CEST	587	59896	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.444710970 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.449639082 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.473392010 CEST	587	59758	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.473608017 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.473949909 CEST	587	59759	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.474210024 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.479068041 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.490166903 CEST	59896	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:42.518456936 CEST	587	59883	35.214.249.211	192.168.2.7
Jun 4, 2024 12:43:42.518568993 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.519865036 CEST	587	59865	168.119.150.59	192.168.2.7
Jun 4, 2024 12:43:42.519929886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.520649910 CEST	59758	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.520924091 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.520946980 CEST	59759	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.520968914 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.521378040 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:42.521415949 CEST	59926	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.521464109 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:42.521529913 CEST	59934	587	192.168.2.7	199.224.64.207
Jun 4, 2024 12:43:42.524811029 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.526228905 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:42.526700974 CEST	587	59926	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.526710987 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:42.526719093 CEST	587	59934	199.224.64.207	192.168.2.7
Jun 4, 2024 12:43:42.532629013 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:42.532711029 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.533525944 CEST	587	59880	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:42.533567905 CEST	59880	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:42.533596039 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.538475990 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.540930986 CEST	587	59866	191.252.112.195	192.168.2.7
Jun 4, 2024 12:43:42.540998936 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.561086893 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:42.561152935 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:42.561189890 CEST	59811	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:42.561222076 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.566082954 CEST	587	59811	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:42.566134930 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.567569971 CEST	59865	587	192.168.2.7	168.119.150.59
Jun 4, 2024 12:43:42.567586899 CEST	59883	587	192.168.2.7	35.214.249.211
Jun 4, 2024 12:43:42.569154024 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:42.569164038 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:42.569174051 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:42.569184065 CEST	587	59908	64.91.253.60	192.168.2.7
Jun 4, 2024 12:43:42.569214106 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:42.569228888 CEST	59908	587	192.168.2.7	64.91.253.60
Jun 4, 2024 12:43:42.569310904 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.574284077 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.576478004 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.581640959 CEST	587	59722	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.581754923 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.583849907 CEST	59866	587	192.168.2.7	191.252.112.195
Jun 4, 2024 12:43:42.586791992 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.600519896 CEST	587	59764	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.600615025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.630131006 CEST	59722	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.646112919 CEST	59764	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.646128893 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.648053885 CEST	59999	587	192.168.2.7	52.101.68.39
Jun 4, 2024 12:43:42.650681019 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.651204109 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:42.651376009 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.651525974 CEST	59976	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:42.651582956 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.652266026 CEST	587	59857	213.33.87.55	192.168.2.7
Jun 4, 2024 12:43:42.652339935 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.652909994 CEST	587	59999	52.101.68.39	192.168.2.7
Jun 4, 2024 12:43:42.653040886 CEST	59999	587	192.168.2.7	52.101.68.39
Jun 4, 2024 12:43:42.653103113 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.653354883 CEST	587	59952	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.653434038 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.656153917 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:42.656244040 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.656567097 CEST	587	59976	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:42.656585932 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.657233000 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.658358097 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.658638954 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.662060976 CEST	587	59988	108.177.15.109	192.168.2.7
Jun 4, 2024 12:43:42.662446976 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.666013956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.666040897 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.667320013 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.671005011 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.671014071 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.671060085 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:42.671097040 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:42.671106100 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:42.671114922 CEST	587	59913	108.167.151.68	192.168.2.7
Jun 4, 2024 12:43:42.671130896 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:42.671149015 CEST	59913	587	192.168.2.7	108.167.151.68
Jun 4, 2024 12:43:42.671195030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.671195030 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.671228886 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.672888994 CEST	587	50050	66.226.70.66	192.168.2.7
Jun 4, 2024 12:43:42.673012972 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.676165104 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.677432060 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.677834034 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.682167053 CEST	587	59934	199.224.64.207	192.168.2.7
Jun 4, 2024 12:43:42.684103012 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.689075947 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.693356037 CEST	60000	465	192.168.2.7	3.64.163.50
Jun 4, 2024 12:43:42.693914890 CEST	587	59858	64.136.44.44	192.168.2.7
Jun 4, 2024 12:43:42.693993092 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.698282003 CEST	465	60000	3.64.163.50	192.168.2.7
Jun 4, 2024 12:43:42.698364973 CEST	60000	465	192.168.2.7	3.64.163.50
Jun 4, 2024 12:43:42.698417902 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.698916912 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.703485966 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.708178043 CEST	59988	587	192.168.2.7	108.177.15.109
Jun 4, 2024 12:43:42.708945990 CEST	59952	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.709067106 CEST	59857	587	192.168.2.7	213.33.87.55
Jun 4, 2024 12:43:42.723922968 CEST	50050	587	192.168.2.7	66.226.70.66
Jun 4, 2024 12:43:42.724431038 CEST	59934	587	192.168.2.7	199.224.64.207
Jun 4, 2024 12:43:42.734607935 CEST	60001	587	192.168.2.7	3.140.13.188
Jun 4, 2024 12:43:42.739437103 CEST	59858	587	192.168.2.7	64.136.44.44
Jun 4, 2024 12:43:42.739470005 CEST	587	60001	3.140.13.188	192.168.2.7
Jun 4, 2024 12:43:42.739523888 CEST	60001	587	192.168.2.7	3.140.13.188
Jun 4, 2024 12:43:42.740087986 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.745083094 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.750077963 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.750102043 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.754513025 CEST	587	59994	209.202.254.90	192.168.2.7
Jun 4, 2024 12:43:42.754574060 CEST	59994	587	192.168.2.7	209.202.254.90
Jun 4, 2024 12:43:42.754617929 CEST	59994	587	192.168.2.7	209.202.254.90
Jun 4, 2024 12:43:42.754676104 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.755120039 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.759491920 CEST	587	59994	209.202.254.90	192.168.2.7
Jun 4, 2024 12:43:42.759525061 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.771485090 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.771802902 CEST	59927	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:42.771864891 CEST	59885	587	192.168.2.7	27.124.113.33
Jun 4, 2024 12:43:42.771914005 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:42.772142887 CEST	60002	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:42.776690006 CEST	587	59926	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.776699066 CEST	587	59927	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:42.776777029 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:42.776778936 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.776815891 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:42.776988983 CEST	587	60002	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:42.777048111 CEST	60002	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:42.777111053 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.782155037 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.783906937 CEST	587	64355	104.153.0.33	192.168.2.7
Jun 4, 2024 12:43:42.783993959 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.786617994 CEST	59910	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:42.786632061 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.791548014 CEST	587	59910	142.250.153.26	192.168.2.7
Jun 4, 2024 12:43:42.791599035 CEST	59910	587	192.168.2.7	142.250.153.26
Jun 4, 2024 12:43:42.791637897 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.797734022 CEST	587	59992	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.797838926 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.806833982 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.806859016 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.811863899 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.817590952 CEST	59926	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.833265066 CEST	64355	587	192.168.2.7	104.153.0.33
Jun 4, 2024 12:43:42.844088078 CEST	587	59771	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.844207048 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.848619938 CEST	587	59772	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.848925114 CEST	59992	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.849306107 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.854168892 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.891242981 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.891444921 CEST	59915	587	192.168.2.7	175.135.254.129
Jun 4, 2024 12:43:42.891510963 CEST	59737	587	192.168.2.7	65.20.63.172
Jun 4, 2024 12:43:42.891587973 CEST	59853	587	192.168.2.7	192.252.154.117
Jun 4, 2024 12:43:42.891614914 CEST	59732	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.892046928 CEST	59762	587	192.168.2.7	109.234.161.75
Jun 4, 2024 12:43:42.892414093 CEST	59957	587	192.168.2.7	187.86.131.25
Jun 4, 2024 12:43:42.892534971 CEST	60003	587	192.168.2.7	47.43.18.10
Jun 4, 2024 12:43:42.892865896 CEST	60004	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:42.895862103 CEST	59771	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.896332979 CEST	587	59915	175.135.254.129	192.168.2.7
Jun 4, 2024 12:43:42.896373987 CEST	59772	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.896389008 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:42.896471977 CEST	587	59732	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.896528959 CEST	587	59853	192.252.154.117	192.168.2.7
Jun 4, 2024 12:43:42.896933079 CEST	587	59762	109.234.161.75	192.168.2.7
Jun 4, 2024 12:43:42.897249937 CEST	587	59957	187.86.131.25	192.168.2.7
Jun 4, 2024 12:43:42.897607088 CEST	587	60003	47.43.18.10	192.168.2.7
Jun 4, 2024 12:43:42.897681952 CEST	60003	587	192.168.2.7	47.43.18.10
Jun 4, 2024 12:43:42.897713900 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.897742033 CEST	587	60004	194.19.134.66	192.168.2.7
Jun 4, 2024 12:43:42.897795916 CEST	60004	587	192.168.2.7	194.19.134.66
Jun 4, 2024 12:43:42.897828102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.900185108 CEST	60005	587	192.168.2.7	195.110.124.132
Jun 4, 2024 12:43:42.903033018 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.905236959 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.905256987 CEST	587	60005	195.110.124.132	192.168.2.7
Jun 4, 2024 12:43:42.905333042 CEST	60005	587	192.168.2.7	195.110.124.132
Jun 4, 2024 12:43:42.905392885 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.905426025 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.907598972 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:42.907692909 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.910677910 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.939563990 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.939590931 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.944530010 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.950172901 CEST	587	59992	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.950239897 CEST	59992	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.950285912 CEST	59992	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:42.950304985 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.955176115 CEST	587	59992	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:42.955187082 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:42.958151102 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.958163977 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:42.964179039 CEST	587	59996	147.182.189.184	192.168.2.7
Jun 4, 2024 12:43:42.964257956 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.984114885 CEST	587	59770	87.242.0.7	192.168.2.7
Jun 4, 2024 12:43:42.984296083 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:42.989358902 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:43.005059958 CEST	59996	587	192.168.2.7	147.182.189.184
Jun 4, 2024 12:43:43.015445948 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:43.015573025 CEST	59977	587	192.168.2.7	167.172.23.243
Jun 4, 2024 12:43:43.015619993 CEST	64341	587	192.168.2.7	108.177.15.108
Jun 4, 2024 12:43:43.015666962 CEST	64335	587	192.168.2.7	142.93.237.125
Jun 4, 2024 12:43:43.015708923 CEST	59932	587	192.168.2.7	46.255.231.19
Jun 4, 2024 12:43:43.015793085 CEST	64331	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:43.016562939 CEST	60006	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:43.020590067 CEST	587	59977	167.172.23.243	192.168.2.7
Jun 4, 2024 12:43:43.020601034 CEST	587	64341	108.177.15.108	192.168.2.7
Jun 4, 2024 12:43:43.020617008 CEST	587	64335	142.93.237.125	192.168.2.7
Jun 4, 2024 12:43:43.020627022 CEST	587	59932	46.255.231.19	192.168.2.7
Jun 4, 2024 12:43:43.020715952 CEST	587	64331	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:43.021481037 CEST	587	60006	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:43.021539927 CEST	60006	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:43.021578074 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:43.026088953 CEST	587	59860	109.61.0.142	192.168.2.7
Jun 4, 2024 12:43:43.026166916 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:43.031055927 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:43.032283068 CEST	587	59995	168.0.132.203	192.168.2.7
Jun 4, 2024 12:43:43.032349110 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:43.036315918 CEST	59770	587	192.168.2.7	87.242.0.7
Jun 4, 2024 12:43:43.037425041 CEST	587	59876	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:43.037506104 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:43.038748980 CEST	587	59989	189.124.16.18	192.168.2.7
Jun 4, 2024 12:43:43.038816929 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:43.041742086 CEST	587	59879	84.2.43.67	192.168.2.7
Jun 4, 2024 12:43:43.041820049 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:43.042323112 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:43.046710014 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:43.048445940 CEST	587	59737	65.20.63.172	192.168.2.7
Jun 4, 2024 12:43:43.048530102 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:43.066303015 CEST	587	59885	27.124.113.33	192.168.2.7
Jun 4, 2024 12:43:43.066374063 CEST	49706	4001	192.168.2.7	185.43.220.45
Jun 4, 2024 12:43:43.068165064 CEST	59860	587	192.168.2.7	109.61.0.142
Jun 4, 2024 12:43:43.071290970 CEST	4001	49706	185.43.220.45	192.168.2.7
Jun 4, 2024 12:43:43.083156109 CEST	59879	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:43.083798885 CEST	59876	587	192.168.2.7	84.2.43.67
Jun 4, 2024 12:43:43.083798885 CEST	59989	587	192.168.2.7	189.124.16.18
Jun 4, 2024 12:43:43.083941936 CEST	59995	587	192.168.2.7	168.0.132.203
Jun 4, 2024 12:43:43.098757982 CEST	59737	587	192.168.2.7	65.20.63.172

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 4, 2024 12:42:32.672534943 CEST	192.168.2.7	1.1.1.1	0x7911	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:42:38.266083956 CEST	192.168.2.7	1.1.1.1	0x14b6	Standard query (0)	clwtumberaero.cyou	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.285801888 CEST	192.168.2.7	1.1.1.1	0xb818	Standard query (0)	mail.edu.uni-klu.ac.at	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.405893087 CEST	192.168.2.7	1.1.1.1	0x9711	Standard query (0)	yaho.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.519871950 CEST	192.168.2.7	1.1.1.1	0x52dd	Standard query (0)	secure.omibyarnetwork.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.815113068 CEST	192.168.2.7	1.1.1.1	0xd83a	Standard query (0)	smtp.ig.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.816323996 CEST	192.168.2.7	1.1.1.1	0x5485	Standard query (0)	mail.fwcd.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.817176104 CEST	192.168.2.7	1.1.1.1	0xd751	Standard query (0)	mail.stmmediastore.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.820743084 CEST	192.168.2.7	1.1.1.1	0xc589	Standard query (0)	thru.my	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.932014942 CEST	192.168.2.7	1.1.1.1	0x3f86	Standard query (0)	nieuwegein.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.932801008 CEST	192.168.2.7	1.1.1.1	0xfa82	Standard query (0)	secure.roncoroni.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.933110952 CEST	192.168.2.7	1.1.1.1	0x6022	Standard query (0)	relay.micso.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.933885098 CEST	192.168.2.7	1.1.1.1	0xeef0	Standard query (0)	securesmtp.pasteur.gr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.934206963 CEST	192.168.2.7	1.1.1.1	0x3ae6	Standard query (0)	secure.yatesfamily.me.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.934762955 CEST	192.168.2.7	1.1.1.1	0xfb76	Standard query (0)	out.ouellette.homeip.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.046255112 CEST	192.168.2.7	1.1.1.1	0x3beb	Standard query (0)	smtp.superig.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.047380924 CEST	192.168.2.7	1.1.1.1	0x751b	Standard query (0)	out.ham.org.tw	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.178234100 CEST	192.168.2.7	1.1.1.1	0x822	Standard query (0)	docomo.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.179311037 CEST	192.168.2.7	1.1.1.1	0x66d3	Standard query (0)	mail.superkingsmall.com.ng	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.179493904 CEST	192.168.2.7	1.1.1.1	0xa90f	Standard query (0)	secure.tinkerbox.com.sg	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.180510998 CEST	192.168.2.7	1.1.1.1	0xae58	Standard query (0)	smtp.ulmipu.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.180655003 CEST	192.168.2.7	1.1.1.1	0x887b	Standard query (0)	out.sd151.k12.id.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.300755024 CEST	192.168.2.7	1.1.1.1	0x9386	Standard query (0)	securesmtp.firehousejerky.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.301721096 CEST	192.168.2.7	1.1.1.1	0x8fe	Standard query (0)	mail.riviera-productions.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.303705931 CEST	192.168.2.7	1.1.1.1	0xafef	Standard query (0)	out.laregionalsa.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.304442883 CEST	192.168.2.7	1.1.1.1	0x98f5	Standard query (0)	oi.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.305243969 CEST	192.168.2.7	1.1.1.1	0xa6d6	Standard query (0)	smtp.goliathacademy.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.305932045 CEST	192.168.2.7	1.1.1.1	0xdd1	Standard query (0)	mxs1.iconpln.net.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.438895941 CEST	192.168.2.7	1.1.1.1	0x81d1	Standard query (0)	smtp.lapermittocarry.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.440408945 CEST	192.168.2.7	1.1.1.1	0x108c	Standard query (0)	mail.campingcasadicaccia.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.550724983 CEST	192.168.2.7	1.1.1.1	0x69c9	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.552583933 CEST	192.168.2.7	1.1.1.1	0x268e	Standard query (0)	mail.rfiusa.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.553191900 CEST	192.168.2.7	1.1.1.1	0x5584	Standard query (0)	eyou.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.553973913 CEST	192.168.2.7	1.1.1.1	0xba2	Standard query (0)	smtp.saintys.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.554272890 CEST	192.168.2.7	1.1.1.1	0x4643	Standard query (0)	mail.hsd.k12.or.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.699693918 CEST	192.168.2.7	1.1.1.1	0x63f7	Standard query (0)	secure.retailwarenhuis.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.700299978 CEST	192.168.2.7	1.1.1.1	0xd581	Standard query (0)	mail.uem.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.701575041 CEST	192.168.2.7	1.1.1.1	0x7c19	Standard query (0)	secure.jsw.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.701637983 CEST	192.168.2.7	1.1.1.1	0xf688	Standard query (0)	mail.deutschgames.tv	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.703357935 CEST	192.168.2.7	1.1.1.1	0xe826	Standard query (0)	mail.birobar.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.703401089 CEST	192.168.2.7	1.1.1.1	0xb76d	Standard query (0)	smtp.mikromess.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.704245090 CEST	192.168.2.7	1.1.1.1	0xf4da	Standard query (0)	smtp.freemail.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.704476118 CEST	192.168.2.7	1.1.1.1	0x972d	Standard query (0)	nate.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.837131023 CEST	192.168.2.7	1.1.1.1	0xcd0d	Standard query (0)	securesmtp.shahsolutions.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.839694023 CEST	192.168.2.7	1.1.1.1	0xd41e	Standard query (0)	tut.by	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.839828968 CEST	192.168.2.7	1.1.1.1	0x9819	Standard query (0)	mail.hot.ee	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.841094971 CEST	192.168.2.7	1.1.1.1	0xbe15	Standard query (0)	smtp.ziggo.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.842808962 CEST	192.168.2.7	1.1.1.1	0xe7c7	Standard query (0)	smtp.mbst.uni-rostock.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.844537973 CEST	192.168.2.7	1.1.1.1	0x715f	Standard query (0)	smtp.mexonexc.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.844784021 CEST	192.168.2.7	1.1.1.1	0x7d50	Standard query (0)	smtp.x-pert.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.927262068 CEST	192.168.2.7	1.1.1.1	0xfa82	Standard query (0)	secure.roncoroni.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.951559067 CEST	192.168.2.7	1.1.1.1	0x4fa9	Standard query (0)	temporary-mail.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.951559067 CEST	192.168.2.7	1.1.1.1	0xb1c0	Standard query (0)	mail.desbrown.karoo.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.952383041 CEST	192.168.2.7	1.1.1.1	0x63df	Standard query (0)	smtp.carnegienet.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.964963913 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	smtp.carnegienet.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.036767960 CEST	192.168.2.7	1.1.1.1	0x751b	Standard query (0)	out.ham.org.tw	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.081207991 CEST	192.168.2.7	1.1.1.1	0xa456	Standard query (0)	out.francetv.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.082860947 CEST	192.168.2.7	1.1.1.1	0x29b2	Standard query (0)	secure.reecon.eclipse.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.082871914 CEST	192.168.2.7	1.1.1.1	0x3572	Standard query (0)	smtp.kartmagic.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.084219933 CEST	192.168.2.7	1.1.1.1	0x9359	Standard query (0)	mx3.agenturserver.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.085047007 CEST	192.168.2.7	1.1.1.1	0xc0b5	Standard query (0)	secure.franmetal.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.085998058 CEST	192.168.2.7	1.1.1.1	0xd370	Standard query (0)	secure.kaera.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.086958885 CEST	192.168.2.7	1.1.1.1	0x2f80	Standard query (0)	mx.generic-isp.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.087601900 CEST	192.168.2.7	1.1.1.1	0xd8f3	Standard query (0)	heilige-garde.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.088496923 CEST	192.168.2.7	1.1.1.1	0x7a6c	Standard query (0)	mail.pevkolej.k12.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.088630915 CEST	192.168.2.7	1.1.1.1	0xf166	Standard query (0)	smtp.citromail.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.090013027 CEST	192.168.2.7	1.1.1.1	0xca37	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.090723991 CEST	192.168.2.7	1.1.1.1	0xbd8c	Standard query (0)	securesmtp.asoberway.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.177278996 CEST	192.168.2.7	1.1.1.1	0x66d3	Standard query (0)	mail.superkingsmall.com.ng	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.203339100 CEST	192.168.2.7	1.1.1.1	0x7ef1	Standard query (0)	mail.costaveras.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.204174042 CEST	192.168.2.7	1.1.1.1	0xa079	Standard query (0)	mail.riber.net.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.209116936 CEST	192.168.2.7	1.1.1.1	0xed44	Standard query (0)	securesmtp.infotech.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.326694012 CEST	192.168.2.7	1.1.1.1	0x90aa	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.327542067 CEST	192.168.2.7	1.1.1.1	0x5a79	Standard query (0)	securesmtp.deltaeurofridge.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.328723907 CEST	192.168.2.7	1.1.1.1	0x1d79	Standard query (0)	jeffkimble.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.329742908 CEST	192.168.2.7	1.1.1.1	0x7dcd	Standard query (0)	mail.optonline.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.330271959 CEST	192.168.2.7	1.1.1.1	0x6716	Standard query (0)	smtp.post.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.330696106 CEST	192.168.2.7	1.1.1.1	0xa235	Standard query (0)	telia.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.448483944 CEST	192.168.2.7	1.1.1.1	0x5db0	Standard query (0)	secure.ctlcloud.pw	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.448577881 CEST	192.168.2.7	1.1.1.1	0xaf77	Standard query (0)	smtp.modaviva.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.451133966 CEST	192.168.2.7	1.1.1.1	0x5af9	Standard query (0)	mx2.hostinger.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.451486111 CEST	192.168.2.7	1.1.1.1	0x4b58	Standard query (0)	out.kingedwaracademy.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.453417063 CEST	192.168.2.7	1.1.1.1	0x43e1	Standard query (0)	mail.aak-schubert.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.576175928 CEST	192.168.2.7	1.1.1.1	0x8d5e	Standard query (0)	out.adoramidia.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.577374935 CEST	192.168.2.7	1.1.1.1	0xf6c1	Standard query (0)	ultra-speed.url.tw	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.577732086 CEST	192.168.2.7	1.1.1.1	0xe28	Standard query (0)	securesmtp.mbox317.swipnet.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.578243971 CEST	192.168.2.7	1.1.1.1	0x83c8	Standard query (0)	smtp.telenet.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.579108953 CEST	192.168.2.7	1.1.1.1	0xf29f	Standard query (0)	mail.timolang.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.579164982 CEST	192.168.2.7	1.1.1.1	0xe6b6	Standard query (0)	securesmtp.luckyadmin.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.580071926 CEST	192.168.2.7	1.1.1.1	0xcc2b	Standard query (0)	medlinx.co.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.580703974 CEST	192.168.2.7	1.1.1.1	0x42bc	Standard query (0)	securesmtp.svasti.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.695630074 CEST	192.168.2.7	1.1.1.1	0x9d43	Standard query (0)	smtp.millims.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.697321892 CEST	192.168.2.7	1.1.1.1	0x44d0	Standard query (0)	foodscience.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.700336933 CEST	192.168.2.7	1.1.1.1	0xedb	Standard query (0)	securesmtp.jeffrutherford.com.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.702912092 CEST	192.168.2.7	1.1.1.1	0x77d9	Standard query (0)	secure.rutonworking.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.704117060 CEST	192.168.2.7	1.1.1.1	0x30e3	Standard query (0)	theworkgroupinc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.705535889 CEST	192.168.2.7	1.1.1.1	0xac51	Standard query (0)	secure.tahoo.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.706337929 CEST	192.168.2.7	1.1.1.1	0xfd68	Standard query (0)	wsspartans.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.718688965 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	wsspartans.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.207622051 CEST	192.168.2.7	1.1.1.1	0x84b9	Standard query (0)	secure.chest.or.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.208920956 CEST	192.168.2.7	1.1.1.1	0x26f6	Standard query (0)	out.558dcfb5e7.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.210815907 CEST	192.168.2.7	1.1.1.1	0x1ba1	Standard query (0)	securesmtp.g-e.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.210975885 CEST	192.168.2.7	1.1.1.1	0x6b	Standard query (0)	secure.leslilathrom.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.212498903 CEST	192.168.2.7	1.1.1.1	0x4f8b	Standard query (0)	smtp.a3proyectos.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.213551044 CEST	192.168.2.7	1.1.1.1	0x363b	Standard query (0)	xbarnet.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.214409113 CEST	192.168.2.7	1.1.1.1	0xecb3	Standard query (0)	freddy-mueller.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.335170031 CEST	192.168.2.7	1.1.1.1	0x57ca	Standard query (0)	gridinfosys-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.337646961 CEST	192.168.2.7	1.1.1.1	0x742d	Standard query (0)	mail.eds.dd	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.338500977 CEST	192.168.2.7	1.1.1.1	0xe9c	Standard query (0)	out.schreiner-schnitzenbaumer.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.339112997 CEST	192.168.2.7	1.1.1.1	0x136e	Standard query (0)	tradetec.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.339880943 CEST	192.168.2.7	1.1.1.1	0x6fbc	Standard query (0)	smtp.virgilio.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.341165066 CEST	192.168.2.7	1.1.1.1	0xde99	Standard query (0)	aon.at	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.455589056 CEST	192.168.2.7	1.1.1.1	0xbf27	Standard query (0)	secure.fhv.at	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.455835104 CEST	192.168.2.7	1.1.1.1	0x2ceb	Standard query (0)	depedmalaboncity.ph	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.456449032 CEST	192.168.2.7	1.1.1.1	0x8f81	Standard query (0)	5f798dfe5f.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.456649065 CEST	192.168.2.7	1.1.1.1	0x947d	Standard query (0)	jq-informatics.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.457106113 CEST	192.168.2.7	1.1.1.1	0xdb1d	Standard query (0)	digimail.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.569288969 CEST	192.168.2.7	1.1.1.1	0x3f4b	Standard query (0)	mail.hdp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.569715023 CEST	192.168.2.7	1.1.1.1	0x413e	Standard query (0)	mail.i.ua	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.570003033 CEST	192.168.2.7	1.1.1.1	0x6793	Standard query (0)	mail.8418f58be3.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.570949078 CEST	192.168.2.7	1.1.1.1	0xfb31	Standard query (0)	smtp.adv.oabsp.org.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.571077108 CEST	192.168.2.7	1.1.1.1	0x83ff	Standard query (0)	spoluzaci.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.571185112 CEST	192.168.2.7	1.1.1.1	0x63e4	Standard query (0)	redeuniaonacional.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.571501017 CEST	192.168.2.7	1.1.1.1	0x89aa	Standard query (0)	mail.sg10vl.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.693070889 CEST	192.168.2.7	1.1.1.1	0x44d0	Standard query (0)	foodscience.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.695858002 CEST	192.168.2.7	1.1.1.1	0x3c0a	Standard query (0)	mail.ecountrystore.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.696346998 CEST	192.168.2.7	1.1.1.1	0xb8c	Standard query (0)	smtp.crtba.org.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.696525097 CEST	192.168.2.7	1.1.1.1	0x5477	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.696757078 CEST	192.168.2.7	1.1.1.1	0x24f0	Standard query (0)	promad.com.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.696909904 CEST	192.168.2.7	1.1.1.1	0x558d	Standard query (0)	secure.monplaisircollege.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.697230101 CEST	192.168.2.7	1.1.1.1	0x322b	Standard query (0)	smtp.privfit.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.697314978 CEST	192.168.2.7	1.1.1.1	0x8864	Standard query (0)	out.caslondon.on.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.815608978 CEST	192.168.2.7	1.1.1.1	0x215e	Standard query (0)	securesmtp.madner.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.815937996 CEST	192.168.2.7	1.1.1.1	0x5a27	Standard query (0)	mail.dngc.ac.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.816071033 CEST	192.168.2.7	1.1.1.1	0x9d21	Standard query (0)	out.lippet.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.816314936 CEST	192.168.2.7	1.1.1.1	0x911a	Standard query (0)	secure.namtrieu.com.vn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.816610098 CEST	192.168.2.7	1.1.1.1	0xe02c	Standard query (0)	4blue.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.934581995 CEST	192.168.2.7	1.1.1.1	0xe4e9	Standard query (0)	smtp.videa.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.934842110 CEST	192.168.2.7	1.1.1.1	0x9db0	Standard query (0)	out.auladaf.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.935710907 CEST	192.168.2.7	1.1.1.1	0xd0eb	Standard query (0)	out.ag.wakwak.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.935940027 CEST	192.168.2.7	1.1.1.1	0x120d	Standard query (0)	out.bits.com.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.936198950 CEST	192.168.2.7	1.1.1.1	0xeebe	Standard query (0)	securesmtp.renovamaquinas.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.936309099 CEST	192.168.2.7	1.1.1.1	0x9ab9	Standard query (0)	out.greenvapes.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.064656019 CEST	192.168.2.7	1.1.1.1	0xc1a4	Standard query (0)	out.rolegu.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.064903021 CEST	192.168.2.7	1.1.1.1	0xfa77	Standard query (0)	maebars.tk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.065135956 CEST	192.168.2.7	1.1.1.1	0xc103	Standard query (0)	securesmtp.rosellestudent.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.065349102 CEST	192.168.2.7	1.1.1.1	0xbaf	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.065553904 CEST	192.168.2.7	1.1.1.1	0xc1c3	Standard query (0)	secure.bigcarnes.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.066031933 CEST	192.168.2.7	1.1.1.1	0xa75d	Standard query (0)	mail.lorenzapucci.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.190160036 CEST	192.168.2.7	1.1.1.1	0xb46b	Standard query (0)	securesmtp.quigleyssmokehouse.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.190278053 CEST	192.168.2.7	1.1.1.1	0x4336	Standard query (0)	smtp.i.hosei.ac.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.190634966 CEST	192.168.2.7	1.1.1.1	0x87a7	Standard query (0)	secure.saintongeecoconfort.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.190646887 CEST	192.168.2.7	1.1.1.1	0xd199	Standard query (0)	15zero15-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.190989971 CEST	192.168.2.7	1.1.1.1	0x59a4	Standard query (0)	mail.rts.net.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.191080093 CEST	192.168.2.7	1.1.1.1	0x1938	Standard query (0)	smtp.gruppounica.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.191477060 CEST	192.168.2.7	1.1.1.1	0x2e80	Standard query (0)	secure.ag.netyou.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.309573889 CEST	192.168.2.7	1.1.1.1	0x9bc2	Standard query (0)	smtp.sysria.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.309798956 CEST	192.168.2.7	1.1.1.1	0xab73	Standard query (0)	securesmtp.ugecamne.fitech.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.310173035 CEST	192.168.2.7	1.1.1.1	0x7b02	Standard query (0)	out.o2bkids.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.310857058 CEST	192.168.2.7	1.1.1.1	0x1d5f	Standard query (0)	mwt-mx.email-protect.gosecure.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.311403036 CEST	192.168.2.7	1.1.1.1	0x7d8c	Standard query (0)	alliebillings.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.311846972 CEST	192.168.2.7	1.1.1.1	0x47ff	Standard query (0)	mail.nationwide.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.436903000 CEST	192.168.2.7	1.1.1.1	0x60a2	Standard query (0)	masingresos.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.438544989 CEST	192.168.2.7	1.1.1.1	0xc787	Standard query (0)	out.gabrielevilla.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.438824892 CEST	192.168.2.7	1.1.1.1	0x99b5	Standard query (0)	mail.gmbol.cem	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.439059973 CEST	192.168.2.7	1.1.1.1	0x735e	Standard query (0)	secure.lebrede.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.439260006 CEST	192.168.2.7	1.1.1.1	0x9036	Standard query (0)	securesmtp.ms890.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.439452887 CEST	192.168.2.7	1.1.1.1	0x91a3	Standard query (0)	mail.kevinrush.plus.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.439654112 CEST	192.168.2.7	1.1.1.1	0xd486	Standard query (0)	smtp.chandela.co.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.439841032 CEST	192.168.2.7	1.1.1.1	0xf44d	Standard query (0)	useroor.pr.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.440754890 CEST	192.168.2.7	1.1.1.1	0x2ce3	Standard query (0)	gravolab.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.554377079 CEST	192.168.2.7	1.1.1.1	0xa67d	Standard query (0)	out.lowhosting.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.554636955 CEST	192.168.2.7	1.1.1.1	0xeb39	Standard query (0)	smtp.yare-edu.org.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.554812908 CEST	192.168.2.7	1.1.1.1	0x3ea2	Standard query (0)	mxb.mailgun.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.555615902 CEST	192.168.2.7	1.1.1.1	0x245b	Standard query (0)	secure.p6comunicacao.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.556044102 CEST	192.168.2.7	1.1.1.1	0xeff	Standard query (0)	out.gmil.nz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.556117058 CEST	192.168.2.7	1.1.1.1	0xd6c	Standard query (0)	smtp.vodafone.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.672250032 CEST	192.168.2.7	1.1.1.1	0xbe42	Standard query (0)	securesmtp.danieljakobs.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.672487020 CEST	192.168.2.7	1.1.1.1	0x9eae	Standard query (0)	securesmtp.nds.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.672574997 CEST	192.168.2.7	1.1.1.1	0xd20f	Standard query (0)	securesmtp.mandela.ac.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.672775030 CEST	192.168.2.7	1.1.1.1	0xe930	Standard query (0)	smtp.jcom.home.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.692994118 CEST	192.168.2.7	1.1.1.1	0xb8c	Standard query (0)	smtp.crtba.org.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.818094015 CEST	192.168.2.7	1.1.1.1	0x911a	Standard query (0)	secure.namtrieu.com.vn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.922836065 CEST	192.168.2.7	1.1.1.1	0xed90	Standard query (0)	secure.rollspack.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.923041105 CEST	192.168.2.7	1.1.1.1	0xbe08	Standard query (0)	telekom.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.923312902 CEST	192.168.2.7	1.1.1.1	0xa68b	Standard query (0)	secure.quikefoods.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.923727036 CEST	192.168.2.7	1.1.1.1	0x49bd	Standard query (0)	secure.media24.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.923727036 CEST	192.168.2.7	1.1.1.1	0x5087	Standard query (0)	out.santen.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.923765898 CEST	192.168.2.7	1.1.1.1	0xc036	Standard query (0)	securesmtp.unicredmg.coop.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.923983097 CEST	192.168.2.7	1.1.1.1	0xca91	Standard query (0)	mail.sbfz.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.924027920 CEST	192.168.2.7	1.1.1.1	0x8549	Standard query (0)	out.uva.eg	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.924283981 CEST	192.168.2.7	1.1.1.1	0xae16	Standard query (0)	mail.equpointproperty.co.tz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.943670988 CEST	192.168.2.7	1.1.1.1	0x6467	Standard query (0)	mail.goo.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.944438934 CEST	192.168.2.7	1.1.1.1	0x8f39	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.944755077 CEST	192.168.2.7	1.1.1.1	0x2807	Standard query (0)	smtp.technomade.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.945024014 CEST	192.168.2.7	1.1.1.1	0x36af	Standard query (0)	smtp.alleader.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.945311069 CEST	192.168.2.7	1.1.1.1	0xbc30	Standard query (0)	securesmtp.vsvs.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.945579052 CEST	192.168.2.7	1.1.1.1	0xfcd8	Standard query (0)	secure.prion.ucl.ac.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.945887089 CEST	192.168.2.7	1.1.1.1	0x326c	Standard query (0)	secure.resolution-air.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.946005106 CEST	192.168.2.7	1.1.1.1	0x20c7	Standard query (0)	ALT2.ASPMX.L.GOOGLE.COM	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.946289062 CEST	192.168.2.7	1.1.1.1	0x17de	Standard query (0)	out.kitchenbarn.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.946787119 CEST	192.168.2.7	1.1.1.1	0x6561	Standard query (0)	secure.plan316.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.076654911 CEST	192.168.2.7	1.1.1.1	0x3789	Standard query (0)	mclink.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.076751947 CEST	192.168.2.7	1.1.1.1	0xfdde	Standard query (0)	mx.talktalk.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.076999903 CEST	192.168.2.7	1.1.1.1	0x44f2	Standard query (0)	out.clubkombinat.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.077239037 CEST	192.168.2.7	1.1.1.1	0x6217	Standard query (0)	mx003.netsol.xion.oxcs.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.077466965 CEST	192.168.2.7	1.1.1.1	0xf168	Standard query (0)	mail.multcomercial.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.077743053 CEST	192.168.2.7	1.1.1.1	0x1a53	Standard query (0)	rogers.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.077827930 CEST	192.168.2.7	1.1.1.1	0xbaa0	Standard query (0)	smtp.smany.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.077963114 CEST	192.168.2.7	1.1.1.1	0x8e8e	Standard query (0)	securesmtp.novalisadvisors.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.078092098 CEST	192.168.2.7	1.1.1.1	0x67a4	Standard query (0)	out.rahsiakambing.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.078207970 CEST	192.168.2.7	1.1.1.1	0x62e0	Standard query (0)	marketplace.amazon.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.078330040 CEST	192.168.2.7	1.1.1.1	0x4ee6	Standard query (0)	wantel.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.193923950 CEST	192.168.2.7	1.1.1.1	0x337	Standard query (0)	freundeimnetz.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.194549084 CEST	192.168.2.7	1.1.1.1	0x1dc1	Standard query (0)	mail.bbwgroup.cn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.194889069 CEST	192.168.2.7	1.1.1.1	0x85de	Standard query (0)	smtp.bhfh.rn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.195307016 CEST	192.168.2.7	1.1.1.1	0xdc00	Standard query (0)	pra.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.195738077 CEST	192.168.2.7	1.1.1.1	0x8df2	Standard query (0)	mail.aarhushfogvuc.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.317167997 CEST	192.168.2.7	1.1.1.1	0x2fc9	Standard query (0)	cataphora.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.317219973 CEST	192.168.2.7	1.1.1.1	0x83df	Standard query (0)	securesmtp.kavucuk.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.318391085 CEST	192.168.2.7	1.1.1.1	0x2da3	Standard query (0)	out.compolar.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.318629980 CEST	192.168.2.7	1.1.1.1	0xe56b	Standard query (0)	mail.hostlocation.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.318872929 CEST	192.168.2.7	1.1.1.1	0xa29a	Standard query (0)	alt3.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.437180996 CEST	192.168.2.7	1.1.1.1	0x21f4	Standard query (0)	securesmtp.libertyelementary.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.437836885 CEST	192.168.2.7	1.1.1.1	0x4361	Standard query (0)	securesmtp.institutozuriel.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.438268900 CEST	192.168.2.7	1.1.1.1	0x5030	Standard query (0)	mx.zoho.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.438566923 CEST	192.168.2.7	1.1.1.1	0xfe66	Standard query (0)	smtp.sit.ac.nz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.438739061 CEST	192.168.2.7	1.1.1.1	0xfbc5	Standard query (0)	aspmx5.googlemail.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.438779116 CEST	192.168.2.7	1.1.1.1	0xe469	Standard query (0)	brturbo.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.558799982 CEST	192.168.2.7	1.1.1.1	0x4398	Standard query (0)	securesmtp.primrose.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.559885979 CEST	192.168.2.7	1.1.1.1	0x77	Standard query (0)	cheapnet.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.560101986 CEST	192.168.2.7	1.1.1.1	0x447b	Standard query (0)	secure.koski.gov.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.677475929 CEST	192.168.2.7	1.1.1.1	0xd20f	Standard query (0)	securesmtp.mandela.ac.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.678457975 CEST	192.168.2.7	1.1.1.1	0x13dd	Standard query (0)	securesmtp.rohr.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.679032087 CEST	192.168.2.7	1.1.1.1	0x6ef8	Standard query (0)	smtp.epikureerna.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.679318905 CEST	192.168.2.7	1.1.1.1	0xd39	Standard query (0)	secure.keiaisha.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.679961920 CEST	192.168.2.7	1.1.1.1	0x20c6	Standard query (0)	secure.localaccess.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.680306911 CEST	192.168.2.7	1.1.1.1	0xac2c	Standard query (0)	smtp.tele2.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.680489063 CEST	192.168.2.7	1.1.1.1	0x39d	Standard query (0)	mx.starikmail.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.680826902 CEST	192.168.2.7	1.1.1.1	0x4611	Standard query (0)	smtp.schokman.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.805301905 CEST	192.168.2.7	1.1.1.1	0xd066	Standard query (0)	smtp.inspire.net.nz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.805960894 CEST	192.168.2.7	1.1.1.1	0x70b8	Standard query (0)	mail.ppski-kaltim.indobelajar.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.930090904 CEST	192.168.2.7	1.1.1.1	0x5a02	Standard query (0)	ya.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.054616928 CEST	192.168.2.7	1.1.1.1	0xb2	Standard query (0)	peonsport.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.056601048 CEST	192.168.2.7	1.1.1.1	0x7e4c	Standard query (0)	smtp.cutlite.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.188268900 CEST	192.168.2.7	1.1.1.1	0x5f49	Standard query (0)	countryhillscrematorium.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.188534021 CEST	192.168.2.7	1.1.1.1	0x6854	Standard query (0)	mail.stmmediastore.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.188819885 CEST	192.168.2.7	1.1.1.1	0x4155	Standard query (0)	luster-kommune-no.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.189027071 CEST	192.168.2.7	1.1.1.1	0x9385	Standard query (0)	exactmedia.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.189295053 CEST	192.168.2.7	1.1.1.1	0xd049	Standard query (0)	mail.aromamarketing.com.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.311963081 CEST	192.168.2.7	1.1.1.1	0xd2a8	Standard query (0)	grifoncapital.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.433278084 CEST	192.168.2.7	1.1.1.1	0x99a8	Standard query (0)	secure.boditech.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.433296919 CEST	192.168.2.7	1.1.1.1	0xf5be	Standard query (0)	secure.diocesivigevano.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.550781012 CEST	192.168.2.7	1.1.1.1	0x45a2	Standard query (0)	wcdsb.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.550997972 CEST	192.168.2.7	1.1.1.1	0x5dde	Standard query (0)	mail.novabrand.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.551112890 CEST	192.168.2.7	1.1.1.1	0x4959	Standard query (0)	secure.axs.tv	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.686273098 CEST	192.168.2.7	1.1.1.1	0x84e7	Standard query (0)	out.lindella.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.686408043 CEST	192.168.2.7	1.1.1.1	0xfa30	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.686553001 CEST	192.168.2.7	1.1.1.1	0x9425	Standard query (0)	primosoft.co.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.693653107 CEST	192.168.2.7	1.1.1.1	0xd20f	Standard query (0)	securesmtp.mandela.ac.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.804924965 CEST	192.168.2.7	1.1.1.1	0xa78a	Standard query (0)	guruku.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.805179119 CEST	192.168.2.7	1.1.1.1	0x97f8	Standard query (0)	smtp.kalbarprov.go.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.805439949 CEST	192.168.2.7	1.1.1.1	0xcbe5	Standard query (0)	smtp.kokillo.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.936681986 CEST	192.168.2.7	1.1.1.1	0xd79f	Standard query (0)	secure.cardinal.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.937563896 CEST	192.168.2.7	1.1.1.1	0x2318	Standard query (0)	mail.heinzenetz.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.052798033 CEST	192.168.2.7	1.1.1.1	0x7e4c	Standard query (0)	smtp.cutlite.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.176810980 CEST	192.168.2.7	1.1.1.1	0xf0b	Standard query (0)	smtp.ballarin.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.178282976 CEST	192.168.2.7	1.1.1.1	0x3803	Standard query (0)	ntc.org.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.178438902 CEST	192.168.2.7	1.1.1.1	0x432b	Standard query (0)	mx01.ionos.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.178714991 CEST	192.168.2.7	1.1.1.1	0x7e3a	Standard query (0)	secure.carrollfoodservice.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.427881956 CEST	192.168.2.7	1.1.1.1	0x92a4	Standard query (0)	mail.ipolicandri.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.428131104 CEST	192.168.2.7	1.1.1.1	0x1444	Standard query (0)	smtp.gamil.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.428738117 CEST	192.168.2.7	1.1.1.1	0x2e6d	Standard query (0)	securesmtp.donotreply.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.443886995 CEST	192.168.2.7	1.1.1.1	0x99a8	Standard query (0)	secure.boditech.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.666074991 CEST	192.168.2.7	1.1.1.1	0x1d55	Standard query (0)	smtp.giardinodiandrea.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.693530083 CEST	192.168.2.7	1.1.1.1	0x84e7	Standard query (0)	out.lindella.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.789535999 CEST	192.168.2.7	1.1.1.1	0x8070	Standard query (0)	out.topdevelopers.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.803472996 CEST	192.168.2.7	1.1.1.1	0x97f8	Standard query (0)	smtp.kalbarprov.go.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.970185995 CEST	192.168.2.7	1.1.1.1	0x6635	Standard query (0)	smtp.me.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.970411062 CEST	192.168.2.7	1.1.1.1	0x18da	Standard query (0)	securesmtp.gdjenkins.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.978121996 CEST	192.168.2.7	1.1.1.1	0x5549	Standard query (0)	secure.jeitler.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.978418112 CEST	192.168.2.7	1.1.1.1	0x617d	Standard query (0)	mail.cascadeschools.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.984894037 CEST	192.168.2.7	1.1.1.1	0xdb7	Standard query (0)	secure.bronchick.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.985162020 CEST	192.168.2.7	1.1.1.1	0xeae0	Standard query (0)	mail.fotografanna.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.985383987 CEST	192.168.2.7	1.1.1.1	0x1826	Standard query (0)	securesmtp.tirol.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.043486118 CEST	192.168.2.7	1.1.1.1	0x70db	Standard query (0)	smtp.netzero.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.172892094 CEST	192.168.2.7	1.1.1.1	0x3010	Standard query (0)	mx.free-lesbian-pic.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.173044920 CEST	192.168.2.7	1.1.1.1	0xd175	Standard query (0)	mx0.dravanet.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.178253889 CEST	192.168.2.7	1.1.1.1	0xf0b	Standard query (0)	smtp.ballarin.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.410722971 CEST	192.168.2.7	1.1.1.1	0x57ae	Standard query (0)	sydkystenssejlklub.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.410909891 CEST	192.168.2.7	1.1.1.1	0xb379	Standard query (0)	securesmtp.capsinc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.537753105 CEST	192.168.2.7	1.1.1.1	0x48c	Standard query (0)	infoseek.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.538047075 CEST	192.168.2.7	1.1.1.1	0xa501	Standard query (0)	secure.marronetransportes.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.538059950 CEST	192.168.2.7	1.1.1.1	0x37c8	Standard query (0)	agent-server.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.658739090 CEST	192.168.2.7	1.1.1.1	0x29f7	Standard query (0)	out.erlenbaugh.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.708889961 CEST	192.168.2.7	1.1.1.1	0xd20f	Standard query (0)	securesmtp.mandela.ac.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.708889961 CEST	192.168.2.7	1.1.1.1	0x84e7	Standard query (0)	out.lindella.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.818667889 CEST	192.168.2.7	1.1.1.1	0x97f8	Standard query (0)	smtp.kalbarprov.go.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.969463110 CEST	192.168.2.7	1.1.1.1	0xb6a4	Standard query (0)	mail3.scanscope.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.970092058 CEST	192.168.2.7	1.1.1.1	0xc4e2	Standard query (0)	securesmtp.sousolution.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.970390081 CEST	192.168.2.7	1.1.1.1	0xf994	Standard query (0)	secure.zairlock.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.999131918 CEST	192.168.2.7	1.1.1.1	0xeae0	Standard query (0)	mail.fotografanna.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.168698072 CEST	192.168.2.7	1.1.1.1	0xd189	Standard query (0)	out.jdajdj.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.169348001 CEST	192.168.2.7	1.1.1.1	0x3ad3	Standard query (0)	secure.ehes.co.inn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.312201023 CEST	192.168.2.7	1.1.1.1	0x939c	Standard query (0)	out.turazza.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.312426090 CEST	192.168.2.7	1.1.1.1	0xb192	Standard query (0)	dl-it.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.432748079 CEST	192.168.2.7	1.1.1.1	0x1621	Standard query (0)	secure.stertzbach.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.432934999 CEST	192.168.2.7	1.1.1.1	0xc5e9	Standard query (0)	mx2-eu.spamexperts.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.433057070 CEST	192.168.2.7	1.1.1.1	0xf693	Standard query (0)	out.ethanlaffan.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.564402103 CEST	192.168.2.7	1.1.1.1	0xf5bb	Standard query (0)	secure.monplaisircollege.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.564677954 CEST	192.168.2.7	1.1.1.1	0x8114	Standard query (0)	secure.mueblesocram.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.564898014 CEST	192.168.2.7	1.1.1.1	0xd9a2	Standard query (0)	smtp.satmaster.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.687480927 CEST	192.168.2.7	1.1.1.1	0x48d7	Standard query (0)	out.digitalmail.info	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.687717915 CEST	192.168.2.7	1.1.1.1	0x7148	Standard query (0)	securesmtp.nova-space.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.687788963 CEST	192.168.2.7	1.1.1.1	0x6c88	Standard query (0)	smtp.bbox.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.808314085 CEST	192.168.2.7	1.1.1.1	0xff50	Standard query (0)	secure.kentcollege.kent.sch.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.808314085 CEST	192.168.2.7	1.1.1.1	0xee85	Standard query (0)	smtp.kongsviktoppen.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.925384045 CEST	192.168.2.7	1.1.1.1	0x70b3	Standard query (0)	mail.truthfinderlogin.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.432096004 CEST	192.168.2.7	1.1.1.1	0x511b	Standard query (0)	secure.ag-mj-kty.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.433681011 CEST	192.168.2.7	1.1.1.1	0xfc6	Standard query (0)	secure.callitltd.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.434132099 CEST	192.168.2.7	1.1.1.1	0x9bfa	Standard query (0)	smtp.johnhuxham.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.637511969 CEST	192.168.2.7	1.1.1.1	0xc41e	Standard query (0)	avis.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.638063908 CEST	192.168.2.7	1.1.1.1	0x659f	Standard query (0)	mail.pol-arise.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.638557911 CEST	192.168.2.7	1.1.1.1	0x77b2	Standard query (0)	mail.fieldnetwork.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.696723938 CEST	192.168.2.7	1.1.1.1	0x5878	Standard query (0)	mx02.goneo.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.696969986 CEST	192.168.2.7	1.1.1.1	0x3804	Standard query (0)	aseconsulting.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.709280968 CEST	192.168.2.7	1.1.1.1	0x84e7	Standard query (0)	out.lindella.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.817059040 CEST	192.168.2.7	1.1.1.1	0xeb9b	Standard query (0)	ianthegg.cf	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.818664074 CEST	192.168.2.7	1.1.1.1	0xc5cc	Standard query (0)	secure.bluebooks.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.818690062 CEST	192.168.2.7	1.1.1.1	0xdbfa	Standard query (0)	smtp.sp8.net.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.066258907 CEST	192.168.2.7	1.1.1.1	0xde2b	Standard query (0)	mail.comercialmonlevade.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.188119888 CEST	192.168.2.7	1.1.1.1	0x50fe	Standard query (0)	nwt.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.188575029 CEST	192.168.2.7	1.1.1.1	0x28a2	Standard query (0)	smtp.djcyren.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.309103012 CEST	192.168.2.7	1.1.1.1	0x7876	Standard query (0)	smtp.webpagesoftware.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.309103012 CEST	192.168.2.7	1.1.1.1	0x3809	Standard query (0)	smtp.mahlabmedia.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.438304901 CEST	192.168.2.7	1.1.1.1	0xfc6	Standard query (0)	secure.callitltd.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.438776970 CEST	192.168.2.7	1.1.1.1	0x88c9	Standard query (0)	secure.expressivapublicidade.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.558816910 CEST	192.168.2.7	1.1.1.1	0x4013	Standard query (0)	smtp.bredballeprivatskole.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.559174061 CEST	192.168.2.7	1.1.1.1	0x901e	Standard query (0)	advancedroofing.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.559343100 CEST	192.168.2.7	1.1.1.1	0x4026	Standard query (0)	out.acwebcreation.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.559467077 CEST	192.168.2.7	1.1.1.1	0xc6cd	Standard query (0)	mail.rapidbikes.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.684113979 CEST	192.168.2.7	1.1.1.1	0x3738	Standard query (0)	securesmtp.bos-kaufbeuren.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.928383112 CEST	192.168.2.7	1.1.1.1	0xecac	Standard query (0)	out.pc1expert.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.929112911 CEST	192.168.2.7	1.1.1.1	0x2667	Standard query (0)	securesmtp.ftl.if.ua	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.046931982 CEST	192.168.2.7	1.1.1.1	0x302	Standard query (0)	out.jespersen.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.047189951 CEST	192.168.2.7	1.1.1.1	0xff01	Standard query (0)	mx.giochi0.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.047605991 CEST	192.168.2.7	1.1.1.1	0x4ab1	Standard query (0)	mail.webstorm.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.181179047 CEST	192.168.2.7	1.1.1.1	0xa948	Standard query (0)	zing.vn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.181464911 CEST	192.168.2.7	1.1.1.1	0x4ec6	Standard query (0)	mail.egyptemploymentbraux.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.181688070 CEST	192.168.2.7	1.1.1.1	0x5cb3	Standard query (0)	out.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.181709051 CEST	192.168.2.7	1.1.1.1	0x9dd1	Standard query (0)	secure.com.wwdfe.goog.wizardingworld	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.299223900 CEST	192.168.2.7	1.1.1.1	0xc939	Standard query (0)	smtp.yxahoo.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.742990971 CEST	192.168.2.7	1.1.1.1	0xc6cd	Standard query (0)	mail.rapidbikes.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.746123075 CEST	192.168.2.7	1.1.1.1	0x7ecf	Standard query (0)	securesmtp.hermeil.her	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.746632099 CEST	192.168.2.7	1.1.1.1	0x51a0	Standard query (0)	cecon.coc.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.746850014 CEST	192.168.2.7	1.1.1.1	0xcc53	Standard query (0)	out.trends360.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.747075081 CEST	192.168.2.7	1.1.1.1	0xe2dc	Standard query (0)	mx2.titan.email	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.813581944 CEST	192.168.2.7	1.1.1.1	0xd7f1	Standard query (0)	dodo.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.958085060 CEST	192.168.2.7	1.1.1.1	0xed4c	Standard query (0)	ieg.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.960222960 CEST	192.168.2.7	1.1.1.1	0xf237	Standard query (0)	securesmtp.leveragesports.ng	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.960517883 CEST	192.168.2.7	1.1.1.1	0x663c	Standard query (0)	securesmtp.stylo.pk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.960536003 CEST	192.168.2.7	1.1.1.1	0xde60	Standard query (0)	mail.aruba.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.076998949 CEST	192.168.2.7	1.1.1.1	0x2078	Standard query (0)	secure.breastcancer-cure.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.194892883 CEST	192.168.2.7	1.1.1.1	0x884e	Standard query (0)	mta2.spin.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.316114902 CEST	192.168.2.7	1.1.1.1	0x79b9	Standard query (0)	smtp.engepred.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.316262960 CEST	192.168.2.7	1.1.1.1	0xc2ed	Standard query (0)	securesmtp.jeparma.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.740329981 CEST	192.168.2.7	1.1.1.1	0xc6cd	Standard query (0)	mail.rapidbikes.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.875325918 CEST	192.168.2.7	1.1.1.1	0x5b56	Standard query (0)	webfulcreations.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.875657082 CEST	192.168.2.7	1.1.1.1	0x11af	Standard query (0)	mail.perimeterinstitute.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.875942945 CEST	192.168.2.7	1.1.1.1	0xebf2	Standard query (0)	secure.allevialiving.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.960753918 CEST	192.168.2.7	1.1.1.1	0x5795	Standard query (0)	out.kreisschule-surbtal.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.961003065 CEST	192.168.2.7	1.1.1.1	0xf102	Standard query (0)	secure.mt.universal.org.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.961196899 CEST	192.168.2.7	1.1.1.1	0xd0eb	Standard query (0)	out.cosmetics.gr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.082509041 CEST	192.168.2.7	1.1.1.1	0xaa03	Standard query (0)	mail.aluno.univesp.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.082746029 CEST	192.168.2.7	1.1.1.1	0xa6d7	Standard query (0)	out.matx.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.082957029 CEST	192.168.2.7	1.1.1.1	0xc669	Standard query (0)	out.malte.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.084002018 CEST	192.168.2.7	1.1.1.1	0xcd20	Standard query (0)	estb.moe.gov.sa	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.084295988 CEST	192.168.2.7	1.1.1.1	0xfb62	Standard query (0)	smtp.inserm.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.200177908 CEST	192.168.2.7	1.1.1.1	0xb614	Standard query (0)	mail.cenr.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.200283051 CEST	192.168.2.7	1.1.1.1	0x7647	Standard query (0)	iol.ie	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.446676016 CEST	192.168.2.7	1.1.1.1	0xcad5	Standard query (0)	mail.supersul.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.447297096 CEST	192.168.2.7	1.1.1.1	0x128	Standard query (0)	out.mansell.plc.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.447316885 CEST	192.168.2.7	1.1.1.1	0x204	Standard query (0)	out.rmc98.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.770045996 CEST	192.168.2.7	1.1.1.1	0x1a8a	Standard query (0)	smtp.imcod.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.770215034 CEST	192.168.2.7	1.1.1.1	0x75c0	Standard query (0)	smtp.lumenhouse.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.771298885 CEST	192.168.2.7	1.1.1.1	0x90f8	Standard query (0)	smtp.centrum.sk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.772181034 CEST	192.168.2.7	1.1.1.1	0x8d11	Standard query (0)	smtp.frontier.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.772310972 CEST	192.168.2.7	1.1.1.1	0x7d9c	Standard query (0)	tele2.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.851989985 CEST	192.168.2.7	1.1.1.1	0x53cd	Standard query (0)	out.web.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.852628946 CEST	192.168.2.7	1.1.1.1	0x6614	Standard query (0)	mail.saeys.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.967822075 CEST	192.168.2.7	1.1.1.1	0x7f1a	Standard query (0)	candidatarosana.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.967894077 CEST	192.168.2.7	1.1.1.1	0x9296	Standard query (0)	mail.bresnan.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.968095064 CEST	192.168.2.7	1.1.1.1	0x242e	Standard query (0)	alt4.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.212155104 CEST	192.168.2.7	1.1.1.1	0xff51	Standard query (0)	smtp.agaron.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.212471008 CEST	192.168.2.7	1.1.1.1	0x54af	Standard query (0)	smtp.marinehealthfoods.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.338085890 CEST	192.168.2.7	1.1.1.1	0x2b27	Standard query (0)	ASPMX.L.GOOGLE.COM	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.338355064 CEST	192.168.2.7	1.1.1.1	0x63d	Standard query (0)	thebasewarehouse.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.338573933 CEST	192.168.2.7	1.1.1.1	0x69f6	Standard query (0)	optusnet.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.338865995 CEST	192.168.2.7	1.1.1.1	0xa8e8	Standard query (0)	secure.dayone.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.458823919 CEST	192.168.2.7	1.1.1.1	0xcad5	Standard query (0)	mail.supersul.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.464266062 CEST	192.168.2.7	1.1.1.1	0x120	Standard query (0)	smtp.rtschmidt.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.464821100 CEST	192.168.2.7	1.1.1.1	0x9592	Standard query (0)	blackrhinomktg.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.464888096 CEST	192.168.2.7	1.1.1.1	0xb706	Standard query (0)	secure.vivointernetdiscada.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.584561110 CEST	192.168.2.7	1.1.1.1	0x52fb	Standard query (0)	out.caledonian.ac.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.703448057 CEST	192.168.2.7	1.1.1.1	0x3886	Standard query (0)	mx01.hornetsecurity.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.703830957 CEST	192.168.2.7	1.1.1.1	0x7590	Standard query (0)	mail.matehuala.tecnm.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.755652905 CEST	192.168.2.7	1.1.1.1	0x75c0	Standard query (0)	smtp.lumenhouse.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.830466986 CEST	192.168.2.7	1.1.1.1	0xf003	Standard query (0)	ajioka-const.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.830485106 CEST	192.168.2.7	1.1.1.1	0x6dbc	Standard query (0)	securesmtp.novapack.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.830733061 CEST	192.168.2.7	1.1.1.1	0x521c	Standard query (0)	out.harold-marian.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.831082106 CEST	192.168.2.7	1.1.1.1	0x4cd9	Standard query (0)	mail.kife.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.949161053 CEST	192.168.2.7	1.1.1.1	0xd6f3	Standard query (0)	smtp.engmaterialslab.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.078341007 CEST	192.168.2.7	1.1.1.1	0x8354	Standard query (0)	out.naseems.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.201956034 CEST	192.168.2.7	1.1.1.1	0xe826	Standard query (0)	securesmtp.microwebnet.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.202297926 CEST	192.168.2.7	1.1.1.1	0x418e	Standard query (0)	smtp.oscola.kl2.fl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.202311993 CEST	192.168.2.7	1.1.1.1	0xfcdd	Standard query (0)	secure.poliziadistoto.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.202578068 CEST	192.168.2.7	1.1.1.1	0x9d	Standard query (0)	incoming1.cnam.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.324609995 CEST	192.168.2.7	1.1.1.1	0x2c1d	Standard query (0)	earthlink.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.325004101 CEST	192.168.2.7	1.1.1.1	0x29ba	Standard query (0)	mail.atrgroup.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.325004101 CEST	192.168.2.7	1.1.1.1	0x4327	Standard query (0)	hospitaleldovio.gov.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.444068909 CEST	192.168.2.7	1.1.1.1	0xdc0a	Standard query (0)	out.magiclife-es.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.444068909 CEST	192.168.2.7	1.1.1.1	0x8305	Standard query (0)	secure.bpviz0xvp4.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.575969934 CEST	192.168.2.7	1.1.1.1	0x60f1	Standard query (0)	mail.versioncraft.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.576318979 CEST	192.168.2.7	1.1.1.1	0x9233	Standard query (0)	iconepc.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.689466000 CEST	192.168.2.7	1.1.1.1	0x847e	Standard query (0)	mail.tecnopoloti.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.689737082 CEST	192.168.2.7	1.1.1.1	0xf4a0	Standard query (0)	securesmtp.poly-vac.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.689881086 CEST	192.168.2.7	1.1.1.1	0x3975	Standard query (0)	linshiyouxiang.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.822026014 CEST	192.168.2.7	1.1.1.1	0x206b	Standard query (0)	mail.espi.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.822344065 CEST	192.168.2.7	1.1.1.1	0x450d	Standard query (0)	email.tst	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.956862926 CEST	192.168.2.7	1.1.1.1	0x6279	Standard query (0)	smtp.eikon.ind.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.078713894 CEST	192.168.2.7	1.1.1.1	0x9a88	Standard query (0)	tiscali.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.193437099 CEST	192.168.2.7	1.1.1.1	0xe826	Standard query (0)	securesmtp.microwebnet.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.210247040 CEST	192.168.2.7	1.1.1.1	0x317e	Standard query (0)	1337.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.210736036 CEST	192.168.2.7	1.1.1.1	0x726b	Standard query (0)	mail.andima2.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.364115953 CEST	192.168.2.7	1.1.1.1	0x31ad	Standard query (0)	fd.ssa.hessen.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.365362883 CEST	192.168.2.7	1.1.1.1	0xe112	Standard query (0)	smtp.tpg.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.365530968 CEST	192.168.2.7	1.1.1.1	0xeb06	Standard query (0)	smtp.city.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.365694046 CEST	192.168.2.7	1.1.1.1	0x4268	Standard query (0)	mx.gfgfgf.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.511476040 CEST	192.168.2.7	1.1.1.1	0x4241	Standard query (0)	securesmtp.speters.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.511843920 CEST	192.168.2.7	1.1.1.1	0x8e07	Standard query (0)	secure.carmelacarnes.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.669224024 CEST	192.168.2.7	1.1.1.1	0xd1bc	Standard query (0)	out.vilamatilde.dom.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.787240982 CEST	192.168.2.7	1.1.1.1	0xea25	Standard query (0)	kellam.us.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.787404060 CEST	192.168.2.7	1.1.1.1	0x1768	Standard query (0)	out.pop.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.913518906 CEST	192.168.2.7	1.1.1.1	0xd2b7	Standard query (0)	secure.eoopy.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.913784027 CEST	192.168.2.7	1.1.1.1	0x160f	Standard query (0)	secure.tabarcaperitaciones.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.949963093 CEST	192.168.2.7	1.1.1.1	0x6279	Standard query (0)	smtp.eikon.ind.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.040653944 CEST	192.168.2.7	1.1.1.1	0xe227	Standard query (0)	mail.ominet.net.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.164490938 CEST	192.168.2.7	1.1.1.1	0x752b	Standard query (0)	out.rapid-mails.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.164753914 CEST	192.168.2.7	1.1.1.1	0x88a2	Standard query (0)	smtp.uma.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.165014029 CEST	192.168.2.7	1.1.1.1	0x5100	Standard query (0)	smtp.c3presents.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.193605900 CEST	192.168.2.7	1.1.1.1	0xe826	Standard query (0)	securesmtp.microwebnet.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.312444925 CEST	192.168.2.7	1.1.1.1	0xe146	Standard query (0)	securesmtp.travel-associates.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.412417889 CEST	192.168.2.7	1.1.1.1	0x44f4	Standard query (0)	smtp.secureserver.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.412678003 CEST	192.168.2.7	1.1.1.1	0x996a	Standard query (0)	smtp.barbacena.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.412892103 CEST	192.168.2.7	1.1.1.1	0x2f62	Standard query (0)	smtp.poli.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.538052082 CEST	192.168.2.7	1.1.1.1	0x84b2	Standard query (0)	aspmx4.googlemail.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.538199902 CEST	192.168.2.7	1.1.1.1	0x6f2f	Standard query (0)	nyakko.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.658267021 CEST	192.168.2.7	1.1.1.1	0x31d4	Standard query (0)	lycos.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.658857107 CEST	192.168.2.7	1.1.1.1	0xb79f	Standard query (0)	out.steas.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.782744884 CEST	192.168.2.7	1.1.1.1	0x2bd6	Standard query (0)	smtp.vestbykommune.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.903692007 CEST	192.168.2.7	1.1.1.1	0x3cbf	Standard query (0)	mail.tsacargo.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.903943062 CEST	192.168.2.7	1.1.1.1	0xea30	Standard query (0)	smtp.asd5.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.144671917 CEST	192.168.2.7	1.1.1.1	0xd73c	Standard query (0)	elahost.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.276338100 CEST	192.168.2.7	1.1.1.1	0x89c6	Standard query (0)	cluster9.us.messagelabs.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.276715040 CEST	192.168.2.7	1.1.1.1	0x68b4	Standard query (0)	mx37.mb5p.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.399097919 CEST	192.168.2.7	1.1.1.1	0xa97c	Standard query (0)	njit-hu.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.399328947 CEST	192.168.2.7	1.1.1.1	0x86f0	Standard query (0)	out.thalmuehle.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.522299051 CEST	192.168.2.7	1.1.1.1	0x234f	Standard query (0)	smtp.lomasystems.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.651351929 CEST	192.168.2.7	1.1.1.1	0x55b9	Standard query (0)	out.nixonnyc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.651633024 CEST	192.168.2.7	1.1.1.1	0xc149	Standard query (0)	secure.credishop.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.651873112 CEST	192.168.2.7	1.1.1.1	0x21d1	Standard query (0)	out.nuvodental.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.651948929 CEST	192.168.2.7	1.1.1.1	0xc6d3	Standard query (0)	secure.departmentofforeigneducationaffairs.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.652124882 CEST	192.168.2.7	1.1.1.1	0xd573	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.892828941 CEST	192.168.2.7	1.1.1.1	0x347b	Standard query (0)	mail.register.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.893130064 CEST	192.168.2.7	1.1.1.1	0xe0ea	Standard query (0)	itelefonica.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.016526937 CEST	192.168.2.7	1.1.1.1	0x3cf6	Standard query (0)	out.isdial.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.137598038 CEST	192.168.2.7	1.1.1.1	0xdd1a	Standard query (0)	mail.tncolombia.com.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.137861967 CEST	192.168.2.7	1.1.1.1	0x4d7b	Standard query (0)	securesmtp.longaecugini.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.138159990 CEST	192.168.2.7	1.1.1.1	0x80e7	Standard query (0)	out.thecedarsacademy.org.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.465725899 CEST	192.168.2.7	1.1.1.1	0xf2d8	Standard query (0)	securesmtp.kp.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.465878010 CEST	192.168.2.7	1.1.1.1	0x6236	Standard query (0)	mail.o2rise.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.542157888 CEST	192.168.2.7	1.1.1.1	0xe266	Standard query (0)	out.webmanagers.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.659488916 CEST	192.168.2.7	1.1.1.1	0xba4c	Standard query (0)	secure.ipoint2.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.659545898 CEST	192.168.2.7	1.1.1.1	0x7b8b	Standard query (0)	secure.ufpa.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.776489973 CEST	192.168.2.7	1.1.1.1	0xba1b	Standard query (0)	hot.pop	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.902409077 CEST	192.168.2.7	1.1.1.1	0x2d8b	Standard query (0)	mail01.rgk4it.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.902779102 CEST	192.168.2.7	1.1.1.1	0x5737	Standard query (0)	cmbnetworks.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.146979094 CEST	192.168.2.7	1.1.1.1	0x6205	Standard query (0)	smtp.modaverao.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.147320032 CEST	192.168.2.7	1.1.1.1	0x7e17	Standard query (0)	smtp.kalpa.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.269809961 CEST	192.168.2.7	1.1.1.1	0xe7da	Standard query (0)	viha.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.451493025 CEST	192.168.2.7	1.1.1.1	0x6ecb	Standard query (0)	secure.atrgroup.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.451797962 CEST	192.168.2.7	1.1.1.1	0x3bd8	Standard query (0)	mail.webaas.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.514281034 CEST	192.168.2.7	1.1.1.1	0x69a7	Standard query (0)	abv.bg	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.514528036 CEST	192.168.2.7	1.1.1.1	0xdd1f	Standard query (0)	mail.schulen-re.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.514580011 CEST	192.168.2.7	1.1.1.1	0xb378	Standard query (0)	fultonind.kyschools.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.634840012 CEST	192.168.2.7	1.1.1.1	0xe23	Standard query (0)	securesmtp.jeanettelund.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.635548115 CEST	192.168.2.7	1.1.1.1	0x525	Standard query (0)	poczta.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.635806084 CEST	192.168.2.7	1.1.1.1	0x8378	Standard query (0)	d.firstmail.website	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.636042118 CEST	192.168.2.7	1.1.1.1	0x8b	Standard query (0)	mail.ittatours.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.767694950 CEST	192.168.2.7	1.1.1.1	0x1cb4	Standard query (0)	securesmtp.equpointproperty.co.tz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.768109083 CEST	192.168.2.7	1.1.1.1	0x754	Standard query (0)	out.offthetrucks.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.768330097 CEST	192.168.2.7	1.1.1.1	0xda28	Standard query (0)	geelongprintworks.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.768548012 CEST	192.168.2.7	1.1.1.1	0xb0e8	Standard query (0)	farwestconsulting.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.768748045 CEST	192.168.2.7	1.1.1.1	0xb773	Standard query (0)	out.beybi.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.886265993 CEST	192.168.2.7	1.1.1.1	0x50df	Standard query (0)	mpchambers.net.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.886528969 CEST	192.168.2.7	1.1.1.1	0xac32	Standard query (0)	mail.dreamzultimate.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.887072086 CEST	192.168.2.7	1.1.1.1	0x909f	Standard query (0)	secure.ring-of-light.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.887285948 CEST	192.168.2.7	1.1.1.1	0xd94b	Standard query (0)	secure.cesgengenharia.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.011097908 CEST	192.168.2.7	1.1.1.1	0xda3d	Standard query (0)	out.cartercarter.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.128824949 CEST	192.168.2.7	1.1.1.1	0x1f32	Standard query (0)	secure.telrad.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.129152060 CEST	192.168.2.7	1.1.1.1	0x7970	Standard query (0)	smtp.metalix.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.129244089 CEST	192.168.2.7	1.1.1.1	0x9a1f	Standard query (0)	out.nilopolis.rj.gov.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.256896973 CEST	192.168.2.7	1.1.1.1	0xcde3	Standard query (0)	mx2.zoho.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.257139921 CEST	192.168.2.7	1.1.1.1	0xa608	Standard query (0)	out.idac.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.494385004 CEST	192.168.2.7	1.1.1.1	0x60f2	Standard query (0)	mail.interfree.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.494780064 CEST	192.168.2.7	1.1.1.1	0x5096	Standard query (0)	smtp.sunpackaging.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.615576982 CEST	192.168.2.7	1.1.1.1	0x5f0a	Standard query (0)	ibestvip.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.615865946 CEST	192.168.2.7	1.1.1.1	0x93a3	Standard query (0)	greensrealty-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.734709024 CEST	192.168.2.7	1.1.1.1	0x6871	Standard query (0)	indiatimes.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.734782934 CEST	192.168.2.7	1.1.1.1	0xee08	Standard query (0)	orbicularisoculi.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.870394945 CEST	192.168.2.7	1.1.1.1	0x8bf9	Standard query (0)	mail.greenfinch.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.870582104 CEST	192.168.2.7	1.1.1.1	0x8a76	Standard query (0)	secure.gofriday.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.988013983 CEST	192.168.2.7	1.1.1.1	0xd678	Standard query (0)	ewetel.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.110275030 CEST	192.168.2.7	1.1.1.1	0x96fa	Standard query (0)	secure.langeweile-hh.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.110586882 CEST	192.168.2.7	1.1.1.1	0x7f5a	Standard query (0)	student.genius.sch.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.110829115 CEST	192.168.2.7	1.1.1.1	0x7ee0	Standard query (0)	securesmtp.busschaertparket.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.115475893 CEST	192.168.2.7	1.1.1.1	0x7970	Standard query (0)	smtp.metalix.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.258997917 CEST	192.168.2.7	1.1.1.1	0x4563	Standard query (0)	mail.chaos4x4.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.259263039 CEST	192.168.2.7	1.1.1.1	0xfe1c	Standard query (0)	mail.evalink.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.259496927 CEST	192.168.2.7	1.1.1.1	0xf370	Standard query (0)	allanmc.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.369209051 CEST	192.168.2.7	1.1.1.1	0x660c	Standard query (0)	smtp.teenawilliams.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.369349957 CEST	192.168.2.7	1.1.1.1	0x47e	Standard query (0)	smtp.deborah-campbell.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.618535995 CEST	192.168.2.7	1.1.1.1	0xcc5d	Standard query (0)	hiddenvillage.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.619021893 CEST	192.168.2.7	1.1.1.1	0x33e5	Standard query (0)	out.grupoats.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.769134045 CEST	192.168.2.7	1.1.1.1	0xee08	Standard query (0)	orbicularisoculi.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.769701004 CEST	192.168.2.7	1.1.1.1	0xa9df	Standard query (0)	smtp.indamail.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.863316059 CEST	192.168.2.7	1.1.1.1	0xfc3f	Standard query (0)	smallborn.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.863643885 CEST	192.168.2.7	1.1.1.1	0xdf53	Standard query (0)	globezenit.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.863949060 CEST	192.168.2.7	1.1.1.1	0x7246	Standard query (0)	securesmtp.tallero.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.864152908 CEST	192.168.2.7	1.1.1.1	0x5031	Standard query (0)	eljones.plus.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.981251001 CEST	192.168.2.7	1.1.1.1	0x1fbf	Standard query (0)	smtp.techness.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.981499910 CEST	192.168.2.7	1.1.1.1	0x79a	Standard query (0)	securesmtp.ashayogabali.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.100785971 CEST	192.168.2.7	1.1.1.1	0xaefc	Standard query (0)	mail.drrd.gov.mm	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.101022005 CEST	192.168.2.7	1.1.1.1	0x2936	Standard query (0)	securesmtp.copperfio.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.230149031 CEST	192.168.2.7	1.1.1.1	0x81b9	Standard query (0)	mx01.mail-redirect.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.230504990 CEST	192.168.2.7	1.1.1.1	0x80d2	Standard query (0)	mail.jlchacha.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.230758905 CEST	192.168.2.7	1.1.1.1	0xd0a	Standard query (0)	securesmtp.eturecup.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.364331961 CEST	192.168.2.7	1.1.1.1	0x8588	Standard query (0)	smtp.dmobile-etc.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.365720034 CEST	192.168.2.7	1.1.1.1	0x4f65	Standard query (0)	securesmtp.vivelacinq.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.365861893 CEST	192.168.2.7	1.1.1.1	0xc33b	Standard query (0)	securesmtp.avanteam.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.366136074 CEST	192.168.2.7	1.1.1.1	0xd3ce	Standard query (0)	soleforma.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.649369955 CEST	192.168.2.7	1.1.1.1	0x730b	Standard query (0)	mail.wecand.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.649630070 CEST	192.168.2.7	1.1.1.1	0x4fff	Standard query (0)	secure.iesmariabellido.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.649981022 CEST	192.168.2.7	1.1.1.1	0x1fa	Standard query (0)	securesmtp.response-team.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.650219917 CEST	192.168.2.7	1.1.1.1	0xf509	Standard query (0)	smtp.knightstone.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.774878979 CEST	192.168.2.7	1.1.1.1	0xb25c	Standard query (0)	mail.diyanetvakfi.org.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.775163889 CEST	192.168.2.7	1.1.1.1	0xf913	Standard query (0)	smtp.mx5.ttcn.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.775410891 CEST	192.168.2.7	1.1.1.1	0xd0c8	Standard query (0)	araf.pk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.775650024 CEST	192.168.2.7	1.1.1.1	0xaf8c	Standard query (0)	smtp.freeler.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.775749922 CEST	192.168.2.7	1.1.1.1	0x505d	Standard query (0)	mail.gollygumdrops.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.892046928 CEST	192.168.2.7	1.1.1.1	0x8298	Standard query (0)	out.insean.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.892395973 CEST	192.168.2.7	1.1.1.1	0xa0cf	Standard query (0)	targetpublicidade.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.137414932 CEST	192.168.2.7	1.1.1.1	0x9167	Standard query (0)	out.epieletroeletronicos.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.256429911 CEST	192.168.2.7	1.1.1.1	0x6b7c	Standard query (0)	out.rexsales.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.256726027 CEST	192.168.2.7	1.1.1.1	0x6747	Standard query (0)	mail.mingeo.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.256998062 CEST	192.168.2.7	1.1.1.1	0x8c42	Standard query (0)	securesmtp.course-shelton.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.374039888 CEST	192.168.2.7	1.1.1.1	0x3f1a	Standard query (0)	securesmtp.paulhurley.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.492755890 CEST	192.168.2.7	1.1.1.1	0xc0f9	Standard query (0)	spam.kog.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.492974043 CEST	192.168.2.7	1.1.1.1	0xcf2d	Standard query (0)	smtp.etu.univ-lorraine.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.616470098 CEST	192.168.2.7	1.1.1.1	0x97fd	Standard query (0)	mx-vip-02.kinghost.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.616749048 CEST	192.168.2.7	1.1.1.1	0xb631	Standard query (0)	neostrada.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.617057085 CEST	192.168.2.7	1.1.1.1	0x6ef6	Standard query (0)	smtp.novagranja.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.739020109 CEST	192.168.2.7	1.1.1.1	0xeee5	Standard query (0)	secure.gauss00.math2.nat.tu-bs.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.739310980 CEST	192.168.2.7	1.1.1.1	0x64de	Standard query (0)	bradlo.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.740233898 CEST	192.168.2.7	1.1.1.1	0x5730	Standard query (0)	pep4teens.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.740561008 CEST	192.168.2.7	1.1.1.1	0x58d5	Standard query (0)	secure.adrianheuer.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.862493038 CEST	192.168.2.7	1.1.1.1	0x811c	Standard query (0)	securesmtp.dalyatur.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.862993956 CEST	192.168.2.7	1.1.1.1	0xe0bc	Standard query (0)	mail.toyota.com.my	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.863205910 CEST	192.168.2.7	1.1.1.1	0x45c9	Standard query (0)	ptwilad.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.986644983 CEST	192.168.2.7	1.1.1.1	0x58f7	Standard query (0)	smtp.iprocess.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.986865044 CEST	192.168.2.7	1.1.1.1	0x5b6c	Standard query (0)	securesmtp.michellelowe.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.231848955 CEST	192.168.2.7	1.1.1.1	0x52cd	Standard query (0)	mail.chimaeracapital.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.231882095 CEST	192.168.2.7	1.1.1.1	0xbfda	Standard query (0)	out.vctormelo.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.356200933 CEST	192.168.2.7	1.1.1.1	0x7e12	Standard query (0)	sy-pinocchio.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.356509924 CEST	192.168.2.7	1.1.1.1	0x6be1	Standard query (0)	mail.abbak.karoo.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.478182077 CEST	192.168.2.7	1.1.1.1	0x60ce	Standard query (0)	smtp.mimoma.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.595963001 CEST	192.168.2.7	1.1.1.1	0x4fa3	Standard query (0)	vangeertruyen.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.596151114 CEST	192.168.2.7	1.1.1.1	0x1495	Standard query (0)	mail.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.596291065 CEST	192.168.2.7	1.1.1.1	0xadcb	Standard query (0)	mail.gmbol.cem	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.615096092 CEST	192.168.2.7	1.1.1.1	0x6ef6	Standard query (0)	smtp.novagranja.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.722676992 CEST	192.168.2.7	1.1.1.1	0x6b3e	Standard query (0)	mail.casadometal.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.852653980 CEST	192.168.2.7	1.1.1.1	0x3166	Standard query (0)	silverkolt.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.853494883 CEST	192.168.2.7	1.1.1.1	0x57a6	Standard query (0)	securesmtp.freee.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.975080967 CEST	192.168.2.7	1.1.1.1	0xa9cd	Standard query (0)	out.linuxonly4u.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.978123903 CEST	192.168.2.7	1.1.1.1	0x7df3	Standard query (0)	zalliedimpex.com.pk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.098685026 CEST	192.168.2.7	1.1.1.1	0x992c	Standard query (0)	smtp.ruraltel.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.099905968 CEST	192.168.2.7	1.1.1.1	0x65fb	Standard query (0)	jlrsound-com-au.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.222470045 CEST	192.168.2.7	1.1.1.1	0xb32a	Standard query (0)	smtp.configsite.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.222733974 CEST	192.168.2.7	1.1.1.1	0x6e87	Standard query (0)	mail.entrepreneurthemovie.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.222800970 CEST	192.168.2.7	1.1.1.1	0x9b4d	Standard query (0)	smtp.montevideo.com.uy	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.339898109 CEST	192.168.2.7	1.1.1.1	0xa43a	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.340080976 CEST	192.168.2.7	1.1.1.1	0x2e2a	Standard query (0)	secure.mecpreci.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.340392113 CEST	192.168.2.7	1.1.1.1	0xcc42	Standard query (0)	secure.arecadesign.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.340416908 CEST	192.168.2.7	1.1.1.1	0x9f38	Standard query (0)	smtp.americanprecisionmach.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.460468054 CEST	192.168.2.7	1.1.1.1	0xc72f	Standard query (0)	out.smart-core.cn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.460763931 CEST	192.168.2.7	1.1.1.1	0xc950	Standard query (0)	amgen.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.461051941 CEST	192.168.2.7	1.1.1.1	0x2c87	Standard query (0)	mail.optac.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.461316109 CEST	192.168.2.7	1.1.1.1	0xcf1	Standard query (0)	mx.comune.caltagirone.ct.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.461316109 CEST	192.168.2.7	1.1.1.1	0x422a	Standard query (0)	smtp.sheepwingkocorozashi.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.590583086 CEST	192.168.2.7	1.1.1.1	0xbf7c	Standard query (0)	smtp.radiokurzschluss.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.830461025 CEST	192.168.2.7	1.1.1.1	0xa614	Standard query (0)	securesmtp.imprint.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.831203938 CEST	192.168.2.7	1.1.1.1	0x9d17	Standard query (0)	secure.simplesbandalarga.page	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.831376076 CEST	192.168.2.7	1.1.1.1	0x4c5f	Standard query (0)	secure.kysportsmarketing.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.956430912 CEST	192.168.2.7	1.1.1.1	0xbafa	Standard query (0)	sercomtel.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.070815086 CEST	192.168.2.7	1.1.1.1	0x1666	Standard query (0)	out.smpn17bdg.sch.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.071063995 CEST	192.168.2.7	1.1.1.1	0xf525	Standard query (0)	smtp.porto.adv.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.206793070 CEST	192.168.2.7	1.1.1.1	0x5284	Standard query (0)	smtp.haggerston.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.207084894 CEST	192.168.2.7	1.1.1.1	0xddbd	Standard query (0)	smtp.corretorlopes.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.215857983 CEST	192.168.2.7	1.1.1.1	0x3387	Standard query (0)	pdd.edmi.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.216141939 CEST	192.168.2.7	1.1.1.1	0xf68e	Standard query (0)	mail.alwjergroup.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.216392040 CEST	192.168.2.7	1.1.1.1	0x106c	Standard query (0)	out.mbipools.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.316063881 CEST	192.168.2.7	1.1.1.1	0x6cdc	Standard query (0)	sse.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.316104889 CEST	192.168.2.7	1.1.1.1	0x6d63	Standard query (0)	out.pop.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.449501991 CEST	192.168.2.7	1.1.1.1	0x83d7	Standard query (0)	secure.walshfence.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.449774027 CEST	192.168.2.7	1.1.1.1	0x20d6	Standard query (0)	smtp.hawaiiantel.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.450038910 CEST	192.168.2.7	1.1.1.1	0x9eaf	Standard query (0)	cecemp.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.450077057 CEST	192.168.2.7	1.1.1.1	0x95d	Standard query (0)	smtp.konto.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.576642036 CEST	192.168.2.7	1.1.1.1	0x4471	Standard query (0)	smtp.diginova.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.576951981 CEST	192.168.2.7	1.1.1.1	0x1a2c	Standard query (0)	deped.gov.ph	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.577016115 CEST	192.168.2.7	1.1.1.1	0x2335	Standard query (0)	smtp.education.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.698081970 CEST	192.168.2.7	1.1.1.1	0x9c3d	Standard query (0)	aspexpos.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.698106050 CEST	192.168.2.7	1.1.1.1	0x53ca	Standard query (0)	out.sdfgsd.sdffd	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.698390961 CEST	192.168.2.7	1.1.1.1	0xc92c	Standard query (0)	secure.datisa.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.702083111 CEST	192.168.2.7	1.1.1.1	0x1780	Standard query (0)	smtp.cherrysports.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.821039915 CEST	192.168.2.7	1.1.1.1	0xadaf	Standard query (0)	secure.gladiusfencing.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.821527004 CEST	192.168.2.7	1.1.1.1	0x4660	Standard query (0)	secure.9a869680ce.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.952559948 CEST	192.168.2.7	1.1.1.1	0x4178	Standard query (0)	secure.chartwer.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.068777084 CEST	192.168.2.7	1.1.1.1	0xeb98	Standard query (0)	smtp.creutzenberg.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.068847895 CEST	192.168.2.7	1.1.1.1	0x5c5c	Standard query (0)	mail.h-email.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.069077015 CEST	192.168.2.7	1.1.1.1	0x5649	Standard query (0)	tar-mx.myhost.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.069194078 CEST	192.168.2.7	1.1.1.1	0x94fb	Standard query (0)	secure.marti.com.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.208905935 CEST	192.168.2.7	1.1.1.1	0x3387	Standard query (0)	pdd.edmi.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.437608957 CEST	192.168.2.7	1.1.1.1	0xca64	Standard query (0)	mail.students.arh.ukim.mk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.437913895 CEST	192.168.2.7	1.1.1.1	0x6a74	Standard query (0)	secure.melodypicture.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.438538074 CEST	192.168.2.7	1.1.1.1	0xaca8	Standard query (0)	smtp.tems.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.438695908 CEST	192.168.2.7	1.1.1.1	0x50ba	Standard query (0)	za-smtp-inbound-2.mimecast.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.438993931 CEST	192.168.2.7	1.1.1.1	0x44db	Standard query (0)	securesmtp.nh.freeinet	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.439136982 CEST	192.168.2.7	1.1.1.1	0xce73	Standard query (0)	mail.saintys.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.480535030 CEST	192.168.2.7	1.1.1.1	0xec37	Standard query (0)	astoriasolutions-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.480535030 CEST	192.168.2.7	1.1.1.1	0xbaec	Standard query (0)	mx00.ionos.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.597266912 CEST	192.168.2.7	1.1.1.1	0xf701	Standard query (0)	gilmour.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.597506046 CEST	192.168.2.7	1.1.1.1	0xa7d7	Standard query (0)	securesmtp.wtenweerde.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.597568989 CEST	192.168.2.7	1.1.1.1	0x33c3	Standard query (0)	smtp.alice.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.597820044 CEST	192.168.2.7	1.1.1.1	0x9f05	Standard query (0)	secure.scopemail.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.609935045 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	secure.scopemail.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.843988895 CEST	192.168.2.7	1.1.1.1	0x15fb	Standard query (0)	dinamicaservicomg.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.844579935 CEST	192.168.2.7	1.1.1.1	0x3631	Standard query (0)	mail.huge.id.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.844850063 CEST	192.168.2.7	1.1.1.1	0xb6ba	Standard query (0)	fibertel.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.844850063 CEST	192.168.2.7	1.1.1.1	0xa0d	Standard query (0)	mail.gamesacademy.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.845531940 CEST	192.168.2.7	1.1.1.1	0x5572	Standard query (0)	smtp.octaviomartin.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.845952034 CEST	192.168.2.7	1.1.1.1	0xee3c	Standard query (0)	secure.pioneer-net.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.002001047 CEST	192.168.2.7	1.1.1.1	0x6402	Standard query (0)	mail.rogowindustries.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.002441883 CEST	192.168.2.7	1.1.1.1	0xe8ae	Standard query (0)	ga.sze.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.118194103 CEST	192.168.2.7	1.1.1.1	0xca93	Standard query (0)	secure.disparco.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.118824959 CEST	192.168.2.7	1.1.1.1	0xd49	Standard query (0)	secure.eventelite.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.120002985 CEST	192.168.2.7	1.1.1.1	0x965f	Standard query (0)	securesmtp.arcontemp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.245222092 CEST	192.168.2.7	1.1.1.1	0x77ca	Standard query (0)	interia.eu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.363629103 CEST	192.168.2.7	1.1.1.1	0x2b37	Standard query (0)	mail.herpain.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.364341974 CEST	192.168.2.7	1.1.1.1	0x92a	Standard query (0)	mail.feldkamp.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.530858994 CEST	192.168.2.7	1.1.1.1	0xfdb0	Standard query (0)	out.goophone.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.535003901 CEST	192.168.2.7	1.1.1.1	0x5ae1	Standard query (0)	securesmtp.willand.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.544027090 CEST	192.168.2.7	1.1.1.1	0xe1dc	Standard query (0)	elogica.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.547570944 CEST	192.168.2.7	1.1.1.1	0x577a	Standard query (0)	mail.mctv.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.619183064 CEST	192.168.2.7	1.1.1.1	0x4701	Standard query (0)	mail.isutrecht.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.619715929 CEST	192.168.2.7	1.1.1.1	0x3cd	Standard query (0)	out.foxhiver.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.742688894 CEST	192.168.2.7	1.1.1.1	0xe9ce	Standard query (0)	mail.cmfertilizer.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.858722925 CEST	192.168.2.7	1.1.1.1	0x8864	Standard query (0)	securesmtp.aclion.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.858993053 CEST	192.168.2.7	1.1.1.1	0x9cb7	Standard query (0)	secure.coast.foooq.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.859272957 CEST	192.168.2.7	1.1.1.1	0xd656	Standard query (0)	secure.display.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.981555939 CEST	192.168.2.7	1.1.1.1	0x6aa9	Standard query (0)	mail.d1.dion.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.982083082 CEST	192.168.2.7	1.1.1.1	0x8fa1	Standard query (0)	smtp.semikalisz.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.105011940 CEST	192.168.2.7	1.1.1.1	0x1d4c	Standard query (0)	email.tst	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.105314970 CEST	192.168.2.7	1.1.1.1	0x2a57	Standard query (0)	secure.vardhamancomputers.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.105890989 CEST	192.168.2.7	1.1.1.1	0xeb7c	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.106311083 CEST	192.168.2.7	1.1.1.1	0xbb1	Standard query (0)	secure.andreaskoenig.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.106581926 CEST	192.168.2.7	1.1.1.1	0x1b16	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.229563951 CEST	192.168.2.7	1.1.1.1	0xfbd3	Standard query (0)	securesmtp.dieschaffer.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.230012894 CEST	192.168.2.7	1.1.1.1	0xf2fd	Standard query (0)	secure.sorrentonet.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.347855091 CEST	192.168.2.7	1.1.1.1	0xa139	Standard query (0)	itapema-sc-gov-br.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.348136902 CEST	192.168.2.7	1.1.1.1	0xf930	Standard query (0)	secure.kdbrindes.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.348375082 CEST	192.168.2.7	1.1.1.1	0x32d4	Standard query (0)	smtp.happyprinting.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.468987942 CEST	192.168.2.7	1.1.1.1	0xa161	Standard query (0)	mail.angyy.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.469621897 CEST	192.168.2.7	1.1.1.1	0xde02	Standard query (0)	mail.civiliter.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.469914913 CEST	192.168.2.7	1.1.1.1	0xbf3d	Standard query (0)	mailgate.tugraz.at	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.470165968 CEST	192.168.2.7	1.1.1.1	0x48e9	Standard query (0)	smtp.yildirimlarnakliyat.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.589612007 CEST	192.168.2.7	1.1.1.1	0xd8cc	Standard query (0)	out.theminitiger.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.590053082 CEST	192.168.2.7	1.1.1.1	0x15e6	Standard query (0)	securesmtp.mapsolution.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.709348917 CEST	192.168.2.7	1.1.1.1	0xc25	Standard query (0)	mail.cweng.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.740046024 CEST	192.168.2.7	1.1.1.1	0xe9ce	Standard query (0)	mail.cmfertilizer.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.834208012 CEST	192.168.2.7	1.1.1.1	0x5a04	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.834417105 CEST	192.168.2.7	1.1.1.1	0xa918	Standard query (0)	securesmtp.kaufland.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.834625959 CEST	192.168.2.7	1.1.1.1	0x7f09	Standard query (0)	out.panelel.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.834953070 CEST	192.168.2.7	1.1.1.1	0x75d3	Standard query (0)	itelefonica.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.966870070 CEST	192.168.2.7	1.1.1.1	0xb6bb	Standard query (0)	securesmtp.estudioborasi.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.966870070 CEST	192.168.2.7	1.1.1.1	0x956f	Standard query (0)	securesmtp.line.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.966870070 CEST	192.168.2.7	1.1.1.1	0xc579	Standard query (0)	secure.fairhoperealtygroup.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.084675074 CEST	192.168.2.7	1.1.1.1	0x4c3c	Standard query (0)	d55365a.ess.barracudanetworks.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.084752083 CEST	192.168.2.7	1.1.1.1	0xd7af	Standard query (0)	autograf.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.085064888 CEST	192.168.2.7	1.1.1.1	0x8e8b	Standard query (0)	out.email.mayville.k12.wi.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.085086107 CEST	192.168.2.7	1.1.1.1	0xf96a	Standard query (0)	secure.eighty8fiji.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.204977036 CEST	192.168.2.7	1.1.1.1	0x26e5	Standard query (0)	mail.glow.demon.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.205141068 CEST	192.168.2.7	1.1.1.1	0x26c2	Standard query (0)	cichecka.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.322683096 CEST	192.168.2.7	1.1.1.1	0xff38	Standard query (0)	out.postafiok.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.322814941 CEST	192.168.2.7	1.1.1.1	0xf22a	Standard query (0)	securesmtp.masterahome.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.322997093 CEST	192.168.2.7	1.1.1.1	0xac50	Standard query (0)	smtp.skynet.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.454596996 CEST	192.168.2.7	1.1.1.1	0x2207	Standard query (0)	out.semikron.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.454714060 CEST	192.168.2.7	1.1.1.1	0xbccb	Standard query (0)	out.evcofoods.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.579622984 CEST	192.168.2.7	1.1.1.1	0xc006	Standard query (0)	secure.brsist.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.580038071 CEST	192.168.2.7	1.1.1.1	0x8ed9	Standard query (0)	smtp.bex.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.580202103 CEST	192.168.2.7	1.1.1.1	0x64f6	Standard query (0)	nucleos.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.580523014 CEST	192.168.2.7	1.1.1.1	0x5a62	Standard query (0)	glaube.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.584136009 CEST	192.168.2.7	1.1.1.1	0x15e6	Standard query (0)	securesmtp.mapsolution.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.592645884 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	glaube.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.699122906 CEST	192.168.2.7	1.1.1.1	0x77c0	Standard query (0)	smtp.dream.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.699290037 CEST	192.168.2.7	1.1.1.1	0x11f4	Standard query (0)	secure.reallocadora.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.699398994 CEST	192.168.2.7	1.1.1.1	0x5764	Standard query (0)	securesmtp.avantticomunicacao.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.823977947 CEST	192.168.2.7	1.1.1.1	0x7387	Standard query (0)	secure.jjstoragesystems.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.824249983 CEST	192.168.2.7	1.1.1.1	0xa01d	Standard query (0)	out.brauliolopes.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.824457884 CEST	192.168.2.7	1.1.1.1	0xefc7	Standard query (0)	mail.hdr.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.824657917 CEST	192.168.2.7	1.1.1.1	0x67f	Standard query (0)	advance-auto.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.956250906 CEST	192.168.2.7	1.1.1.1	0x2850	Standard query (0)	eu-smtp-inbound-1.mimecast.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.956820965 CEST	192.168.2.7	1.1.1.1	0x1bc7	Standard query (0)	mx.b.locaweb.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.079267979 CEST	192.168.2.7	1.1.1.1	0x3460	Standard query (0)	3dawg.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.195609093 CEST	192.168.2.7	1.1.1.1	0x705e	Standard query (0)	es-pa.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.195863962 CEST	192.168.2.7	1.1.1.1	0x77e6	Standard query (0)	securesmtp.dpsw.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.324414968 CEST	192.168.2.7	1.1.1.1	0xe900	Standard query (0)	secure.saludbc.gob.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.325176001 CEST	192.168.2.7	1.1.1.1	0xa8c6	Standard query (0)	smtp.brsuper.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.325598955 CEST	192.168.2.7	1.1.1.1	0xb2f7	Standard query (0)	gapps.zcu.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.325788021 CEST	192.168.2.7	1.1.1.1	0x6c9d	Standard query (0)	mail.ac-poitiers.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.442342043 CEST	192.168.2.7	1.1.1.1	0x389b	Standard query (0)	mail.majcherczyk.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.442466021 CEST	192.168.2.7	1.1.1.1	0x9a81	Standard query (0)	mail.agriturismoquercia.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.759458065 CEST	192.168.2.7	1.1.1.1	0xe943	Standard query (0)	smtp.netzero.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.760015011 CEST	192.168.2.7	1.1.1.1	0x87f0	Standard query (0)	mxw.mxhichina.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.760543108 CEST	192.168.2.7	1.1.1.1	0x46c2	Standard query (0)	out.getlife.indi	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.986228943 CEST	192.168.2.7	1.1.1.1	0xc57e	Standard query (0)	smtp.gisspecialisten.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.986530066 CEST	192.168.2.7	1.1.1.1	0xc238	Standard query (0)	mx10.se.isp-net.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.986665964 CEST	192.168.2.7	1.1.1.1	0xe9bc	Standard query (0)	pcftp.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.122649908 CEST	192.168.2.7	1.1.1.1	0xeabc	Standard query (0)	sbcglabal.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.122889042 CEST	192.168.2.7	1.1.1.1	0x5493	Standard query (0)	vlmx20.secure.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.123100996 CEST	192.168.2.7	1.1.1.1	0xc49d	Standard query (0)	smtp.dotbob.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.221743107 CEST	192.168.2.7	1.1.1.1	0x88ea	Standard query (0)	gm.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.222016096 CEST	192.168.2.7	1.1.1.1	0x73f7	Standard query (0)	smtp.shaw.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.222332954 CEST	192.168.2.7	1.1.1.1	0xd375	Standard query (0)	kalsoonizorg.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.351650000 CEST	192.168.2.7	1.1.1.1	0xee3d	Standard query (0)	cip.org.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.468696117 CEST	192.168.2.7	1.1.1.1	0x79a	Standard query (0)	xn--pokmonworld-dbb.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.468980074 CEST	192.168.2.7	1.1.1.1	0x5041	Standard query (0)	smtp.acoulson.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.469356060 CEST	192.168.2.7	1.1.1.1	0xe650	Standard query (0)	prixconstrutora.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.592571020 CEST	192.168.2.7	1.1.1.1	0xe365	Standard query (0)	secure.mearingsmith.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.592864037 CEST	192.168.2.7	1.1.1.1	0xa925	Standard query (0)	sabesp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.592864037 CEST	192.168.2.7	1.1.1.1	0xa84e	Standard query (0)	out.readinessconcepts.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.713409901 CEST	192.168.2.7	1.1.1.1	0x3c1	Standard query (0)	secure.cesgengenharia.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.713560104 CEST	192.168.2.7	1.1.1.1	0x8e7e	Standard query (0)	elecomm-engineer.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.839953899 CEST	192.168.2.7	1.1.1.1	0xbb64	Standard query (0)	mail.kingsofcomedy.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.840033054 CEST	192.168.2.7	1.1.1.1	0x3cdf	Standard query (0)	kaltenkirchen.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.961354971 CEST	192.168.2.7	1.1.1.1	0x823c	Standard query (0)	securesmtp.bfr.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.961355925 CEST	192.168.2.7	1.1.1.1	0xc608	Standard query (0)	securesmtp.arthurfrancia.ammuca.eu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.974560022 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	securesmtp.bfr.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.079869986 CEST	192.168.2.7	1.1.1.1	0x54f2	Standard query (0)	smtp.tele2.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.079965115 CEST	192.168.2.7	1.1.1.1	0x4385	Standard query (0)	proxy7.greco.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.204308987 CEST	192.168.2.7	1.1.1.1	0x5ad4	Standard query (0)	mx156.hostedmxserver.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.204602957 CEST	192.168.2.7	1.1.1.1	0x20e3	Standard query (0)	out.ldias.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.204786062 CEST	192.168.2.7	1.1.1.1	0x69b	Standard query (0)	smtpin.rzone.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.205077887 CEST	192.168.2.7	1.1.1.1	0x8cbf	Standard query (0)	sky.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.216114998 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	mx156.hostedmxserver.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.323550940 CEST	192.168.2.7	1.1.1.1	0x7318	Standard query (0)	unb-br.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.323606014 CEST	192.168.2.7	1.1.1.1	0xf5e9	Standard query (0)	secure.jrf.org.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.477643967 CEST	192.168.2.7	1.1.1.1	0x28af	Standard query (0)	mx3.fuse.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.478288889 CEST	192.168.2.7	1.1.1.1	0xfc85	Standard query (0)	goldcrestchemicals.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.479753017 CEST	192.168.2.7	1.1.1.1	0xb200	Standard query (0)	smtp.tekun.co.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.632056952 CEST	192.168.2.7	1.1.1.1	0xccd9	Standard query (0)	smtp.inwind.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.870029926 CEST	192.168.2.7	1.1.1.1	0x93e0	Standard query (0)	smtp.email.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.870301008 CEST	192.168.2.7	1.1.1.1	0xd702	Standard query (0)	out.5f798dfe5f.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.992794991 CEST	192.168.2.7	1.1.1.1	0xa6f0	Standard query (0)	smtp.infinito.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.992923021 CEST	192.168.2.7	1.1.1.1	0xff74	Standard query (0)	adlers.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.993288994 CEST	192.168.2.7	1.1.1.1	0x1714	Standard query (0)	smtp.unil.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.118693113 CEST	192.168.2.7	1.1.1.1	0x69c4	Standard query (0)	smtp.peak.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.118757963 CEST	192.168.2.7	1.1.1.1	0xcc5c	Standard query (0)	out.tu.ac.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.235076904 CEST	192.168.2.7	1.1.1.1	0xa203	Standard query (0)	securesmtp.baovetaybinh.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.235449076 CEST	192.168.2.7	1.1.1.1	0xd9f	Standard query (0)	mx.jk.locaweb.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.357106924 CEST	192.168.2.7	1.1.1.1	0xce73	Standard query (0)	ammann.whitney.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.357517004 CEST	192.168.2.7	1.1.1.1	0x13b	Standard query (0)	secure.mdfurnace.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.357909918 CEST	192.168.2.7	1.1.1.1	0xee3b	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.480745077 CEST	192.168.2.7	1.1.1.1	0x8f99	Standard query (0)	out.atlashomewares.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.481523037 CEST	192.168.2.7	1.1.1.1	0xe1ba	Standard query (0)	secure.sepiaconsultants.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.482016087 CEST	192.168.2.7	1.1.1.1	0x5e43	Standard query (0)	mx2.de.opalstack.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.482342005 CEST	192.168.2.7	1.1.1.1	0x759	Standard query (0)	viha.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.605873108 CEST	192.168.2.7	1.1.1.1	0x7046	Standard query (0)	securesmtp.6fvbvb.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.606843948 CEST	192.168.2.7	1.1.1.1	0x8105	Standard query (0)	out.liderancacobrancas.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.607111931 CEST	192.168.2.7	1.1.1.1	0xb2a4	Standard query (0)	sp-wolastarogrodzka.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.723678112 CEST	192.168.2.7	1.1.1.1	0x1c58	Standard query (0)	smtp.cogeco.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.724737883 CEST	192.168.2.7	1.1.1.1	0x466d	Standard query (0)	smtp.westnet.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.844970942 CEST	192.168.2.7	1.1.1.1	0x7553	Standard query (0)	secure.sea-radio.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.845242023 CEST	192.168.2.7	1.1.1.1	0x8dda	Standard query (0)	smtp.getmail.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.845808983 CEST	192.168.2.7	1.1.1.1	0x9ccf	Standard query (0)	securesmtp.albap.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.975189924 CEST	192.168.2.7	1.1.1.1	0x8bdb	Standard query (0)	qdteopw5mf.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.975189924 CEST	192.168.2.7	1.1.1.1	0x9679	Standard query (0)	securesmtp.jeanneyoung.biz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.975507975 CEST	192.168.2.7	1.1.1.1	0x29aa	Standard query (0)	securesmtp.gnsmail.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.975889921 CEST	192.168.2.7	1.1.1.1	0x4450	Standard query (0)	riyadh.gov.sa	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.976144075 CEST	192.168.2.7	1.1.1.1	0x8220	Standard query (0)	secure.estudante.sed.sc.gov.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.097935915 CEST	192.168.2.7	1.1.1.1	0x9319	Standard query (0)	smtp.foodpage.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.098198891 CEST	192.168.2.7	1.1.1.1	0x69d5	Standard query (0)	smtp.kaeler.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.098366022 CEST	192.168.2.7	1.1.1.1	0xf80e	Standard query (0)	mail.nexgo.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.098525047 CEST	192.168.2.7	1.1.1.1	0x78c4	Standard query (0)	secure.columbusacademy.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.350023031 CEST	192.168.2.7	1.1.1.1	0x44cf	Standard query (0)	secure.yjudovlkxard.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.350116968 CEST	192.168.2.7	1.1.1.1	0x713b	Standard query (0)	techimpex.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.350369930 CEST	192.168.2.7	1.1.1.1	0xd559	Standard query (0)	smtp.slinetransport.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.350697041 CEST	192.168.2.7	1.1.1.1	0xb112	Standard query (0)	secure.matimco.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.350821018 CEST	192.168.2.7	1.1.1.1	0x62a	Standard query (0)	kbstest.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.469947100 CEST	192.168.2.7	1.1.1.1	0x50c6	Standard query (0)	smtp.jphimelick.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.470587015 CEST	192.168.2.7	1.1.1.1	0xc15f	Standard query (0)	securesmtp.angani.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.470778942 CEST	192.168.2.7	1.1.1.1	0xd59d	Standard query (0)	smtp.gifford.uk.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.596568108 CEST	192.168.2.7	1.1.1.1	0xadc3	Standard query (0)	sion.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.716600895 CEST	192.168.2.7	1.1.1.1	0x8e67	Standard query (0)	secure.clad.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.716665030 CEST	192.168.2.7	1.1.1.1	0x9a	Standard query (0)	smtp.leiaute.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.716840029 CEST	192.168.2.7	1.1.1.1	0x2d09	Standard query (0)	mail.anagataitsolutions.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.716989994 CEST	192.168.2.7	1.1.1.1	0xbb4b	Standard query (0)	out.constructel.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.265197992 CEST	192.168.2.7	1.1.1.1	0xcd6b	Standard query (0)	bimantara.co.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.265752077 CEST	192.168.2.7	1.1.1.1	0xf5a9	Standard query (0)	gardnerfamily.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.266704082 CEST	192.168.2.7	1.1.1.1	0x5319	Standard query (0)	mail.emeraldfalls.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.267303944 CEST	192.168.2.7	1.1.1.1	0x5ea5	Standard query (0)	mail.5ssolucoes.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.267450094 CEST	192.168.2.7	1.1.1.1	0x3e29	Standard query (0)	smtp.rolimconsult.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.267575026 CEST	192.168.2.7	1.1.1.1	0x50e0	Standard query (0)	smtp.boginmunns.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.267714977 CEST	192.168.2.7	1.1.1.1	0x20a9	Standard query (0)	goltz.pc-point.info	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.349514008 CEST	192.168.2.7	1.1.1.1	0x713b	Standard query (0)	techimpex.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.349535942 CEST	192.168.2.7	1.1.1.1	0x62a	Standard query (0)	kbstest.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.367479086 CEST	192.168.2.7	1.1.1.1	0x46d9	Standard query (0)	jr77.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.367739916 CEST	192.168.2.7	1.1.1.1	0x8751	Standard query (0)	securesmtp.sebr.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.368010044 CEST	192.168.2.7	1.1.1.1	0x7590	Standard query (0)	smtp.zwoho.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.368267059 CEST	192.168.2.7	1.1.1.1	0xb781	Standard query (0)	smtp.me.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.504877090 CEST	192.168.2.7	1.1.1.1	0xa923	Standard query (0)	securesmtp.chiranjeevminerals.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.507344007 CEST	192.168.2.7	1.1.1.1	0x79ee	Standard query (0)	glory-web.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.507622004 CEST	192.168.2.7	1.1.1.1	0xe607	Standard query (0)	out.cfreight.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.635612011 CEST	192.168.2.7	1.1.1.1	0xd0c6	Standard query (0)	site3.smtp.mx.exch580.serverdata.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.635951042 CEST	192.168.2.7	1.1.1.1	0xa245	Standard query (0)	jewks.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.636524916 CEST	192.168.2.7	1.1.1.1	0x89dc	Standard query (0)	smokinaces.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.636750937 CEST	192.168.2.7	1.1.1.1	0x8578	Standard query (0)	smtp.poxos.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.636960030 CEST	192.168.2.7	1.1.1.1	0x4e1	Standard query (0)	securesmtp.kohlercia.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.637181044 CEST	192.168.2.7	1.1.1.1	0x1014	Standard query (0)	secure.internacionalmaritima.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.753381014 CEST	192.168.2.7	1.1.1.1	0xc282	Standard query (0)	securesmtp.malora.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.753753901 CEST	192.168.2.7	1.1.1.1	0x2bfb	Standard query (0)	mail.obre.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.876264095 CEST	192.168.2.7	1.1.1.1	0x4869	Standard query (0)	mxb.ovh.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.876997948 CEST	192.168.2.7	1.1.1.1	0x1bbf	Standard query (0)	mail.reckkommunikation.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.000452995 CEST	192.168.2.7	1.1.1.1	0xc9d9	Standard query (0)	mail.sbcglobalnet.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.000751972 CEST	192.168.2.7	1.1.1.1	0x7a4	Standard query (0)	mail.jq.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.001008987 CEST	192.168.2.7	1.1.1.1	0x85b7	Standard query (0)	mail.campbelllee1.plus.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.001399040 CEST	192.168.2.7	1.1.1.1	0x285b	Standard query (0)	mail.vibtech.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.123476982 CEST	192.168.2.7	1.1.1.1	0x6a6e	Standard query (0)	securesmtp.sainet.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.139549971 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	securesmtp.sainet.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.253588915 CEST	192.168.2.7	1.1.1.1	0x9714	Standard query (0)	securesmtp.arezzocentrokiaikido.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.253846884 CEST	192.168.2.7	1.1.1.1	0xfb42	Standard query (0)	smtp.cadaris.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.254065990 CEST	192.168.2.7	1.1.1.1	0x1ce1	Standard query (0)	smtp.magnasys.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.256620884 CEST	192.168.2.7	1.1.1.1	0x5319	Standard query (0)	mail.emeraldfalls.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.426321030 CEST	192.168.2.7	1.1.1.1	0x8efb	Standard query (0)	secure.asnatec.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.435466051 CEST	192.168.2.7	1.1.1.1	0xa1ef	Standard query (0)	geerolf.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.435759068 CEST	192.168.2.7	1.1.1.1	0xcd8a	Standard query (0)	smtp.ondeon.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.500561953 CEST	192.168.2.7	1.1.1.1	0x6906	Standard query (0)	smtp.ccn5.aitai.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.502266884 CEST	192.168.2.7	1.1.1.1	0x429d	Standard query (0)	out.chugach.ak.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.620990992 CEST	192.168.2.7	1.1.1.1	0xec36	Standard query (0)	mail.rabbit.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.621448994 CEST	192.168.2.7	1.1.1.1	0xbbe4	Standard query (0)	iitk.ac.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.621891975 CEST	192.168.2.7	1.1.1.1	0xed23	Standard query (0)	secure.nakedforsatan.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.622390985 CEST	192.168.2.7	1.1.1.1	0x8614	Standard query (0)	mail.firestw.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.738193035 CEST	192.168.2.7	1.1.1.1	0x2da4	Standard query (0)	mailin.mx-hub.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.738637924 CEST	192.168.2.7	1.1.1.1	0x398	Standard query (0)	smtp.rwfxstudio.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.738938093 CEST	192.168.2.7	1.1.1.1	0xae6	Standard query (0)	mail.benjaminbulot.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.868551970 CEST	192.168.2.7	1.1.1.1	0x5b51	Standard query (0)	securesmtp.janimation.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.868805885 CEST	192.168.2.7	1.1.1.1	0xe86b	Standard query (0)	smtp.pmhobbycraft.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.868889093 CEST	192.168.2.7	1.1.1.1	0x5eac	Standard query (0)	toumaz.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.008038044 CEST	192.168.2.7	1.1.1.1	0x91c0	Standard query (0)	mail.mcboe.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.008701086 CEST	192.168.2.7	1.1.1.1	0x41c0	Standard query (0)	capitaltitle.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.008977890 CEST	192.168.2.7	1.1.1.1	0xc5f2	Standard query (0)	smtp.osnanet.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.009174109 CEST	192.168.2.7	1.1.1.1	0x2be6	Standard query (0)	out.caledonian.ac.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.127038002 CEST	192.168.2.7	1.1.1.1	0x210e	Standard query (0)	expertonlinedigital.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.127123117 CEST	192.168.2.7	1.1.1.1	0x98b8	Standard query (0)	smtp.printincclothing.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.254599094 CEST	192.168.2.7	1.1.1.1	0x2691	Standard query (0)	vitalgosys.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.375610113 CEST	192.168.2.7	1.1.1.1	0x4419	Standard query (0)	smtp.synack.mckinsey.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.375907898 CEST	192.168.2.7	1.1.1.1	0x23a0	Standard query (0)	fpf-pe.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.494436026 CEST	192.168.2.7	1.1.1.1	0xb2fe	Standard query (0)	secure.amrop.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.495322943 CEST	192.168.2.7	1.1.1.1	0x8b8c	Standard query (0)	securesmtp.merje.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.495645046 CEST	192.168.2.7	1.1.1.1	0xc752	Standard query (0)	mail.unia-arquitectos.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.495835066 CEST	192.168.2.7	1.1.1.1	0x3f07	Standard query (0)	acsu.buffalo.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.496062040 CEST	192.168.2.7	1.1.1.1	0x1f8b	Standard query (0)	smtp.corby-cats.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.506196976 CEST	192.168.2.7	1.1.1.1	0x6906	Standard query (0)	smtp.ccn5.aitai.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.611268044 CEST	192.168.2.7	1.1.1.1	0xe2ba	Standard query (0)	bcc.com.vn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.611299992 CEST	192.168.2.7	1.1.1.1	0xfe15	Standard query (0)	mx3.orcon.net.nz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.611628056 CEST	192.168.2.7	1.1.1.1	0x545c	Standard query (0)	inmail1.index.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.611682892 CEST	192.168.2.7	1.1.1.1	0xa116	Standard query (0)	mail.mnfgroup.limited	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.631839037 CEST	192.168.2.7	1.1.1.1	0xec36	Standard query (0)	mail.rabbit.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.742646933 CEST	192.168.2.7	1.1.1.1	0x4b06	Standard query (0)	mail.fiap.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.863471031 CEST	192.168.2.7	1.1.1.1	0x7af0	Standard query (0)	smtp.superig.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.863948107 CEST	192.168.2.7	1.1.1.1	0x90f5	Standard query (0)	securesmtp.fba8b04559.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.864253044 CEST	192.168.2.7	1.1.1.1	0xe170	Standard query (0)	securesmtp.chartwer.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.986815929 CEST	192.168.2.7	1.1.1.1	0xb900	Standard query (0)	secure.archificio.eu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.987210989 CEST	192.168.2.7	1.1.1.1	0x2c1f	Standard query (0)	securesmtp.executivebshop.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.988050938 CEST	192.168.2.7	1.1.1.1	0x7d58	Standard query (0)	smtp.rconfianca.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.988404036 CEST	192.168.2.7	1.1.1.1	0x8e53	Standard query (0)	smtp.awaasphalt.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.000783920 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	smtp.rconfianca.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.104485989 CEST	192.168.2.7	1.1.1.1	0x7a48	Standard query (0)	sysmap-com-br.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.104985952 CEST	192.168.2.7	1.1.1.1	0xc39f	Standard query (0)	securesmtp.adfacility.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.230827093 CEST	192.168.2.7	1.1.1.1	0xc412	Standard query (0)	mail.craig-cooper.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.230942011 CEST	192.168.2.7	1.1.1.1	0xc02f	Standard query (0)	secure.neverskip.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.350450039 CEST	192.168.2.7	1.1.1.1	0x78a4	Standard query (0)	out.pop.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.350786924 CEST	192.168.2.7	1.1.1.1	0x70fa	Standard query (0)	out.zacharyschools.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.477848053 CEST	192.168.2.7	1.1.1.1	0x28dd	Standard query (0)	smtp.hipnosesemsegredos.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.478374958 CEST	192.168.2.7	1.1.1.1	0x56f8	Standard query (0)	svalios.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.478926897 CEST	192.168.2.7	1.1.1.1	0xf4f0	Standard query (0)	secure.libang.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.597323895 CEST	192.168.2.7	1.1.1.1	0xf630	Standard query (0)	smtp.nordialog.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.598272085 CEST	192.168.2.7	1.1.1.1	0x2165	Standard query (0)	lquinngroup.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.598362923 CEST	192.168.2.7	1.1.1.1	0x2175	Standard query (0)	securesmtp.sterling-m.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.598588943 CEST	192.168.2.7	1.1.1.1	0xe440	Standard query (0)	vitstudent.ac.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.726325035 CEST	192.168.2.7	1.1.1.1	0x2269	Standard query (0)	bergamont.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.727004051 CEST	192.168.2.7	1.1.1.1	0x6041	Standard query (0)	out.goaheadit.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.850593090 CEST	192.168.2.7	1.1.1.1	0xa569	Standard query (0)	securesmtp.86.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.851085901 CEST	192.168.2.7	1.1.1.1	0x6767	Standard query (0)	out.thebfagroup.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.851085901 CEST	192.168.2.7	1.1.1.1	0x3d3c	Standard query (0)	securesmtp.obiettividarte.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.851269960 CEST	192.168.2.7	1.1.1.1	0x77c	Standard query (0)	sensus-se.se1.mx-wecloud.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.972655058 CEST	192.168.2.7	1.1.1.1	0xf1a8	Standard query (0)	ko.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.972984076 CEST	192.168.2.7	1.1.1.1	0xcc23	Standard query (0)	smtp.strato.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.972984076 CEST	192.168.2.7	1.1.1.1	0x488f	Standard query (0)	smtp.albinosquirrel.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.112994909 CEST	192.168.2.7	1.1.1.1	0xf2fd	Standard query (0)	out.motadata.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.113363981 CEST	192.168.2.7	1.1.1.1	0x8f2c	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.113668919 CEST	192.168.2.7	1.1.1.1	0x63f0	Standard query (0)	smtp.institut-gmk.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.114125967 CEST	192.168.2.7	1.1.1.1	0x7b6a	Standard query (0)	secure.uniforja.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.114236116 CEST	192.168.2.7	1.1.1.1	0x8e76	Standard query (0)	securesmtp.javamountaincoffee.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.231578112 CEST	192.168.2.7	1.1.1.1	0x5f9d	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.232240915 CEST	192.168.2.7	1.1.1.1	0x89a3	Standard query (0)	securesmtp.albap.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.232506037 CEST	192.168.2.7	1.1.1.1	0xf6b3	Standard query (0)	out.reimo.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.528912067 CEST	192.168.2.7	1.1.1.1	0x30a4	Standard query (0)	smtp.priveesport.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.529391050 CEST	192.168.2.7	1.1.1.1	0x8fa3	Standard query (0)	mail.saintmarkschoolethiopia.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.529594898 CEST	192.168.2.7	1.1.1.1	0xec1f	Standard query (0)	mail.softlogic.lk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.529897928 CEST	192.168.2.7	1.1.1.1	0xa8f4	Standard query (0)	smtp.islandbreeze.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.530267954 CEST	192.168.2.7	1.1.1.1	0xd9a8	Standard query (0)	usp.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.635195971 CEST	192.168.2.7	1.1.1.1	0x2474	Standard query (0)	securesmtp.ipfoundation.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.636253119 CEST	192.168.2.7	1.1.1.1	0xd118	Standard query (0)	mtsspa.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.636442900 CEST	192.168.2.7	1.1.1.1	0x661c	Standard query (0)	secure.egba.ba.gov.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.636699915 CEST	192.168.2.7	1.1.1.1	0x561	Standard query (0)	securesmtp.hodders.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.637388945 CEST	192.168.2.7	1.1.1.1	0x18a0	Standard query (0)	smtp.mv-hallstadt.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.726556063 CEST	192.168.2.7	1.1.1.1	0x6041	Standard query (0)	out.goaheadit.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.752938986 CEST	192.168.2.7	1.1.1.1	0xaa9b	Standard query (0)	securesmtp.rhenus.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.753819942 CEST	192.168.2.7	1.1.1.1	0xe092	Standard query (0)	smtp.scuoledueville.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.757519960 CEST	192.168.2.7	1.1.1.1	0x45e5	Standard query (0)	pref.ishikawa.lg.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.881604910 CEST	192.168.2.7	1.1.1.1	0x99da	Standard query (0)	familiaanabel.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.882488012 CEST	192.168.2.7	1.1.1.1	0xd078	Standard query (0)	securesmtp.sgmcclan.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.999305010 CEST	192.168.2.7	1.1.1.1	0x91a7	Standard query (0)	secure.tmssas.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.999829054 CEST	192.168.2.7	1.1.1.1	0xb50f	Standard query (0)	smtp.zjhyiec.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.999991894 CEST	192.168.2.7	1.1.1.1	0x881e	Standard query (0)	securesmtp.acotes.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.114815950 CEST	192.168.2.7	1.1.1.1	0x8f2c	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.128335953 CEST	192.168.2.7	1.1.1.1	0xf36	Standard query (0)	mail.jkdinvestments.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.128670931 CEST	192.168.2.7	1.1.1.1	0x3c05	Standard query (0)	smtp.hotmbyail.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.248224974 CEST	192.168.2.7	1.1.1.1	0x1c2f	Standard query (0)	wzl2.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.248537064 CEST	192.168.2.7	1.1.1.1	0xec85	Standard query (0)	smtp.cm-photography.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.248788118 CEST	192.168.2.7	1.1.1.1	0xb149	Standard query (0)	mail.renardoo.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.248970985 CEST	192.168.2.7	1.1.1.1	0xa6	Standard query (0)	mail.martys.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.249186039 CEST	192.168.2.7	1.1.1.1	0x537	Standard query (0)	mail.cofibox.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.375849962 CEST	192.168.2.7	1.1.1.1	0xd82b	Standard query (0)	starfunevents.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.376539946 CEST	192.168.2.7	1.1.1.1	0x3fec	Standard query (0)	ovelinea.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.377093077 CEST	192.168.2.7	1.1.1.1	0xaf8a	Standard query (0)	smtp.iinet.net.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.377423048 CEST	192.168.2.7	1.1.1.1	0xeae1	Standard query (0)	geschwinde.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.377898932 CEST	192.168.2.7	1.1.1.1	0xffd2	Standard query (0)	out.ssgn.by.lo-net2.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.378456116 CEST	192.168.2.7	1.1.1.1	0xfafa	Standard query (0)	bniya.store	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.494496107 CEST	192.168.2.7	1.1.1.1	0xc90a	Standard query (0)	smtp.balcab.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.494844913 CEST	192.168.2.7	1.1.1.1	0xcacd	Standard query (0)	mail.arcticwinter.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.495354891 CEST	192.168.2.7	1.1.1.1	0x956f	Standard query (0)	btinternet.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.536649942 CEST	192.168.2.7	1.1.1.1	0xec1f	Standard query (0)	mail.softlogic.lk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.629805088 CEST	192.168.2.7	1.1.1.1	0x9cb	Standard query (0)	smtp.rainagaintanks.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.630043983 CEST	192.168.2.7	1.1.1.1	0xd7d7	Standard query (0)	securesmtp.freehandsdesing.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.631874084 CEST	192.168.2.7	1.1.1.1	0xccc4	Standard query (0)	smtp.univ-lille.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.750152111 CEST	192.168.2.7	1.1.1.1	0xb7bb	Standard query (0)	ukwms.ac.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.750771046 CEST	192.168.2.7	1.1.1.1	0xa63f	Standard query (0)	mail.chopsley.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.750771046 CEST	192.168.2.7	1.1.1.1	0x473f	Standard query (0)	securesmtp.sanshin.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.750771046 CEST	192.168.2.7	1.1.1.1	0xceb2	Standard query (0)	mail.bribaxe.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.751055956 CEST	192.168.2.7	1.1.1.1	0x1fb3	Standard query (0)	mail.uddie.fsnet.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.884042025 CEST	192.168.2.7	1.1.1.1	0x81d6	Standard query (0)	out.recruitmentsystems.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.884042025 CEST	192.168.2.7	1.1.1.1	0x5912	Standard query (0)	out.cross-stitch-corner.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.884294987 CEST	192.168.2.7	1.1.1.1	0x48f3	Standard query (0)	mail.lognet.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.884505987 CEST	192.168.2.7	1.1.1.1	0x1f3e	Standard query (0)	mail.ch.adp.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.885349035 CEST	192.168.2.7	1.1.1.1	0xbe6b	Standard query (0)	chicasconperroparapracticarsexoconelperro.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.885416985 CEST	192.168.2.7	1.1.1.1	0xb1fa	Standard query (0)	securesmtp.feb.upr.ac.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.002305984 CEST	192.168.2.7	1.1.1.1	0x28f0	Standard query (0)	securesmtp.lpajc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.114869118 CEST	192.168.2.7	1.1.1.1	0x8f2c	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.122880936 CEST	192.168.2.7	1.1.1.1	0x8481	Standard query (0)	secure.rhythmuswege.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.123771906 CEST	192.168.2.7	1.1.1.1	0xc9f6	Standard query (0)	mx3.pub.mailpod11-cph3.one.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.123905897 CEST	192.168.2.7	1.1.1.1	0xc0d2	Standard query (0)	out.mail.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.124145031 CEST	192.168.2.7	1.1.1.1	0xa7dd	Standard query (0)	smtp.bluetel.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.124180079 CEST	192.168.2.7	1.1.1.1	0xbd21	Standard query (0)	mail.riovaradero.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.124468088 CEST	192.168.2.7	1.1.1.1	0x3c11	Standard query (0)	infotectecnologia.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.124651909 CEST	192.168.2.7	1.1.1.1	0x693e	Standard query (0)	smtp.grotensteenwelle.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.124790907 CEST	192.168.2.7	1.1.1.1	0xdcdc	Standard query (0)	hotmal.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.128875017 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.240082979 CEST	192.168.2.7	1.1.1.1	0xa6	Standard query (0)	mail.martys.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.274878979 CEST	192.168.2.7	1.1.1.1	0x1c21	Standard query (0)	smtp.volny.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.275661945 CEST	192.168.2.7	1.1.1.1	0xfa2d	Standard query (0)	securesmtp.lete.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.275984049 CEST	192.168.2.7	1.1.1.1	0x4567	Standard query (0)	mail.bann.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.276282072 CEST	192.168.2.7	1.1.1.1	0x4536	Standard query (0)	out.srcharlessd.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.395219088 CEST	192.168.2.7	1.1.1.1	0x80bd	Standard query (0)	out.jaleomantenimiento.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.395538092 CEST	192.168.2.7	1.1.1.1	0x6d5	Standard query (0)	secure.unither.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.397181988 CEST	192.168.2.7	1.1.1.1	0x7723	Standard query (0)	securesmtp.sr-f.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.397181988 CEST	192.168.2.7	1.1.1.1	0x9cc5	Standard query (0)	avks.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.397691965 CEST	192.168.2.7	1.1.1.1	0x3bcb	Standard query (0)	securesmtp.aetnahhl.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.397691965 CEST	192.168.2.7	1.1.1.1	0xae63	Standard query (0)	aguiafix.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.513962030 CEST	192.168.2.7	1.1.1.1	0xbae6	Standard query (0)	out.gitc.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.514592886 CEST	192.168.2.7	1.1.1.1	0xb132	Standard query (0)	mail.hipermateriais.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.514878035 CEST	192.168.2.7	1.1.1.1	0x9a65	Standard query (0)	urbanusroad.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.536885977 CEST	192.168.2.7	1.1.1.1	0xec1f	Standard query (0)	mail.softlogic.lk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.647481918 CEST	192.168.2.7	1.1.1.1	0x2683	Standard query (0)	secure.amerique.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.648684978 CEST	192.168.2.7	1.1.1.1	0xc182	Standard query (0)	securesmtp.asgatech.com.sa	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.648766041 CEST	192.168.2.7	1.1.1.1	0x2733	Standard query (0)	smtp.trutta.f9.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.649002075 CEST	192.168.2.7	1.1.1.1	0x58e	Standard query (0)	smtp.kbiinc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.767740965 CEST	192.168.2.7	1.1.1.1	0x3d0b	Standard query (0)	smtp.grupomil.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.769876003 CEST	192.168.2.7	1.1.1.1	0xf8a8	Standard query (0)	secure.greenfinch.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.886167049 CEST	192.168.2.7	1.1.1.1	0x6760	Standard query (0)	smtp.sherkhen.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.886643887 CEST	192.168.2.7	1.1.1.1	0x23e3	Standard query (0)	mail.ziragold.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.886643887 CEST	192.168.2.7	1.1.1.1	0x3aa1	Standard query (0)	out.caledonian.ac.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.886912107 CEST	192.168.2.7	1.1.1.1	0x73a2	Standard query (0)	costa.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.990056992 CEST	192.168.2.7	1.1.1.1	0x28f0	Standard query (0)	securesmtp.lpajc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.003947020 CEST	192.168.2.7	1.1.1.1	0x85ee	Standard query (0)	out.fmailxc.com.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.004044056 CEST	192.168.2.7	1.1.1.1	0xea6b	Standard query (0)	itelefonica.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.004359961 CEST	192.168.2.7	1.1.1.1	0xff75	Standard query (0)	securesmtp.stmmediastore.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.004503012 CEST	192.168.2.7	1.1.1.1	0xfdcb	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.004692078 CEST	192.168.2.7	1.1.1.1	0xfd80	Standard query (0)	secure.thelabarber.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.126838923 CEST	192.168.2.7	1.1.1.1	0xc8f6	Standard query (0)	securesmtp.kenwood.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.127583981 CEST	192.168.2.7	1.1.1.1	0xc0b0	Standard query (0)	secure.duede.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.127584934 CEST	192.168.2.7	1.1.1.1	0xab2	Standard query (0)	out.dmt.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.127890110 CEST	192.168.2.7	1.1.1.1	0x5fcc	Standard query (0)	smtp.dchft.nhs.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.127890110 CEST	192.168.2.7	1.1.1.1	0x6420	Standard query (0)	secure.yamouni.id.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.245804071 CEST	192.168.2.7	1.1.1.1	0x8c95	Standard query (0)	pergolaland.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.246241093 CEST	192.168.2.7	1.1.1.1	0xae1f	Standard query (0)	mail.beauty-depot.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.246510983 CEST	192.168.2.7	1.1.1.1	0x253	Standard query (0)	mail.ppp.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.246882915 CEST	192.168.2.7	1.1.1.1	0x2edc	Standard query (0)	securesmtp.bmwnet.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.365909100 CEST	192.168.2.7	1.1.1.1	0xd69d	Standard query (0)	mail.computeraffare.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.366214991 CEST	192.168.2.7	1.1.1.1	0xe15c	Standard query (0)	secure.organiccounty.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.366652012 CEST	192.168.2.7	1.1.1.1	0x8dae	Standard query (0)	mail.vemilac.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.366838932 CEST	192.168.2.7	1.1.1.1	0x14cd	Standard query (0)	out.fiorentinimoveis.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.491471052 CEST	192.168.2.7	1.1.1.1	0x8ccf	Standard query (0)	smtp.baamrecscsonsulting.co.tz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.611365080 CEST	192.168.2.7	1.1.1.1	0x264	Standard query (0)	smtp.muench-hahn.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.611620903 CEST	192.168.2.7	1.1.1.1	0x66b	Standard query (0)	mail2.mail-vert.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.612207890 CEST	192.168.2.7	1.1.1.1	0x781c	Standard query (0)	smtp.umoncton.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.732451916 CEST	192.168.2.7	1.1.1.1	0x59a	Standard query (0)	securesmtp.byggledarna.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.732784033 CEST	192.168.2.7	1.1.1.1	0xa7e7	Standard query (0)	secure.skynet.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.733475924 CEST	192.168.2.7	1.1.1.1	0x4125	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.733854055 CEST	192.168.2.7	1.1.1.1	0x50b	Standard query (0)	out.dogrelation.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.857393980 CEST	192.168.2.7	1.1.1.1	0xe4d5	Standard query (0)	fake.uber.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.857752085 CEST	192.168.2.7	1.1.1.1	0x3df	Standard query (0)	grupogoldlinks.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.978478909 CEST	192.168.2.7	1.1.1.1	0x736f	Standard query (0)	mail.topsconsultants.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.978584051 CEST	192.168.2.7	1.1.1.1	0x7e9	Standard query (0)	mail.sportlounge.info	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.978794098 CEST	192.168.2.7	1.1.1.1	0x459d	Standard query (0)	multistateinsurance.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.103111982 CEST	192.168.2.7	1.1.1.1	0xc36b	Standard query (0)	smtp.hargreavesphotography.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.103368998 CEST	192.168.2.7	1.1.1.1	0xff7f	Standard query (0)	smtp.wessel-3d.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.103589058 CEST	192.168.2.7	1.1.1.1	0x82fd	Standard query (0)	mail.ofenschulte.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.103797913 CEST	192.168.2.7	1.1.1.1	0x300f	Standard query (0)	mail.tigress.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.223546982 CEST	192.168.2.7	1.1.1.1	0x7441	Standard query (0)	securesmtp.e-structures.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.223617077 CEST	192.168.2.7	1.1.1.1	0x1307	Standard query (0)	mail.raytek.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.224505901 CEST	192.168.2.7	1.1.1.1	0x4689	Standard query (0)	smtp.unimedvaledoaco.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.255382061 CEST	192.168.2.7	1.1.1.1	0x8c95	Standard query (0)	pergolaland.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.343544960 CEST	192.168.2.7	1.1.1.1	0xfb9f	Standard query (0)	mail.vanguardpartnership.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.464498043 CEST	192.168.2.7	1.1.1.1	0xe322	Standard query (0)	secure.ifollowing.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.465200901 CEST	192.168.2.7	1.1.1.1	0xbb4d	Standard query (0)	takeuchi-const.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.465739965 CEST	192.168.2.7	1.1.1.1	0xedae	Standard query (0)	romanus.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.589517117 CEST	192.168.2.7	1.1.1.1	0x29a	Standard query (0)	sussexpartnership.nhs.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.589550018 CEST	192.168.2.7	1.1.1.1	0x3e17	Standard query (0)	secure.uottawa.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.589988947 CEST	192.168.2.7	1.1.1.1	0xf28a	Standard query (0)	europosteferrandina.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.589988947 CEST	192.168.2.7	1.1.1.1	0x2e6b	Standard query (0)	mx0b-0025eb03.pphosted.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.710047960 CEST	192.168.2.7	1.1.1.1	0x602a	Standard query (0)	out.iversen.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.710267067 CEST	192.168.2.7	1.1.1.1	0xddde	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.710534096 CEST	192.168.2.7	1.1.1.1	0x1def	Standard query (0)	smtp.agate.plala.or.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.840832949 CEST	192.168.2.7	1.1.1.1	0x54fc	Standard query (0)	smtp.eastc365.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.841316938 CEST	192.168.2.7	1.1.1.1	0x53ce	Standard query (0)	smtp.killfreetimes.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.841583967 CEST	192.168.2.7	1.1.1.1	0xbd59	Standard query (0)	smtp.thinktank.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.842022896 CEST	192.168.2.7	1.1.1.1	0x645f	Standard query (0)	out.potschadel.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.956438065 CEST	192.168.2.7	1.1.1.1	0xfcb3	Standard query (0)	out.displayd.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.957258940 CEST	192.168.2.7	1.1.1.1	0xc4e6	Standard query (0)	out.thomas-schoedl.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.957636118 CEST	192.168.2.7	1.1.1.1	0x2cbd	Standard query (0)	out.bpkpenabur.sch.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.074641943 CEST	192.168.2.7	1.1.1.1	0x652b	Standard query (0)	smtp.trako.arch.rwth-aachen.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.074990988 CEST	192.168.2.7	1.1.1.1	0xb602	Standard query (0)	pfeiffer-koberstein-immobilien.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.075292110 CEST	192.168.2.7	1.1.1.1	0x4ecd	Standard query (0)	smtp.mgm-trading.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.075292110 CEST	192.168.2.7	1.1.1.1	0x112b	Standard query (0)	out.mybce.catholic.ede	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.202975988 CEST	192.168.2.7	1.1.1.1	0x739d	Standard query (0)	mikestuart.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.202975988 CEST	192.168.2.7	1.1.1.1	0x4d3	Standard query (0)	securesmtp.clear-line.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.203047037 CEST	192.168.2.7	1.1.1.1	0xb160	Standard query (0)	amtzell.schule.bwl.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.224277973 CEST	192.168.2.7	1.1.1.1	0x4689	Standard query (0)	smtp.unimedvaledoaco.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.321302891 CEST	192.168.2.7	1.1.1.1	0x2e25	Standard query (0)	out.super-bijin.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.321302891 CEST	192.168.2.7	1.1.1.1	0xd8d9	Standard query (0)	smtp.365assist.my	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.322449923 CEST	192.168.2.7	1.1.1.1	0xd669	Standard query (0)	mail.ciadotreinamento.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.448009014 CEST	192.168.2.7	1.1.1.1	0x104a	Standard query (0)	mx2.ua.fm	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.448299885 CEST	192.168.2.7	1.1.1.1	0xbc00	Standard query (0)	smtp.bridgoconstructiongroup.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.448904037 CEST	192.168.2.7	1.1.1.1	0x85d8	Standard query (0)	birdville.k12.tx.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.449167967 CEST	192.168.2.7	1.1.1.1	0x3834	Standard query (0)	rg-moe-gov-sa.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.476108074 CEST	192.168.2.7	1.1.1.1	0xbb4d	Standard query (0)	takeuchi-const.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.702996969 CEST	192.168.2.7	1.1.1.1	0x6cc	Standard query (0)	smtp.bggd.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.703574896 CEST	192.168.2.7	1.1.1.1	0x8d78	Standard query (0)	smtp.imaginet.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.703721046 CEST	192.168.2.7	1.1.1.1	0xcaa2	Standard query (0)	spareservice.gr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.703934908 CEST	192.168.2.7	1.1.1.1	0x51fc	Standard query (0)	mx2.ovh.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.704036951 CEST	192.168.2.7	1.1.1.1	0x4242	Standard query (0)	mx.fkksol.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.857920885 CEST	192.168.2.7	1.1.1.1	0xc6d6	Standard query (0)	smtp.highservers.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.858237028 CEST	192.168.2.7	1.1.1.1	0xc152	Standard query (0)	marinette.wi.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.858500004 CEST	192.168.2.7	1.1.1.1	0x2478	Standard query (0)	ntlp.org.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.858741045 CEST	192.168.2.7	1.1.1.1	0x10	Standard query (0)	mail.before.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.959976912 CEST	192.168.2.7	1.1.1.1	0x8d0e	Standard query (0)	ricco.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.960247040 CEST	192.168.2.7	1.1.1.1	0x6b53	Standard query (0)	mail.expertasset.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.960788012 CEST	192.168.2.7	1.1.1.1	0x51a8	Standard query (0)	mail.bus.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.960917950 CEST	192.168.2.7	1.1.1.1	0xabb8	Standard query (0)	mail.girauds.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.961116076 CEST	192.168.2.7	1.1.1.1	0xfbba	Standard query (0)	email.tst	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.961236954 CEST	192.168.2.7	1.1.1.1	0x6856	Standard query (0)	smtp.m-pe.tv	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.080337048 CEST	192.168.2.7	1.1.1.1	0x2d0e	Standard query (0)	out.tke.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.080667019 CEST	192.168.2.7	1.1.1.1	0x1fd3	Standard query (0)	secure.ct.tonitza	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.081274986 CEST	192.168.2.7	1.1.1.1	0x6831	Standard query (0)	smtp.carmel.lib.in.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.200546980 CEST	192.168.2.7	1.1.1.1	0x7993	Standard query (0)	smtp.pakn.hyogo-c.ed.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.201091051 CEST	192.168.2.7	1.1.1.1	0x9df	Standard query (0)	coninnovar.com.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.225114107 CEST	192.168.2.7	1.1.1.1	0x4689	Standard query (0)	smtp.unimedvaledoaco.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.319377899 CEST	192.168.2.7	1.1.1.1	0x289f	Standard query (0)	bluebasis.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.319668055 CEST	192.168.2.7	1.1.1.1	0x8fa3	Standard query (0)	mail.catcha.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.319813967 CEST	192.168.2.7	1.1.1.1	0x9cf9	Standard query (0)	smtp.centurylink.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.319952965 CEST	192.168.2.7	1.1.1.1	0x6d15	Standard query (0)	smtp.mmwcivil.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.451268911 CEST	192.168.2.7	1.1.1.1	0xf84	Standard query (0)	limocars.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.451751947 CEST	192.168.2.7	1.1.1.1	0xbe75	Standard query (0)	mail.alvicreativemarketinghub.co.ke	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.451796055 CEST	192.168.2.7	1.1.1.1	0x2d23	Standard query (0)	mail.fkogjg.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.452014923 CEST	192.168.2.7	1.1.1.1	0x2437	Standard query (0)	mail.riverwood.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.565447092 CEST	192.168.2.7	1.1.1.1	0x75b2	Standard query (0)	mail.space282.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.565447092 CEST	192.168.2.7	1.1.1.1	0x9e58	Standard query (0)	out.ynu.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.565840006 CEST	192.168.2.7	1.1.1.1	0x99ee	Standard query (0)	berger-kamine.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.565840006 CEST	192.168.2.7	1.1.1.1	0xf8df	Standard query (0)	danielsreservices.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.690716982 CEST	192.168.2.7	1.1.1.1	0x702	Standard query (0)	mail.workcover.vic.gov.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.691874981 CEST	192.168.2.7	1.1.1.1	0xce58	Standard query (0)	out.jerichoapps.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.949404955 CEST	192.168.2.7	1.1.1.1	0xcedb	Standard query (0)	alternativeheat.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.949515104 CEST	192.168.2.7	1.1.1.1	0xc175	Standard query (0)	secure.lemur.demon.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.950479031 CEST	192.168.2.7	1.1.1.1	0x6b85	Standard query (0)	secure.famhertel.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.055747986 CEST	192.168.2.7	1.1.1.1	0x65f9	Standard query (0)	smtp.swissonline.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.055747986 CEST	192.168.2.7	1.1.1.1	0xbfa8	Standard query (0)	mail.bluepowertechnology.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.055835962 CEST	192.168.2.7	1.1.1.1	0xa090	Standard query (0)	kbn.ac.th	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.056092978 CEST	192.168.2.7	1.1.1.1	0x5a2	Standard query (0)	out.dieberatungsakademie.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.056092978 CEST	192.168.2.7	1.1.1.1	0x1935	Standard query (0)	sabesp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.056504965 CEST	192.168.2.7	1.1.1.1	0xc65b	Standard query (0)	smtp.fin-echiquier.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.182487011 CEST	192.168.2.7	1.1.1.1	0xa798	Standard query (0)	ewetel.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.183020115 CEST	192.168.2.7	1.1.1.1	0x9160	Standard query (0)	mail.expertcontabil.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.183161020 CEST	192.168.2.7	1.1.1.1	0x207e	Standard query (0)	secure.casablanca.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.193483114 CEST	192.168.2.7	1.1.1.1	0x7993	Standard query (0)	smtp.pakn.hyogo-c.ed.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.304547071 CEST	192.168.2.7	1.1.1.1	0xfc82	Standard query (0)	vit.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.428669930 CEST	192.168.2.7	1.1.1.1	0x8a63	Standard query (0)	securesmtp.divaportal.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.428826094 CEST	192.168.2.7	1.1.1.1	0x32a	Standard query (0)	recruitingsolutionsonline.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.428980112 CEST	192.168.2.7	1.1.1.1	0xb891	Standard query (0)	securesmtp.datasinc.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.549307108 CEST	192.168.2.7	1.1.1.1	0xe8e1	Standard query (0)	smtp.malvasul.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.549308062 CEST	192.168.2.7	1.1.1.1	0xdab6	Standard query (0)	marketplace.amazon.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.549499989 CEST	192.168.2.7	1.1.1.1	0x18ac	Standard query (0)	d154910b.ess.barracudanetworks.COM	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.575941086 CEST	192.168.2.7	1.1.1.1	0x9e58	Standard query (0)	out.ynu.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.667471886 CEST	192.168.2.7	1.1.1.1	0x92d	Standard query (0)	out.kolort.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.667884111 CEST	192.168.2.7	1.1.1.1	0xb743	Standard query (0)	mail.movistar.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.668973923 CEST	192.168.2.7	1.1.1.1	0x4413	Standard query (0)	atadadeamorexpress.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.797703981 CEST	192.168.2.7	1.1.1.1	0x27ce	Standard query (0)	smtp.clickthai.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.798088074 CEST	192.168.2.7	1.1.1.1	0x41bb	Standard query (0)	out.languageinspired.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.798448086 CEST	192.168.2.7	1.1.1.1	0x79c4	Standard query (0)	agtes-nl.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.921232939 CEST	192.168.2.7	1.1.1.1	0xb95	Standard query (0)	securesmtp.luluimmobiliare.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.921560049 CEST	192.168.2.7	1.1.1.1	0x52c	Standard query (0)	mx1.agenturserver.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.921817064 CEST	192.168.2.7	1.1.1.1	0xf2f1	Standard query (0)	sympatico.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.921849966 CEST	192.168.2.7	1.1.1.1	0xe80	Standard query (0)	itelefonica.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.922297001 CEST	192.168.2.7	1.1.1.1	0xc7e2	Standard query (0)	marylandsigndesign.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.043260098 CEST	192.168.2.7	1.1.1.1	0xc9fb	Standard query (0)	smtp.webail.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.043554068 CEST	192.168.2.7	1.1.1.1	0x7be9	Standard query (0)	secure.jed.btc.com.sa	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.043592930 CEST	192.168.2.7	1.1.1.1	0x4a05	Standard query (0)	smtp.mscdirect.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.043811083 CEST	192.168.2.7	1.1.1.1	0xe2f6	Standard query (0)	smtp.shaw.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.162808895 CEST	192.168.2.7	1.1.1.1	0xc3dd	Standard query (0)	secure.wellant.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.162910938 CEST	192.168.2.7	1.1.1.1	0x3439	Standard query (0)	securesmtp.beautyandslim.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.163106918 CEST	192.168.2.7	1.1.1.1	0x7fc2	Standard query (0)	mx.gcdetectivefree.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.163237095 CEST	192.168.2.7	1.1.1.1	0xf347	Standard query (0)	mail.infologygroup.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.239794970 CEST	192.168.2.7	1.1.1.1	0x4689	Standard query (0)	smtp.unimedvaledoaco.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.282130003 CEST	192.168.2.7	1.1.1.1	0x181f	Standard query (0)	darrenellett.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.282511950 CEST	192.168.2.7	1.1.1.1	0x17a4	Standard query (0)	tiscalinet.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.282812119 CEST	192.168.2.7	1.1.1.1	0x7fff	Standard query (0)	secure.callofdead.de.vu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.282833099 CEST	192.168.2.7	1.1.1.1	0xe4f	Standard query (0)	securesmtp.bmwnet.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.412276983 CEST	192.168.2.7	1.1.1.1	0xfa15	Standard query (0)	yaho.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.412550926 CEST	192.168.2.7	1.1.1.1	0x7ef4	Standard query (0)	curanow.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.530472040 CEST	192.168.2.7	1.1.1.1	0x1f30	Standard query (0)	fges.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.530472040 CEST	192.168.2.7	1.1.1.1	0xbd44	Standard query (0)	grocommunity.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.530930996 CEST	192.168.2.7	1.1.1.1	0x9a4	Standard query (0)	checkersfs.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.656198025 CEST	192.168.2.7	1.1.1.1	0x9bf1	Standard query (0)	smtp.riogd.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.656589985 CEST	192.168.2.7	1.1.1.1	0x14a6	Standard query (0)	mail.arug.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.656999111 CEST	192.168.2.7	1.1.1.1	0xca7a	Standard query (0)	hi-precision.com.ph	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.657054901 CEST	192.168.2.7	1.1.1.1	0x33f7	Standard query (0)	secure.ophrdc.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.657761097 CEST	192.168.2.7	1.1.1.1	0x3d36	Standard query (0)	secure.navitoil.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.657841921 CEST	192.168.2.7	1.1.1.1	0xf169	Standard query (0)	mail.trunjoyo.ac.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.775948048 CEST	192.168.2.7	1.1.1.1	0x7e5f	Standard query (0)	securesmtp.pagvip.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.775948048 CEST	192.168.2.7	1.1.1.1	0x1159	Standard query (0)	promokings.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.895528078 CEST	192.168.2.7	1.1.1.1	0xb63f	Standard query (0)	destiny-production.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.015737057 CEST	192.168.2.7	1.1.1.1	0x399b	Standard query (0)	securesmtp.uphaminc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.015990019 CEST	192.168.2.7	1.1.1.1	0xb0a7	Standard query (0)	securesmtp.lifestyleclinic.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.016246080 CEST	192.168.2.7	1.1.1.1	0xb00e	Standard query (0)	telkomsa.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.016290903 CEST	192.168.2.7	1.1.1.1	0x3675	Standard query (0)	smtp.vouk.ml	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.016505957 CEST	192.168.2.7	1.1.1.1	0xf62c	Standard query (0)	secure.intercup.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.133927107 CEST	192.168.2.7	1.1.1.1	0x53b6	Standard query (0)	smtp.eerstenatuur.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.133927107 CEST	192.168.2.7	1.1.1.1	0x6aef	Standard query (0)	secure.agilesphere.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.258532047 CEST	192.168.2.7	1.1.1.1	0x5789	Standard query (0)	secure.ccl.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.258857012 CEST	192.168.2.7	1.1.1.1	0x262	Standard query (0)	securesmtp.londonderryapps.og	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.259052038 CEST	192.168.2.7	1.1.1.1	0xb77e	Standard query (0)	out.emeritus.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.259382010 CEST	192.168.2.7	1.1.1.1	0x3c8d	Standard query (0)	secure.schuettguthandel.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.378755093 CEST	192.168.2.7	1.1.1.1	0x4554	Standard query (0)	mixed.co.th	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.379077911 CEST	192.168.2.7	1.1.1.1	0xea40	Standard query (0)	cdhu-sp-gov-br.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.379316092 CEST	192.168.2.7	1.1.1.1	0x3a2e	Standard query (0)	smtp.tic.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.506136894 CEST	192.168.2.7	1.1.1.1	0xd2f2	Standard query (0)	smtp.omestad.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.506136894 CEST	192.168.2.7	1.1.1.1	0x8688	Standard query (0)	secure.autostorm.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.506486893 CEST	192.168.2.7	1.1.1.1	0x7c7a	Standard query (0)	smtp.ah-shoulder.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.647185087 CEST	192.168.2.7	1.1.1.1	0xca7a	Standard query (0)	hi-precision.com.ph	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.819411993 CEST	192.168.2.7	1.1.1.1	0x1346	Standard query (0)	out.aidasrl.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.820264101 CEST	192.168.2.7	1.1.1.1	0x44a3	Standard query (0)	secure.sjb-liege.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.820527077 CEST	192.168.2.7	1.1.1.1	0x6e0d	Standard query (0)	secure.9f2f44fac5.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.820787907 CEST	192.168.2.7	1.1.1.1	0xdfa4	Standard query (0)	temix.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.820837021 CEST	192.168.2.7	1.1.1.1	0xd9ce	Standard query (0)	albionsystems.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.821496964 CEST	192.168.2.7	1.1.1.1	0xd592	Standard query (0)	stuewer-de.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.918921947 CEST	192.168.2.7	1.1.1.1	0x2abd	Standard query (0)	secure.trane.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.919218063 CEST	192.168.2.7	1.1.1.1	0xcc84	Standard query (0)	mail.beertech.ind.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.919965982 CEST	192.168.2.7	1.1.1.1	0xb419	Standard query (0)	mail.ametuniv.ac.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.920129061 CEST	192.168.2.7	1.1.1.1	0x92bf	Standard query (0)	teylingen-college.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.920295954 CEST	192.168.2.7	1.1.1.1	0x689a	Standard query (0)	smtp.hi-ho.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.036931038 CEST	192.168.2.7	1.1.1.1	0x6a97	Standard query (0)	mail.vestbykommune.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.037313938 CEST	192.168.2.7	1.1.1.1	0xb57	Standard query (0)	br.jarvis2030.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.157474041 CEST	192.168.2.7	1.1.1.1	0xc2e7	Standard query (0)	out.taylorcountyschools.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.157798052 CEST	192.168.2.7	1.1.1.1	0x4eb0	Standard query (0)	taxkey.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.158086061 CEST	192.168.2.7	1.1.1.1	0xd1ce	Standard query (0)	smtp.stu.jefferson.kyschools.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.158452034 CEST	192.168.2.7	1.1.1.1	0x6277	Standard query (0)	mcd.lv	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.282917976 CEST	192.168.2.7	1.1.1.1	0x535	Standard query (0)	mail.wamanager.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.380604982 CEST	192.168.2.7	1.1.1.1	0x4554	Standard query (0)	mixed.co.th	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.380604982 CEST	192.168.2.7	1.1.1.1	0xea40	Standard query (0)	cdhu-sp-gov-br.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.404156923 CEST	192.168.2.7	1.1.1.1	0x6415	Standard query (0)	dgls.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.404691935 CEST	192.168.2.7	1.1.1.1	0xafe6	Standard query (0)	out.karakus.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.404750109 CEST	192.168.2.7	1.1.1.1	0x44ad	Standard query (0)	mx1.ingep.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.404969931 CEST	192.168.2.7	1.1.1.1	0x6682	Standard query (0)	out.eastc365.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.404969931 CEST	192.168.2.7	1.1.1.1	0x79d6	Standard query (0)	mail.abacho.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.405138969 CEST	192.168.2.7	1.1.1.1	0xc977	Standard query (0)	tecnon.srv.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.527570963 CEST	192.168.2.7	1.1.1.1	0xf484	Standard query (0)	mail.debreteuil.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.527936935 CEST	192.168.2.7	1.1.1.1	0xb59a	Standard query (0)	mx.a.locaweb.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.527936935 CEST	192.168.2.7	1.1.1.1	0x9814	Standard query (0)	mx.ertemaik.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.773847103 CEST	192.168.2.7	1.1.1.1	0x7c3a	Standard query (0)	smtp.godtfredlarsen.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.774203062 CEST	192.168.2.7	1.1.1.1	0x8a85	Standard query (0)	securesmtp.ejpaxton.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.774497032 CEST	192.168.2.7	1.1.1.1	0x3db1	Standard query (0)	friolog.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.774877071 CEST	192.168.2.7	1.1.1.1	0xb69	Standard query (0)	securesmtp.dljialin.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.891510963 CEST	192.168.2.7	1.1.1.1	0x2a4a	Standard query (0)	securesmtp.watermaker.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.891822100 CEST	192.168.2.7	1.1.1.1	0x5ca6	Standard query (0)	smtp.a1.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.892283916 CEST	192.168.2.7	1.1.1.1	0x4ab9	Standard query (0)	mx2.mail.ovh.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.892285109 CEST	192.168.2.7	1.1.1.1	0xa2be	Standard query (0)	smtp.friendzzzz.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.892736912 CEST	192.168.2.7	1.1.1.1	0xa86e	Standard query (0)	secure.netsite.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.927701950 CEST	192.168.2.7	1.1.1.1	0x689a	Standard query (0)	smtp.hi-ho.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.927824974 CEST	192.168.2.7	1.1.1.1	0x2abd	Standard query (0)	secure.trane.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.048928022 CEST	192.168.2.7	1.1.1.1	0x1f68	Standard query (0)	smtp.groupamapj.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.049153090 CEST	192.168.2.7	1.1.1.1	0xc951	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.049510002 CEST	192.168.2.7	1.1.1.1	0x70d5	Standard query (0)	mail.elcor.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.049828053 CEST	192.168.2.7	1.1.1.1	0xd25d	Standard query (0)	acosystems.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.050131083 CEST	192.168.2.7	1.1.1.1	0x23cb	Standard query (0)	mail.tvliberdadeal.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.166131973 CEST	192.168.2.7	1.1.1.1	0x67fb	Standard query (0)	mail.bme-dannehl.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.166421890 CEST	192.168.2.7	1.1.1.1	0x7c4d	Standard query (0)	walla.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.166421890 CEST	192.168.2.7	1.1.1.1	0x8d79	Standard query (0)	mx.generic-isp.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.166572094 CEST	192.168.2.7	1.1.1.1	0xb778	Standard query (0)	ctis.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.324050903 CEST	192.168.2.7	1.1.1.1	0x9b77	Standard query (0)	securesmtp.oktopusgroup.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.324337006 CEST	192.168.2.7	1.1.1.1	0x56e0	Standard query (0)	out.kult-medien.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.324625015 CEST	192.168.2.7	1.1.1.1	0x7689	Standard query (0)	bizavmta1.netvigator.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.324925900 CEST	192.168.2.7	1.1.1.1	0x979e	Standard query (0)	mail.gate6.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.325303078 CEST	192.168.2.7	1.1.1.1	0x486d	Standard query (0)	secure.cemcs.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.441756964 CEST	192.168.2.7	1.1.1.1	0x1ba7	Standard query (0)	smtp.studioviterbo.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.442136049 CEST	192.168.2.7	1.1.1.1	0x7533	Standard query (0)	humangest.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.442421913 CEST	192.168.2.7	1.1.1.1	0xb733	Standard query (0)	out.grandschools.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.570200920 CEST	192.168.2.7	1.1.1.1	0x983f	Standard query (0)	secure.angyy.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.570400953 CEST	192.168.2.7	1.1.1.1	0x5662	Standard query (0)	theparlournola-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.689671993 CEST	192.168.2.7	1.1.1.1	0xb1f5	Standard query (0)	justmysafety.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.690241098 CEST	192.168.2.7	1.1.1.1	0xd0ae	Standard query (0)	mail-gateway02.imaginet.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.787777901 CEST	192.168.2.7	1.1.1.1	0x7c3a	Standard query (0)	smtp.godtfredlarsen.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.815583944 CEST	192.168.2.7	1.1.1.1	0x9fa5	Standard query (0)	mail.informek.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.816071987 CEST	192.168.2.7	1.1.1.1	0x5f52	Standard query (0)	securesmtp.consultday.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.816556931 CEST	192.168.2.7	1.1.1.1	0xfd72	Standard query (0)	mail.medantravel.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.951519012 CEST	192.168.2.7	1.1.1.1	0x171f	Standard query (0)	out.jmi.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.952122927 CEST	192.168.2.7	1.1.1.1	0xafca	Standard query (0)	mail.creatiefmetpsp.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.952122927 CEST	192.168.2.7	1.1.1.1	0x66a0	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.952507019 CEST	192.168.2.7	1.1.1.1	0xd2c	Standard query (0)	pec.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.952627897 CEST	192.168.2.7	1.1.1.1	0x75b6	Standard query (0)	out.erdemirmaden.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.952688932 CEST	192.168.2.7	1.1.1.1	0x92d	Standard query (0)	ownme.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.952945948 CEST	192.168.2.7	1.1.1.1	0xb414	Standard query (0)	testwww.commandersofevony.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.952945948 CEST	192.168.2.7	1.1.1.1	0x539d	Standard query (0)	smtp.778e2180c2.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.064506054 CEST	192.168.2.7	1.1.1.1	0x71fb	Standard query (0)	education.nsw.gov.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.065363884 CEST	192.168.2.7	1.1.1.1	0x215	Standard query (0)	wallinses.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.209471941 CEST	192.168.2.7	1.1.1.1	0x4819	Standard query (0)	out.fit-kitchens.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.215138912 CEST	192.168.2.7	1.1.1.1	0x89d6	Standard query (0)	lugten.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.331362963 CEST	192.168.2.7	1.1.1.1	0x9601	Standard query (0)	firstchoicecreditservice.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.331926107 CEST	192.168.2.7	1.1.1.1	0xa627	Standard query (0)	mail.imansystem.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.332046032 CEST	192.168.2.7	1.1.1.1	0x4f88	Standard query (0)	securesmtp.chiangmaicitylife.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.332295895 CEST	192.168.2.7	1.1.1.1	0x73e9	Standard query (0)	smtp.radiounderdog.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.332513094 CEST	192.168.2.7	1.1.1.1	0xc521	Standard query (0)	mail.e4.kepco.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.459289074 CEST	192.168.2.7	1.1.1.1	0x5d99	Standard query (0)	smtp.icocscuole.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.459289074 CEST	192.168.2.7	1.1.1.1	0x61ec	Standard query (0)	ioc.uka.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.460199118 CEST	192.168.2.7	1.1.1.1	0x3c65	Standard query (0)	smtp.zyndopa.info	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.582068920 CEST	192.168.2.7	1.1.1.1	0xebb3	Standard query (0)	out.magnasys.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.582370043 CEST	192.168.2.7	1.1.1.1	0x4f24	Standard query (0)	out.itworks2000.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.582447052 CEST	192.168.2.7	1.1.1.1	0xd156	Standard query (0)	smtp.asato.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.705194950 CEST	192.168.2.7	1.1.1.1	0xeff5	Standard query (0)	smtp.mca.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.705408096 CEST	192.168.2.7	1.1.1.1	0x2c78	Standard query (0)	procanenergy.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.705645084 CEST	192.168.2.7	1.1.1.1	0x3bad	Standard query (0)	sinclairengineering.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.824460983 CEST	192.168.2.7	1.1.1.1	0xd46f	Standard query (0)	securesmtp.insomit.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.825144053 CEST	192.168.2.7	1.1.1.1	0x718e	Standard query (0)	out.staginat.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.825213909 CEST	192.168.2.7	1.1.1.1	0x150d	Standard query (0)	secure.insdecaldes.cat	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.825540066 CEST	192.168.2.7	1.1.1.1	0x4148	Standard query (0)	securesmtp.inpar.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.943952084 CEST	192.168.2.7	1.1.1.1	0xafca	Standard query (0)	mail.creatiefmetpsp.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.956878901 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	mail.creatiefmetpsp.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.957528114 CEST	192.168.2.7	1.1.1.1	0xf5d3	Standard query (0)	stu.chiarts.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.959276915 CEST	192.168.2.7	1.1.1.1	0x7999	Standard query (0)	securesmtp.elektrumcorp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.959983110 CEST	192.168.2.7	1.1.1.1	0x118d	Standard query (0)	mail.ahg-gmbh.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.960509062 CEST	192.168.2.7	1.1.1.1	0xefc2	Standard query (0)	mail.dhollnack.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.076559067 CEST	192.168.2.7	1.1.1.1	0xc015	Standard query (0)	ad10f49fc0.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.076889992 CEST	192.168.2.7	1.1.1.1	0x8d67	Standard query (0)	secure.kolinapremier.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.076889992 CEST	192.168.2.7	1.1.1.1	0xbba9	Standard query (0)	mail.qatar.net.qa	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.077301979 CEST	192.168.2.7	1.1.1.1	0x5faa	Standard query (0)	smtp.winner10.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.200680017 CEST	192.168.2.7	1.1.1.1	0x1452	Standard query (0)	mail.apart-architecten.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.201318979 CEST	192.168.2.7	1.1.1.1	0x6ddf	Standard query (0)	out.mail1.dm24.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.201380014 CEST	192.168.2.7	1.1.1.1	0xb49f	Standard query (0)	smtp3.einzelnet.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.201673985 CEST	192.168.2.7	1.1.1.1	0x26a9	Standard query (0)	mail.rcn.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.327733040 CEST	192.168.2.7	1.1.1.1	0x1fe1	Standard query (0)	maasdriel.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.328075886 CEST	192.168.2.7	1.1.1.1	0xdcfe	Standard query (0)	smtp.cocararaquara.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.448354006 CEST	192.168.2.7	1.1.1.1	0x308c	Standard query (0)	smtp.boehnkepartner.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.448504925 CEST	192.168.2.7	1.1.1.1	0xb4d1	Standard query (0)	mail.com.totaltexto.bancamovil	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.448851109 CEST	192.168.2.7	1.1.1.1	0xa11f	Standard query (0)	securesmtp.auseg.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.572906017 CEST	192.168.2.7	1.1.1.1	0xd41	Standard query (0)	mail.thbservices.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.573510885 CEST	192.168.2.7	1.1.1.1	0x2297	Standard query (0)	out.angalahotels.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.694135904 CEST	192.168.2.7	1.1.1.1	0xbb21	Standard query (0)	secure.eurogroupconsulting.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.694333076 CEST	192.168.2.7	1.1.1.1	0xbee3	Standard query (0)	smtp.dice.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.695400953 CEST	192.168.2.7	1.1.1.1	0x4d0e	Standard query (0)	mail.gci.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.814182043 CEST	192.168.2.7	1.1.1.1	0xe1c9	Standard query (0)	secure.ee.iitism.ac.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.814716101 CEST	192.168.2.7	1.1.1.1	0x2fe5	Standard query (0)	daee-sp-gov-br.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.815113068 CEST	192.168.2.7	1.1.1.1	0xbcff	Standard query (0)	haystack.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.949263096 CEST	192.168.2.7	1.1.1.1	0x2144	Standard query (0)	secure.mairie-forbach.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.949774981 CEST	192.168.2.7	1.1.1.1	0x6312	Standard query (0)	m4.kcn.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.949871063 CEST	192.168.2.7	1.1.1.1	0x3c4e	Standard query (0)	mail.bleakmusic.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.950179100 CEST	192.168.2.7	1.1.1.1	0x1741	Standard query (0)	mx02.htp-tel.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.950664043 CEST	192.168.2.7	1.1.1.1	0x6251	Standard query (0)	out.ot-meursault.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.063673973 CEST	192.168.2.7	1.1.1.1	0xff38	Standard query (0)	secure.iadc.com.cn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.064088106 CEST	192.168.2.7	1.1.1.1	0xb70b	Standard query (0)	mail.before.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.188710928 CEST	192.168.2.7	1.1.1.1	0xb3cb	Standard query (0)	securesmtp.salonidis.gr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.189292908 CEST	192.168.2.7	1.1.1.1	0x1b6c	Standard query (0)	smtp.polifiltro.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.189771891 CEST	192.168.2.7	1.1.1.1	0x4ca0	Standard query (0)	smtp.cirumed.med.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.190119982 CEST	192.168.2.7	1.1.1.1	0x2830	Standard query (0)	luchtjeswinkel.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.309952021 CEST	192.168.2.7	1.1.1.1	0xd2	Standard query (0)	mail.lky.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.310233116 CEST	192.168.2.7	1.1.1.1	0x74dc	Standard query (0)	lasd.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.310368061 CEST	192.168.2.7	1.1.1.1	0x7e08	Standard query (0)	out.shorelineambulance.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.310669899 CEST	192.168.2.7	1.1.1.1	0xeb03	Standard query (0)	securesmtp.linguserve.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.334397078 CEST	192.168.2.7	1.1.1.1	0xdcfe	Standard query (0)	smtp.cocararaquara.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.429946899 CEST	192.168.2.7	1.1.1.1	0x2596	Standard query (0)	secure.mato.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.430244923 CEST	192.168.2.7	1.1.1.1	0x4452	Standard query (0)	spacestudios.org.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.430480003 CEST	192.168.2.7	1.1.1.1	0x263f	Standard query (0)	securesmtp.circusbar.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.430859089 CEST	192.168.2.7	1.1.1.1	0xc6ca	Standard query (0)	smtp-01.tld.t-online.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.431329966 CEST	192.168.2.7	1.1.1.1	0xaa63	Standard query (0)	secure.screen-lasse.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.561580896 CEST	192.168.2.7	1.1.1.1	0x14bc	Standard query (0)	secure.hancertelekom.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.578538895 CEST	192.168.2.7	1.1.1.1	0xcf06	Standard query (0)	smtp.aspexpos.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.674382925 CEST	192.168.2.7	1.1.1.1	0x1bb5	Standard query (0)	alver.biz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.674724102 CEST	192.168.2.7	1.1.1.1	0x92a8	Standard query (0)	securesmtp.prof.facape.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.675519943 CEST	192.168.2.7	1.1.1.1	0x5789	Standard query (0)	secure.estadao.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.825941086 CEST	192.168.2.7	1.1.1.1	0x48b5	Standard query (0)	out.fewrfwe.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.841830969 CEST	192.168.2.7	1.1.1.1	0x5e6d	Standard query (0)	pobox.sk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.842911959 CEST	192.168.2.7	1.1.1.1	0xb2b7	Standard query (0)	securesmtp.studioferrari.re.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.952871084 CEST	192.168.2.7	1.1.1.1	0x4530	Standard query (0)	mail.grupoats.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.953337908 CEST	192.168.2.7	1.1.1.1	0x4517	Standard query (0)	wamlogistik.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.953485012 CEST	192.168.2.7	1.1.1.1	0x4a11	Standard query (0)	smtp.birdwoodfilms.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.953710079 CEST	192.168.2.7	1.1.1.1	0x9c81	Standard query (0)	sancharnet.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.059417963 CEST	192.168.2.7	1.1.1.1	0xee82	Standard query (0)	secure.ffmaniax.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.177643061 CEST	192.168.2.7	1.1.1.1	0x4ca0	Standard query (0)	smtp.cirumed.med.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.186795950 CEST	192.168.2.7	1.1.1.1	0x9773	Standard query (0)	out.ocean-tel.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.187062979 CEST	192.168.2.7	1.1.1.1	0x4196	Standard query (0)	smtp.ryansignage.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.187179089 CEST	192.168.2.7	1.1.1.1	0xb68c	Standard query (0)	securesmtp.cm-lagos.pt	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.187446117 CEST	192.168.2.7	1.1.1.1	0x2d6f	Standard query (0)	smtp.hessengarge.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.187446117 CEST	192.168.2.7	1.1.1.1	0x9338	Standard query (0)	smtp.yaohing.com.tw	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.304500103 CEST	192.168.2.7	1.1.1.1	0xe165	Standard query (0)	exchange.imagine.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.305370092 CEST	192.168.2.7	1.1.1.1	0x17b	Standard query (0)	smtp.ows.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.443865061 CEST	192.168.2.7	1.1.1.1	0x263f	Standard query (0)	securesmtp.circusbar.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.582937002 CEST	192.168.2.7	1.1.1.1	0xda91	Standard query (0)	mail.5thnq1.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.584254026 CEST	192.168.2.7	1.1.1.1	0x136c	Standard query (0)	sdt.uni-eszterhazy.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.584306955 CEST	192.168.2.7	1.1.1.1	0x76b5	Standard query (0)	smtp.metaarch.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.584506989 CEST	192.168.2.7	1.1.1.1	0x7188	Standard query (0)	mx1.telecable.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.584724903 CEST	192.168.2.7	1.1.1.1	0xd04	Standard query (0)	upcmail.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.584778070 CEST	192.168.2.7	1.1.1.1	0x40e	Standard query (0)	smtp.martinelauwers.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.706847906 CEST	192.168.2.7	1.1.1.1	0xc969	Standard query (0)	securesmtp.tacom.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.707458973 CEST	192.168.2.7	1.1.1.1	0xffd2	Standard query (0)	securesmtp.powerdrives.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.707920074 CEST	192.168.2.7	1.1.1.1	0xb352	Standard query (0)	smtp.crownpoly.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.708878040 CEST	192.168.2.7	1.1.1.1	0x2537	Standard query (0)	diplodigital.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.709073067 CEST	192.168.2.7	1.1.1.1	0xd3c7	Standard query (0)	smtp.statusracingteam.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.709507942 CEST	192.168.2.7	1.1.1.1	0x70cf	Standard query (0)	mail.movistar.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.825098038 CEST	192.168.2.7	1.1.1.1	0xc802	Standard query (0)	secure.gmaihl.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.825233936 CEST	192.168.2.7	1.1.1.1	0xa7e1	Standard query (0)	smtp.eesinc.cc	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.955846071 CEST	192.168.2.7	1.1.1.1	0xeab4	Standard query (0)	secure.micro.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.956168890 CEST	192.168.2.7	1.1.1.1	0xb633	Standard query (0)	secure.acrelec.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.956449032 CEST	192.168.2.7	1.1.1.1	0xb017	Standard query (0)	securesmtp.micronla.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.957092047 CEST	192.168.2.7	1.1.1.1	0xf606	Standard query (0)	itelefonica.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.957267046 CEST	192.168.2.7	1.1.1.1	0x2e58	Standard query (0)	mesan.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.957298994 CEST	192.168.2.7	1.1.1.1	0x1fcc	Standard query (0)	secure.inovasuporte.xsp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.079082012 CEST	192.168.2.7	1.1.1.1	0x28fc	Standard query (0)	advantech.com.tw	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.079334021 CEST	192.168.2.7	1.1.1.1	0x8f4d	Standard query (0)	adrenacom.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.080275059 CEST	192.168.2.7	1.1.1.1	0x1f86	Standard query (0)	example55647df21f0d6.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.098340034 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	example55647df21f0d6.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.193142891 CEST	192.168.2.7	1.1.1.1	0x4ca0	Standard query (0)	smtp.cirumed.med.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.193142891 CEST	192.168.2.7	1.1.1.1	0x9338	Standard query (0)	smtp.yaohing.com.tw	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.205427885 CEST	192.168.2.7	1.1.1.1	0x7a43	Standard query (0)	izihub.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.205703020 CEST	192.168.2.7	1.1.1.1	0xcb67	Standard query (0)	com4.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.205703020 CEST	192.168.2.7	1.1.1.1	0x9889	Standard query (0)	securesmtp.rd.bbc.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.205948114 CEST	192.168.2.7	1.1.1.1	0xcf87	Standard query (0)	mail.iowatelecom.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.325225115 CEST	192.168.2.7	1.1.1.1	0xed62	Standard query (0)	out.multservices.srv.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.325623989 CEST	192.168.2.7	1.1.1.1	0xd1bd	Standard query (0)	mx.adephia.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.326066971 CEST	192.168.2.7	1.1.1.1	0xf974	Standard query (0)	smtp.brianamanning.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.326066971 CEST	192.168.2.7	1.1.1.1	0x2960	Standard query (0)	out.foxcreeksolutions.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.326273918 CEST	192.168.2.7	1.1.1.1	0xf097	Standard query (0)	smlys.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.456984997 CEST	192.168.2.7	1.1.1.1	0xda3c	Standard query (0)	out.wpcreno.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.457283020 CEST	192.168.2.7	1.1.1.1	0x2b13	Standard query (0)	ayou.info	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.457283020 CEST	192.168.2.7	1.1.1.1	0xbb0c	Standard query (0)	korbitec.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.457428932 CEST	192.168.2.7	1.1.1.1	0xf3cf	Standard query (0)	secure.dominioinfo.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.578026056 CEST	192.168.2.7	1.1.1.1	0x3991	Standard query (0)	dlbo.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.578628063 CEST	192.168.2.7	1.1.1.1	0xe350	Standard query (0)	smtp.energis.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.578706980 CEST	192.168.2.7	1.1.1.1	0x1ab6	Standard query (0)	student.isd2899.k12.mn.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.579024076 CEST	192.168.2.7	1.1.1.1	0xc8a1	Standard query (0)	smtp.manuel-theis.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.579266071 CEST	192.168.2.7	1.1.1.1	0x2bb7	Standard query (0)	candc.co.il	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.579580069 CEST	192.168.2.7	1.1.1.1	0xc136	Standard query (0)	secure.fgkfkdg.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.579668999 CEST	192.168.2.7	1.1.1.1	0x81fd	Standard query (0)	mynet.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.702534914 CEST	192.168.2.7	1.1.1.1	0xafae	Standard query (0)	bunnysoftware.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.702534914 CEST	192.168.2.7	1.1.1.1	0x4533	Standard query (0)	securesmtp.eneco.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.702969074 CEST	192.168.2.7	1.1.1.1	0x182f	Standard query (0)	secure.globalnet.hr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.825829029 CEST	192.168.2.7	1.1.1.1	0xac66	Standard query (0)	mail.joneslawfirmwi.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.826937914 CEST	192.168.2.7	1.1.1.1	0x3310	Standard query (0)	smtp.eliotanthea.plus.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.827399015 CEST	192.168.2.7	1.1.1.1	0x26ac	Standard query (0)	smtp.studio66group.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.829246998 CEST	192.168.2.7	1.1.1.1	0xe3df	Standard query (0)	out.comune.valmorea.co.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.981828928 CEST	192.168.2.7	1.1.1.1	0xf6cc	Standard query (0)	premiumpassport.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.997087002 CEST	192.168.2.7	1.1.1.1	0x8a6c	Standard query (0)	smtp.pc.707.to	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.096415997 CEST	192.168.2.7	1.1.1.1	0x4278	Standard query (0)	worien.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.096966982 CEST	192.168.2.7	1.1.1.1	0x561c	Standard query (0)	zdfpost.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.096966982 CEST	192.168.2.7	1.1.1.1	0xb312	Standard query (0)	secure.pmolatam.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.222774029 CEST	192.168.2.7	1.1.1.1	0xa1ad	Standard query (0)	securesmtp.tobiaszander.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.223507881 CEST	192.168.2.7	1.1.1.1	0x35b0	Standard query (0)	smtp.clealco.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.345382929 CEST	192.168.2.7	1.1.1.1	0xa2ea	Standard query (0)	mail.littleredrooster.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.345669985 CEST	192.168.2.7	1.1.1.1	0x7ac9	Standard query (0)	smtp.nadiarealestate.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.345995903 CEST	192.168.2.7	1.1.1.1	0x1d43	Standard query (0)	out.happiestminds.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.465787888 CEST	192.168.2.7	1.1.1.1	0x4ca6	Standard query (0)	smtp.polbath.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.465787888 CEST	192.168.2.7	1.1.1.1	0x779	Standard query (0)	secure.vigilfuoco.bologna.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.465787888 CEST	192.168.2.7	1.1.1.1	0x5f36	Standard query (0)	securesmtp.grupomelo.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.466109991 CEST	192.168.2.7	1.1.1.1	0x57d2	Standard query (0)	secure.okg.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.593456030 CEST	192.168.2.7	1.1.1.1	0xd351	Standard query (0)	ALT3.ASPMX.L.GOOGLE.COM	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.593770027 CEST	192.168.2.7	1.1.1.1	0x76af	Standard query (0)	virtualys.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.594717026 CEST	192.168.2.7	1.1.1.1	0xa402	Standard query (0)	smtp.jybh.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.712318897 CEST	192.168.2.7	1.1.1.1	0xa9ad	Standard query (0)	csc-mail-pop-02.certto.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.713011026 CEST	192.168.2.7	1.1.1.1	0x6c7f	Standard query (0)	nesul.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.845339060 CEST	192.168.2.7	1.1.1.1	0xf785	Standard query (0)	securesmtp.creativebrain.co.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.845844984 CEST	192.168.2.7	1.1.1.1	0x68d5	Standard query (0)	smtp.elthammarket.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.846035004 CEST	192.168.2.7	1.1.1.1	0x2b0c	Standard query (0)	secure.imaisdigital.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.960149050 CEST	192.168.2.7	1.1.1.1	0x1f42	Standard query (0)	smtp.groupe-cachera.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.990183115 CEST	192.168.2.7	1.1.1.1	0x8a6c	Standard query (0)	smtp.pc.707.to	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.004601955 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	smtp.pc.707.to	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.090421915 CEST	192.168.2.7	1.1.1.1	0x20da	Standard query (0)	smtp.appleholic.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.090728045 CEST	192.168.2.7	1.1.1.1	0x3ba1	Standard query (0)	mx001.netsol.xion.oxcs.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.091176987 CEST	192.168.2.7	1.1.1.1	0xd1fe	Standard query (0)	securesmtp.fschierle.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.209559917 CEST	192.168.2.7	1.1.1.1	0x4ca0	Standard query (0)	smtp.cirumed.med.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.210864067 CEST	192.168.2.7	1.1.1.1	0xc1b2	Standard query (0)	mail.elegantproperties.co.ke	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.210864067 CEST	192.168.2.7	1.1.1.1	0x53ba	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.211180925 CEST	192.168.2.7	1.1.1.1	0x8c56	Standard query (0)	mail.gomun.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.211180925 CEST	192.168.2.7	1.1.1.1	0xe57d	Standard query (0)	securesmtp.carmelacarnes.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.223611116 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.335973024 CEST	192.168.2.7	1.1.1.1	0xb5bb	Standard query (0)	secure.maxberryconsulting.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.336410046 CEST	192.168.2.7	1.1.1.1	0xc3f7	Standard query (0)	mail.ollydayy.site	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.455192089 CEST	192.168.2.7	1.1.1.1	0xd93f	Standard query (0)	out.ltd-edition.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.455662966 CEST	192.168.2.7	1.1.1.1	0xa837	Standard query (0)	out.alunos.estacio.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.455662966 CEST	192.168.2.7	1.1.1.1	0x344	Standard query (0)	secure.reckkommunikation.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.582393885 CEST	192.168.2.7	1.1.1.1	0x37ae	Standard query (0)	mail.scarlet.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.582547903 CEST	192.168.2.7	1.1.1.1	0xe56b	Standard query (0)	marketplace.amazon.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.582648993 CEST	192.168.2.7	1.1.1.1	0xfcbe	Standard query (0)	secure.bctbenefits.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.583236933 CEST	192.168.2.7	1.1.1.1	0x364	Standard query (0)	themedialab.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.583774090 CEST	192.168.2.7	1.1.1.1	0xa402	Standard query (0)	smtp.jybh.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.596694946 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	smtp.jybh.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.701148033 CEST	192.168.2.7	1.1.1.1	0x1c50	Standard query (0)	mx1.hostinger.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.701610088 CEST	192.168.2.7	1.1.1.1	0xb50e	Standard query (0)	securesmtp.familjenedvardsson.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.701956034 CEST	192.168.2.7	1.1.1.1	0xed47	Standard query (0)	smtp.somissound.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.827181101 CEST	192.168.2.7	1.1.1.1	0xab6c	Standard query (0)	smtp.mv-hallstadt.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.827795029 CEST	192.168.2.7	1.1.1.1	0x4916	Standard query (0)	secure.zoom-a.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.827848911 CEST	192.168.2.7	1.1.1.1	0xb04a	Standard query (0)	aerotec-argentina.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.833889008 CEST	192.168.2.7	1.1.1.1	0x68d5	Standard query (0)	smtp.elthammarket.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.950913906 CEST	192.168.2.7	1.1.1.1	0x4a61	Standard query (0)	d238560.a.ess.uk.barracudanetworks.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.951011896 CEST	192.168.2.7	1.1.1.1	0x2da8	Standard query (0)	mail.optica-optima.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.073877096 CEST	192.168.2.7	1.1.1.1	0xd57f	Standard query (0)	securesmtp.thesweetlifeonline.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.074126959 CEST	192.168.2.7	1.1.1.1	0x8fef	Standard query (0)	securesmtp.vws.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.074374914 CEST	192.168.2.7	1.1.1.1	0xe22c	Standard query (0)	todoviajes.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.076208115 CEST	192.168.2.7	1.1.1.1	0x505f	Standard query (0)	ybb.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.191931963 CEST	192.168.2.7	1.1.1.1	0x8ddf	Standard query (0)	trinityruston.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.193520069 CEST	192.168.2.7	1.1.1.1	0x2e8e	Standard query (0)	out.infokap.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.209013939 CEST	192.168.2.7	1.1.1.1	0x8c56	Standard query (0)	mail.gomun.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.679147005 CEST	192.168.2.7	1.1.1.1	0x9f22	Standard query (0)	out.unindustria.rovigo.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.680131912 CEST	192.168.2.7	1.1.1.1	0xbf67	Standard query (0)	rdmz.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.680131912 CEST	192.168.2.7	1.1.1.1	0xa557	Standard query (0)	mail.dsgsdgsdfg.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.680706978 CEST	192.168.2.7	1.1.1.1	0xccf2	Standard query (0)	securesmtp.prodspublicidad.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.681021929 CEST	192.168.2.7	1.1.1.1	0x752f	Standard query (0)	secure.netsite.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.681253910 CEST	192.168.2.7	1.1.1.1	0xd549	Standard query (0)	mail.emalahleni.gov.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.681668043 CEST	192.168.2.7	1.1.1.1	0xd0af	Standard query (0)	smtp.minhtam.tv	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.681806087 CEST	192.168.2.7	1.1.1.1	0xd229	Standard query (0)	securesmtp.tunisia-tunisia.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.726182938 CEST	192.168.2.7	1.1.1.1	0x1793	Standard query (0)	novologistics.com.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.726722956 CEST	192.168.2.7	1.1.1.1	0x6aa0	Standard query (0)	stjamesexeter.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.727364063 CEST	192.168.2.7	1.1.1.1	0x3107	Standard query (0)	mail.sajco.ac.tz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.727502108 CEST	192.168.2.7	1.1.1.1	0xb1d7	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.727837086 CEST	192.168.2.7	1.1.1.1	0xf35a	Standard query (0)	secure.roncarey.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.849231958 CEST	192.168.2.7	1.1.1.1	0x68d5	Standard query (0)	smtp.elthammarket.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.849710941 CEST	192.168.2.7	1.1.1.1	0xf05	Standard query (0)	bigpond.net.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.850222111 CEST	192.168.2.7	1.1.1.1	0xa01f	Standard query (0)	out.dongnae.ms.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.961121082 CEST	192.168.2.7	1.1.1.1	0x9dc9	Standard query (0)	securesmtp.kcazt.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.961534023 CEST	192.168.2.7	1.1.1.1	0xda6a	Standard query (0)	out.pontianakkota.go.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.093401909 CEST	192.168.2.7	1.1.1.1	0x8d5c	Standard query (0)	smtp.employeebuddy.co.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.093522072 CEST	192.168.2.7	1.1.1.1	0x63d1	Standard query (0)	hzmx01.mxmail.netease.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.093772888 CEST	192.168.2.7	1.1.1.1	0x4263	Standard query (0)	securesmtp.sikor.co.il	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.094130993 CEST	192.168.2.7	1.1.1.1	0x51d8	Standard query (0)	doutorempresas.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.094413042 CEST	192.168.2.7	1.1.1.1	0xd44e	Standard query (0)	irati.unicentro.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.094728947 CEST	192.168.2.7	1.1.1.1	0xe7b5	Standard query (0)	secure.mojag.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.213874102 CEST	192.168.2.7	1.1.1.1	0xdca2	Standard query (0)	out.shz.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.213874102 CEST	192.168.2.7	1.1.1.1	0x1f37	Standard query (0)	securesmtp.informationtechnologyservices.com.pk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.339519024 CEST	192.168.2.7	1.1.1.1	0x251a	Standard query (0)	yaoo.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.340497971 CEST	192.168.2.7	1.1.1.1	0xec34	Standard query (0)	securesmtp.lang.ox.ac.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.340498924 CEST	192.168.2.7	1.1.1.1	0xa453	Standard query (0)	out.i-a-i.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.467662096 CEST	192.168.2.7	1.1.1.1	0x750c	Standard query (0)	smtp.uasinc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.467936993 CEST	192.168.2.7	1.1.1.1	0xcef7	Standard query (0)	mail.bg	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.468086958 CEST	192.168.2.7	1.1.1.1	0x22c0	Standard query (0)	smtp.southern.k12.oh.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.468246937 CEST	192.168.2.7	1.1.1.1	0xfad8	Standard query (0)	mail.joenieters.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.586322069 CEST	192.168.2.7	1.1.1.1	0xf45b	Standard query (0)	myalappraiser.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.586610079 CEST	192.168.2.7	1.1.1.1	0xda6	Standard query (0)	securesmtp.skybrasilia.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.586895943 CEST	192.168.2.7	1.1.1.1	0xd4e6	Standard query (0)	securesmtp.sng-edu.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.587308884 CEST	192.168.2.7	1.1.1.1	0x57e8	Standard query (0)	airmail.az	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.704143047 CEST	192.168.2.7	1.1.1.1	0x7652	Standard query (0)	pispl.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.704651117 CEST	192.168.2.7	1.1.1.1	0x893f	Standard query (0)	secure.makmurmeta.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.704857111 CEST	192.168.2.7	1.1.1.1	0x629c	Standard query (0)	securesmtp.uberliss.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.705363989 CEST	192.168.2.7	1.1.1.1	0xcd87	Standard query (0)	dsilaser.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.833833933 CEST	192.168.2.7	1.1.1.1	0x8f60	Standard query (0)	beanztech.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.834466934 CEST	192.168.2.7	1.1.1.1	0x903c	Standard query (0)	mail.fliegerundco.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.834466934 CEST	192.168.2.7	1.1.1.1	0xffa6	Standard query (0)	mail.bonettoimmobiliare.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.835501909 CEST	192.168.2.7	1.1.1.1	0x10e6	Standard query (0)	secure.nadinesfolly.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.952745914 CEST	192.168.2.7	1.1.1.1	0x56e7	Standard query (0)	maxmara.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.953111887 CEST	192.168.2.7	1.1.1.1	0xe63a	Standard query (0)	mail.dhollnack.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.953228951 CEST	192.168.2.7	1.1.1.1	0x73ed	Standard query (0)	mail.storepraticidade.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.974701881 CEST	192.168.2.7	1.1.1.1	0xda6a	Standard query (0)	out.pontianakkota.go.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.079895020 CEST	192.168.2.7	1.1.1.1	0xe0e2	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.080214024 CEST	192.168.2.7	1.1.1.1	0xda0	Standard query (0)	orpheus.net.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.201205015 CEST	192.168.2.7	1.1.1.1	0xacb4	Standard query (0)	securesmtp.majcherczyk.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.201591969 CEST	192.168.2.7	1.1.1.1	0xe2af	Standard query (0)	out.fountainheadschool.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.202280998 CEST	192.168.2.7	1.1.1.1	0x7752	Standard query (0)	smtp.century21egerie.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.202581882 CEST	192.168.2.7	1.1.1.1	0x5223	Standard query (0)	securesmtp.botanique.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.319323063 CEST	192.168.2.7	1.1.1.1	0xaa73	Standard query (0)	talismaconstrutora.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.319643974 CEST	192.168.2.7	1.1.1.1	0x1e9b	Standard query (0)	secure.tarunabakti.sch.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.440927982 CEST	192.168.2.7	1.1.1.1	0x38c4	Standard query (0)	lichtstark.media	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.441303968 CEST	192.168.2.7	1.1.1.1	0xb03	Standard query (0)	smtp.pro-cad.si	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.565684080 CEST	192.168.2.7	1.1.1.1	0xf70b	Standard query (0)	aiona.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.565934896 CEST	192.168.2.7	1.1.1.1	0x9c23	Standard query (0)	rekmar.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.566569090 CEST	192.168.2.7	1.1.1.1	0x8bb2	Standard query (0)	out.artdefekts.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.683530092 CEST	192.168.2.7	1.1.1.1	0x8b71	Standard query (0)	out.pop.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.683953047 CEST	192.168.2.7	1.1.1.1	0x925e	Standard query (0)	out.conneryconsultingllc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.805701017 CEST	192.168.2.7	1.1.1.1	0xf80f	Standard query (0)	securesmtp.abbot-travel.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.806452990 CEST	192.168.2.7	1.1.1.1	0xad9b	Standard query (0)	wbminternational.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.806794882 CEST	192.168.2.7	1.1.1.1	0xbf43	Standard query (0)	mail.passaura.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.807230949 CEST	192.168.2.7	1.1.1.1	0x9b80	Standard query (0)	mail.klautec.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.994143009 CEST	192.168.2.7	1.1.1.1	0xda6a	Standard query (0)	out.pontianakkota.go.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.051964045 CEST	192.168.2.7	1.1.1.1	0x6883	Standard query (0)	securesmtp.ktb.co.th	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.052908897 CEST	192.168.2.7	1.1.1.1	0x78cf	Standard query (0)	smtp.xstreamdesign.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.188555002 CEST	192.168.2.7	1.1.1.1	0xd13e	Standard query (0)	fsus.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.189158916 CEST	192.168.2.7	1.1.1.1	0xece	Standard query (0)	christoph-wettstein.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.303236961 CEST	192.168.2.7	1.1.1.1	0x9d84	Standard query (0)	out.opentradeoficial.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.303445101 CEST	192.168.2.7	1.1.1.1	0x1254	Standard query (0)	alt1.aspmx1.google.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.303555012 CEST	192.168.2.7	1.1.1.1	0xeacc	Standard query (0)	mail.adithyanews.co.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.303929090 CEST	192.168.2.7	1.1.1.1	0x9c8b	Standard query (0)	mail.b-io.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.433255911 CEST	192.168.2.7	1.1.1.1	0x3152	Standard query (0)	secure.espinho.tc.mj.pt	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.433542967 CEST	192.168.2.7	1.1.1.1	0xc037	Standard query (0)	securesmtp.rku.ac.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.433830023 CEST	192.168.2.7	1.1.1.1	0xe14f	Standard query (0)	mail.hplush.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.563731909 CEST	192.168.2.7	1.1.1.1	0x4e2e	Standard query (0)	smtp.creative-solutions.com.ua	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.564021111 CEST	192.168.2.7	1.1.1.1	0x88df	Standard query (0)	marketplace.amazon.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.564263105 CEST	192.168.2.7	1.1.1.1	0x1c40	Standard query (0)	out.werbefactory24.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.701906919 CEST	192.168.2.7	1.1.1.1	0x579a	Standard query (0)	out.kaehny.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.702290058 CEST	192.168.2.7	1.1.1.1	0x8b91	Standard query (0)	out.canfga.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.702569962 CEST	192.168.2.7	1.1.1.1	0x6486	Standard query (0)	secure.lowegorzewo.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.812006950 CEST	192.168.2.7	1.1.1.1	0x4da1	Standard query (0)	smtp.ok.ac.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.812658072 CEST	192.168.2.7	1.1.1.1	0x7381	Standard query (0)	logisticazonasur.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.813462019 CEST	192.168.2.7	1.1.1.1	0x66df	Standard query (0)	out.snapportraits.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.952708960 CEST	192.168.2.7	1.1.1.1	0x1fd6	Standard query (0)	adistec.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.953351021 CEST	192.168.2.7	1.1.1.1	0x9ac0	Standard query (0)	mail.amars.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.953460932 CEST	192.168.2.7	1.1.1.1	0x194	Standard query (0)	out.crcpa.org.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.060873985 CEST	192.168.2.7	1.1.1.1	0xa86c	Standard query (0)	secure.summit.solar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.061218977 CEST	192.168.2.7	1.1.1.1	0x5241	Standard query (0)	secure.nilopolis.rj.gov.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.198992014 CEST	192.168.2.7	1.1.1.1	0x4dee	Standard query (0)	secure.arcticcatinc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.199619055 CEST	192.168.2.7	1.1.1.1	0x5a38	Standard query (0)	smtp.stiled.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.200512886 CEST	192.168.2.7	1.1.1.1	0xbbdb	Standard query (0)	mail.flutlichtspiel.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.201298952 CEST	192.168.2.7	1.1.1.1	0xdd	Standard query (0)	1dcb3afbef.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.201549053 CEST	192.168.2.7	1.1.1.1	0x44c6	Standard query (0)	smtp.avihold.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.315982103 CEST	192.168.2.7	1.1.1.1	0x83f2	Standard query (0)	secure.e-ding.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.315983057 CEST	192.168.2.7	1.1.1.1	0x97df	Standard query (0)	vfsales.gr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.444502115 CEST	192.168.2.7	1.1.1.1	0xa4ff	Standard query (0)	lastmx.spamexperts.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.445274115 CEST	192.168.2.7	1.1.1.1	0x9a4a	Standard query (0)	secure.tourismusportal.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.561219931 CEST	192.168.2.7	1.1.1.1	0x5830	Standard query (0)	out.spyglassholdings.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.561508894 CEST	192.168.2.7	1.1.1.1	0x6765	Standard query (0)	securesmtp.maryjane.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.561976910 CEST	192.168.2.7	1.1.1.1	0x1150	Standard query (0)	out.activistasconcorazon.com.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.562156916 CEST	192.168.2.7	1.1.1.1	0x8222	Standard query (0)	my.teletech.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.690141916 CEST	192.168.2.7	1.1.1.1	0x836e	Standard query (0)	belinkedcr.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.690460920 CEST	192.168.2.7	1.1.1.1	0xfb75	Standard query (0)	smtp.gerfaud.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.691167116 CEST	192.168.2.7	1.1.1.1	0x4594	Standard query (0)	paulchantrey.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.691167116 CEST	192.168.2.7	1.1.1.1	0xdf7a	Standard query (0)	secure.ppm-marburg.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.709744930 CEST	192.168.2.7	1.1.1.1	0x579a	Standard query (0)	out.kaehny.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.812853098 CEST	192.168.2.7	1.1.1.1	0xbef	Standard query (0)	secure.solarbaur.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.813798904 CEST	192.168.2.7	1.1.1.1	0x34ea	Standard query (0)	mail.aura.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.931765079 CEST	192.168.2.7	1.1.1.1	0xc57a	Standard query (0)	smtp.ebruerol.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.932396889 CEST	192.168.2.7	1.1.1.1	0x6ff4	Standard query (0)	securesmtp.medtroniccareers.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.932674885 CEST	192.168.2.7	1.1.1.1	0xd872	Standard query (0)	ilegnidipinocchio.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.933032990 CEST	192.168.2.7	1.1.1.1	0x31af	Standard query (0)	smtp.charlesrussell.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.005924940 CEST	192.168.2.7	1.1.1.1	0xda6a	Standard query (0)	out.pontianakkota.go.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.056349993 CEST	192.168.2.7	1.1.1.1	0x3d9d	Standard query (0)	out.buehler.us.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.056349993 CEST	192.168.2.7	1.1.1.1	0x489c	Standard query (0)	smtp.hipercg.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.056595087 CEST	192.168.2.7	1.1.1.1	0x76e9	Standard query (0)	ryandouglasgroup.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.056982040 CEST	192.168.2.7	1.1.1.1	0xbdb5	Standard query (0)	secure.wildmoser-wendelin.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.056982040 CEST	192.168.2.7	1.1.1.1	0x636d	Standard query (0)	secure.pul2e.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.183619976 CEST	192.168.2.7	1.1.1.1	0x7ef7	Standard query (0)	valto.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.183686018 CEST	192.168.2.7	1.1.1.1	0x8aaf	Standard query (0)	cdtm.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.184016943 CEST	192.168.2.7	1.1.1.1	0x2959	Standard query (0)	secure.cheeb.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.184016943 CEST	192.168.2.7	1.1.1.1	0xa609	Standard query (0)	smtp.herbert1.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.301455021 CEST	192.168.2.7	1.1.1.1	0x4617	Standard query (0)	secure.teurlincx.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.301831961 CEST	192.168.2.7	1.1.1.1	0x93b9	Standard query (0)	iav.ac.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.302366972 CEST	192.168.2.7	1.1.1.1	0x7537	Standard query (0)	out.jo2.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.302453995 CEST	192.168.2.7	1.1.1.1	0x7c06	Standard query (0)	smtp.8pmstudio.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.428385973 CEST	192.168.2.7	1.1.1.1	0xaf5f	Standard query (0)	mail.bateelcoffee.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.428565025 CEST	192.168.2.7	1.1.1.1	0x965e	Standard query (0)	out.giddis.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.548691988 CEST	192.168.2.7	1.1.1.1	0xf2df	Standard query (0)	mail.abacho.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.549031973 CEST	192.168.2.7	1.1.1.1	0x2ded	Standard query (0)	myethion.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.549149036 CEST	192.168.2.7	1.1.1.1	0xf375	Standard query (0)	securesmtp.lbzannualj.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.549210072 CEST	192.168.2.7	1.1.1.1	0xb6cd	Standard query (0)	smtp.pcgamesupply.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.708949089 CEST	192.168.2.7	1.1.1.1	0x579a	Standard query (0)	out.kaehny.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.815156937 CEST	192.168.2.7	1.1.1.1	0xf966	Standard query (0)	mail.athens.k12.wi.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.815547943 CEST	192.168.2.7	1.1.1.1	0xaec8	Standard query (0)	secure.williamdeferrers.essex.sch.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.815912008 CEST	192.168.2.7	1.1.1.1	0x974f	Standard query (0)	smtp.clinicanutrissoma.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.816083908 CEST	192.168.2.7	1.1.1.1	0x31e3	Standard query (0)	secure.thegab.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.816415071 CEST	192.168.2.7	1.1.1.1	0x5da8	Standard query (0)	quotation.alhuda.com.pk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.952047110 CEST	192.168.2.7	1.1.1.1	0xc5ba	Standard query (0)	vigolife.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.953252077 CEST	192.168.2.7	1.1.1.1	0x283b	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.244189978 CEST	192.168.2.7	1.1.1.1	0x15b4	Standard query (0)	mail.forestrytas.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.244373083 CEST	192.168.2.7	1.1.1.1	0x7f84	Standard query (0)	out.unifood.biz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.244856119 CEST	192.168.2.7	1.1.1.1	0x7ca2	Standard query (0)	secure.fidelitywest.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.244856119 CEST	192.168.2.7	1.1.1.1	0xbe48	Standard query (0)	out.muffelsuse.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.245233059 CEST	192.168.2.7	1.1.1.1	0x42af	Standard query (0)	secure.students.southport.ac.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.245233059 CEST	192.168.2.7	1.1.1.1	0xa649	Standard query (0)	secure.robertsonsfurniture.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.245728016 CEST	192.168.2.7	1.1.1.1	0xd588	Standard query (0)	smtp.bomerangui.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.246133089 CEST	192.168.2.7	1.1.1.1	0xe834	Standard query (0)	out.bartvandenhoogen.eu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.246133089 CEST	192.168.2.7	1.1.1.1	0x1ba9	Standard query (0)	smtp.man2kukar.sch.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.345165968 CEST	192.168.2.7	1.1.1.1	0x689b	Standard query (0)	out.ajiclean.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.345302105 CEST	192.168.2.7	1.1.1.1	0xe7ef	Standard query (0)	out.azzurro-it.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.345601082 CEST	192.168.2.7	1.1.1.1	0x7393	Standard query (0)	mail.grandriver.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.345824003 CEST	192.168.2.7	1.1.1.1	0xab10	Standard query (0)	secure.musha.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.465421915 CEST	192.168.2.7	1.1.1.1	0x878a	Standard query (0)	bt.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.466170073 CEST	192.168.2.7	1.1.1.1	0xf4db	Standard query (0)	mail.smplan.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.466339111 CEST	192.168.2.7	1.1.1.1	0xf1d3	Standard query (0)	secure.tanox.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.466698885 CEST	192.168.2.7	1.1.1.1	0xc7dd	Standard query (0)	mail.allfinanz-center.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.466833115 CEST	192.168.2.7	1.1.1.1	0xba32	Standard query (0)	mail.vfp.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.595099926 CEST	192.168.2.7	1.1.1.1	0x6b0f	Standard query (0)	smtp.issf.sa	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.595463037 CEST	192.168.2.7	1.1.1.1	0x9fd6	Standard query (0)	smtp.warpmail.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.595808983 CEST	192.168.2.7	1.1.1.1	0x97e4	Standard query (0)	out.aminta.store	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.595999002 CEST	192.168.2.7	1.1.1.1	0xfde3	Standard query (0)	securesmtp.gerhardgeyer.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.609004021 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	smtp.warpmail.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.711486101 CEST	192.168.2.7	1.1.1.1	0x76f1	Standard query (0)	securesmtp.comfedcu.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.711951017 CEST	192.168.2.7	1.1.1.1	0xb5e6	Standard query (0)	planll.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.712491989 CEST	192.168.2.7	1.1.1.1	0x9414	Standard query (0)	mail.asiaworkstraining.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.712773085 CEST	192.168.2.7	1.1.1.1	0xe060	Standard query (0)	mail.brunogarcia.me	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.842843056 CEST	192.168.2.7	1.1.1.1	0xb383	Standard query (0)	mail.iiserkol.ac.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.843010902 CEST	192.168.2.7	1.1.1.1	0xf56c	Standard query (0)	securesmtp.glenloabbey.ie	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.843220949 CEST	192.168.2.7	1.1.1.1	0xd5c	Standard query (0)	out.proximaautomation.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.843501091 CEST	192.168.2.7	1.1.1.1	0x42c2	Standard query (0)	handisport.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.961359978 CEST	192.168.2.7	1.1.1.1	0x5df7	Standard query (0)	upcmail.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.961452007 CEST	192.168.2.7	1.1.1.1	0x95f	Standard query (0)	out.modasa.co.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.961678028 CEST	192.168.2.7	1.1.1.1	0x158a	Standard query (0)	ibt.co.il	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.090691090 CEST	192.168.2.7	1.1.1.1	0xa466	Standard query (0)	meta.ua	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.091020107 CEST	192.168.2.7	1.1.1.1	0x883a	Standard query (0)	stylelead.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.208759069 CEST	192.168.2.7	1.1.1.1	0x831f	Standard query (0)	mail.bhzdqb.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.209141970 CEST	192.168.2.7	1.1.1.1	0x94f5	Standard query (0)	softbank.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.336072922 CEST	192.168.2.7	1.1.1.1	0xe366	Standard query (0)	mail.are-c.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.336447001 CEST	192.168.2.7	1.1.1.1	0xeb37	Standard query (0)	smtp.sqltech.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.336740971 CEST	192.168.2.7	1.1.1.1	0xf597	Standard query (0)	smtp.me.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.453162909 CEST	192.168.2.7	1.1.1.1	0x61cc	Standard query (0)	kasdlaskd.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.453469038 CEST	192.168.2.7	1.1.1.1	0x9eb7	Standard query (0)	securesmtp.bm-i.co.kr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.453711033 CEST	192.168.2.7	1.1.1.1	0x2957	Standard query (0)	smtp.hollowcompany.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.581896067 CEST	192.168.2.7	1.1.1.1	0x8221	Standard query (0)	powerencry.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.581964016 CEST	192.168.2.7	1.1.1.1	0xc903	Standard query (0)	securesmtp.scmg.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.582133055 CEST	192.168.2.7	1.1.1.1	0x8354	Standard query (0)	smtp.genesismotors.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.582292080 CEST	192.168.2.7	1.1.1.1	0xf55a	Standard query (0)	out.gecommerce.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.582551956 CEST	192.168.2.7	1.1.1.1	0x84e1	Standard query (0)	vesta.dti.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.582551956 CEST	192.168.2.7	1.1.1.1	0x63a4	Standard query (0)	secure.maac.org.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.594157934 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	securesmtp.scmg.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.699528933 CEST	192.168.2.7	1.1.1.1	0x8f1a	Standard query (0)	smtp.katriots.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.699652910 CEST	192.168.2.7	1.1.1.1	0x7af9	Standard query (0)	secure.kingslandpolymers.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.816504002 CEST	192.168.2.7	1.1.1.1	0x810	Standard query (0)	sunrise.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.817274094 CEST	192.168.2.7	1.1.1.1	0xfa7e	Standard query (0)	smtp.topmostchem.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.818469048 CEST	192.168.2.7	1.1.1.1	0xfa10	Standard query (0)	out.bcaoo.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.818872929 CEST	192.168.2.7	1.1.1.1	0x271	Standard query (0)	aureadiseno.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.820502996 CEST	192.168.2.7	1.1.1.1	0x7ec4	Standard query (0)	kaytoursmz.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.960031033 CEST	192.168.2.7	1.1.1.1	0x36f8	Standard query (0)	mx.securemx.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.960877895 CEST	192.168.2.7	1.1.1.1	0x71f5	Standard query (0)	mail.rexsales.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.960877895 CEST	192.168.2.7	1.1.1.1	0xf9d1	Standard query (0)	efebbfdf2a.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.962140083 CEST	192.168.2.7	1.1.1.1	0x6340	Standard query (0)	smtp.tapovanvidhyalay.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.066746950 CEST	192.168.2.7	1.1.1.1	0x4c31	Standard query (0)	mail.frucomedia.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.066746950 CEST	192.168.2.7	1.1.1.1	0x3610	Standard query (0)	smtp.novachem.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.067167997 CEST	192.168.2.7	1.1.1.1	0xe887	Standard query (0)	securesmtp.camm.id.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.194499969 CEST	192.168.2.7	1.1.1.1	0xa58d	Standard query (0)	securesmtp.tecar.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.195065022 CEST	192.168.2.7	1.1.1.1	0xe15f	Standard query (0)	smtp.contecomagra.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.195204020 CEST	192.168.2.7	1.1.1.1	0x6869	Standard query (0)	securesmtp.esvmedien.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.313647985 CEST	192.168.2.7	1.1.1.1	0xf367	Standard query (0)	securesmtp.84c8db7dd9.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.313839912 CEST	192.168.2.7	1.1.1.1	0xb703	Standard query (0)	smtp.seguralta.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.444039106 CEST	192.168.2.7	1.1.1.1	0xbf8d	Standard query (0)	mail.petsouk.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.444361925 CEST	192.168.2.7	1.1.1.1	0xd145	Standard query (0)	marketplace.amazon.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.444361925 CEST	192.168.2.7	1.1.1.1	0x304c	Standard query (0)	out.gargoyleenterprises.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.444643021 CEST	192.168.2.7	1.1.1.1	0xb906	Standard query (0)	secure.diskret-escort.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.561367035 CEST	192.168.2.7	1.1.1.1	0x1b0f	Standard query (0)	mx.armstrong.syn-alias.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.561742067 CEST	192.168.2.7	1.1.1.1	0xe8f7	Standard query (0)	mail.zaiss.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.562150002 CEST	192.168.2.7	1.1.1.1	0x1da	Standard query (0)	smtp.4kmulti.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.562432051 CEST	192.168.2.7	1.1.1.1	0x8d7c	Standard query (0)	smtp.yassaka.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.691253901 CEST	192.168.2.7	1.1.1.1	0x3040	Standard query (0)	telorummedia.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.691960096 CEST	192.168.2.7	1.1.1.1	0xbb4c	Standard query (0)	securesmtp.was.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.829556942 CEST	192.168.2.7	1.1.1.1	0xfa7e	Standard query (0)	smtp.topmostchem.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.830549955 CEST	192.168.2.7	1.1.1.1	0xd990	Standard query (0)	youcast.tv.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.955338001 CEST	192.168.2.7	1.1.1.1	0xef8f	Standard query (0)	smtp.ndcuk.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.955555916 CEST	192.168.2.7	1.1.1.1	0xb97	Standard query (0)	out.dcb3de5ce9.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.955872059 CEST	192.168.2.7	1.1.1.1	0xfc9a	Standard query (0)	smtp.ookmail.ab.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.956374884 CEST	192.168.2.7	1.1.1.1	0x4890	Standard query (0)	mailstore1.secureserver.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.963299036 CEST	192.168.2.7	1.1.1.1	0xf1eb	Standard query (0)	smtp.vipmai.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.963594913 CEST	192.168.2.7	1.1.1.1	0x7b64	Standard query (0)	secure.lanches.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.068808079 CEST	192.168.2.7	1.1.1.1	0x871c	Standard query (0)	out.izabelfailde.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.068968058 CEST	192.168.2.7	1.1.1.1	0x4ab2	Standard query (0)	out.e-mali.co.sz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.069252014 CEST	192.168.2.7	1.1.1.1	0x9de	Standard query (0)	secure.tanzschule-feil.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.197746038 CEST	192.168.2.7	1.1.1.1	0x679f	Standard query (0)	smtp.cobbref.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.198071957 CEST	192.168.2.7	1.1.1.1	0x1c25	Standard query (0)	secure.inovasuporte.xsp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.198754072 CEST	192.168.2.7	1.1.1.1	0x2f71	Standard query (0)	out.sbt.co.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.328337908 CEST	192.168.2.7	1.1.1.1	0x2bcb	Standard query (0)	ergofocus.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.328438044 CEST	192.168.2.7	1.1.1.1	0x6bf1	Standard query (0)	out.coind.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.328737974 CEST	192.168.2.7	1.1.1.1	0x3146	Standard query (0)	out.guesscab.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.449362040 CEST	192.168.2.7	1.1.1.1	0x610e	Standard query (0)	smtp.ederer-bau.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.450385094 CEST	192.168.2.7	1.1.1.1	0x6c41	Standard query (0)	smtp.designillustrated.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.450658083 CEST	192.168.2.7	1.1.1.1	0x21c1	Standard query (0)	out.synack.mckinsey.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.450658083 CEST	192.168.2.7	1.1.1.1	0x636a	Standard query (0)	secure.dnklot.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.450927019 CEST	192.168.2.7	1.1.1.1	0xdff0	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.567105055 CEST	192.168.2.7	1.1.1.1	0x138	Standard query (0)	mail.esu16.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.567464113 CEST	192.168.2.7	1.1.1.1	0xcb0b	Standard query (0)	out.hhfp.pcc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.568053007 CEST	192.168.2.7	1.1.1.1	0xd375	Standard query (0)	mail.rinku.zaq.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.889164925 CEST	192.168.2.7	1.1.1.1	0x86e9	Standard query (0)	schniz1.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.890084982 CEST	192.168.2.7	1.1.1.1	0x793d	Standard query (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.891170025 CEST	192.168.2.7	1.1.1.1	0xc188	Standard query (0)	smtp.harshmage.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.892093897 CEST	192.168.2.7	1.1.1.1	0xb508	Standard query (0)	mail.wmdc.co.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.892463923 CEST	192.168.2.7	1.1.1.1	0xf2fd	Standard query (0)	mail.optonline.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.893423080 CEST	192.168.2.7	1.1.1.1	0x2b85	Standard query (0)	omahonydesign.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.893877983 CEST	192.168.2.7	1.1.1.1	0x9d6	Standard query (0)	turriscorp.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.968581915 CEST	192.168.2.7	1.1.1.1	0x66c0	Standard query (0)	secure.sepric.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.968667030 CEST	192.168.2.7	1.1.1.1	0x3c37	Standard query (0)	out.thiloschneider.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.968868971 CEST	192.168.2.7	1.1.1.1	0x97a2	Standard query (0)	out.opco-construction.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.969151974 CEST	192.168.2.7	1.1.1.1	0x4138	Standard query (0)	secure.rapid-mails.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.085429907 CEST	192.168.2.7	1.1.1.1	0x1190	Standard query (0)	testwww.commandersofevony.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.085621119 CEST	192.168.2.7	1.1.1.1	0x75f4	Standard query (0)	securesmtp.mailnesa.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.085797071 CEST	192.168.2.7	1.1.1.1	0x9b3d	Standard query (0)	secure.epa-marnelavallee.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.202649117 CEST	192.168.2.7	1.1.1.1	0x4f96	Standard query (0)	out.cpqhfvrc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.203452110 CEST	192.168.2.7	1.1.1.1	0xedde	Standard query (0)	smtp.skynet.be	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.203452110 CEST	192.168.2.7	1.1.1.1	0x4137	Standard query (0)	out.haworth.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.204194069 CEST	192.168.2.7	1.1.1.1	0x8ac5	Standard query (0)	sp.zs1godziesze.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.331218958 CEST	192.168.2.7	1.1.1.1	0xb02b	Standard query (0)	secure.hakol.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.331338882 CEST	192.168.2.7	1.1.1.1	0xa5cd	Standard query (0)	secure.motiv-one.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.331744909 CEST	192.168.2.7	1.1.1.1	0x5d0	Standard query (0)	mail.sdna.gr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.333666086 CEST	192.168.2.7	1.1.1.1	0x2bcb	Standard query (0)	ergofocus.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.449305058 CEST	192.168.2.7	1.1.1.1	0xd79c	Standard query (0)	dutch8challenge.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.450149059 CEST	192.168.2.7	1.1.1.1	0x7fad	Standard query (0)	securesmtp.ifwda.co.cc	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.450203896 CEST	192.168.2.7	1.1.1.1	0x4eaa	Standard query (0)	out.yay.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.450337887 CEST	192.168.2.7	1.1.1.1	0xa030	Standard query (0)	smtp.alrayanholdingco.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.568504095 CEST	192.168.2.7	1.1.1.1	0xd375	Standard query (0)	mail.rinku.zaq.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.579785109 CEST	192.168.2.7	1.1.1.1	0xd8be	Standard query (0)	walla.co.il	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.579972982 CEST	192.168.2.7	1.1.1.1	0x479c	Standard query (0)	smtp.order.augustow.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.580204010 CEST	192.168.2.7	1.1.1.1	0x4cee	Standard query (0)	mail.marcaregistradaeng.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.580379963 CEST	192.168.2.7	1.1.1.1	0x5ba0	Standard query (0)	out.dellagiacoma.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.694437027 CEST	192.168.2.7	1.1.1.1	0x8b4d	Standard query (0)	mail.ifactory.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.694905043 CEST	192.168.2.7	1.1.1.1	0x39df	Standard query (0)	mail.senkom.or.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.695245028 CEST	192.168.2.7	1.1.1.1	0xad12	Standard query (0)	secure.esyem.com.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.695391893 CEST	192.168.2.7	1.1.1.1	0x2d0	Standard query (0)	secure.cirruscomms.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.826558113 CEST	192.168.2.7	1.1.1.1	0xddeb	Standard query (0)	mail.capitalone.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.827203035 CEST	192.168.2.7	1.1.1.1	0x7d20	Standard query (0)	smtp.kaishfamilyartproject.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.827203035 CEST	192.168.2.7	1.1.1.1	0x5bd1	Standard query (0)	smtp.wirteltor-gymnasium.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.827264071 CEST	192.168.2.7	1.1.1.1	0x965b	Standard query (0)	secure.meyns.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.881356955 CEST	192.168.2.7	1.1.1.1	0x793d	Standard query (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.952936888 CEST	192.168.2.7	1.1.1.1	0xc6f9	Standard query (0)	secure.mexonexc.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.072485924 CEST	192.168.2.7	1.1.1.1	0x128f	Standard query (0)	securesmtp.e-difference.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.072691917 CEST	192.168.2.7	1.1.1.1	0x44b7	Standard query (0)	iflashworks.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.072829962 CEST	192.168.2.7	1.1.1.1	0xbc7d	Standard query (0)	securesmtp.nortexint.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.202651978 CEST	192.168.2.7	1.1.1.1	0x2b98	Standard query (0)	aseqroo.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.203461885 CEST	192.168.2.7	1.1.1.1	0x9d2b	Standard query (0)	out.petrina.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.203516006 CEST	192.168.2.7	1.1.1.1	0xb9c5	Standard query (0)	mail.evitable.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.344026089 CEST	192.168.2.7	1.1.1.1	0xeabb	Standard query (0)	abnamroverzekeringen.nl.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.346071005 CEST	192.168.2.7	1.1.1.1	0x8685	Standard query (0)	out.urbanusroad.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.346395016 CEST	192.168.2.7	1.1.1.1	0x7640	Standard query (0)	mail.undiesdrawer.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.445584059 CEST	192.168.2.7	1.1.1.1	0x1a83	Standard query (0)	secure.comunicaciones-idiem.cl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.446432114 CEST	192.168.2.7	1.1.1.1	0x4ea2	Standard query (0)	smtp.monyrimjob.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.446593046 CEST	192.168.2.7	1.1.1.1	0x2222	Standard query (0)	mail.mitradev.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.458847046 CEST	192.168.2.7	1.1.1.1	0x1	Standard query (0)	smtp.monyrimjob.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.586502075 CEST	192.168.2.7	1.1.1.1	0xf3ab	Standard query (0)	smtp.gcvlife.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.587132931 CEST	192.168.2.7	1.1.1.1	0x164c	Standard query (0)	rogers.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.587132931 CEST	192.168.2.7	1.1.1.1	0xef81	Standard query (0)	secure.pagusviriditas.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.704111099 CEST	192.168.2.7	1.1.1.1	0x807c	Standard query (0)	secure.mixely.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.704441071 CEST	192.168.2.7	1.1.1.1	0xc91	Standard query (0)	mx00.ionos.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.704722881 CEST	192.168.2.7	1.1.1.1	0xcd2a	Standard query (0)	smtp.keyrus.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.704722881 CEST	192.168.2.7	1.1.1.1	0x6274	Standard query (0)	out.centralparknyc.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.708760977 CEST	192.168.2.7	1.1.1.1	0x39df	Standard query (0)	mail.senkom.or.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.832300901 CEST	192.168.2.7	1.1.1.1	0xe650	Standard query (0)	mail.sulminet.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.832607031 CEST	192.168.2.7	1.1.1.1	0x502	Standard query (0)	securesmtp.tiomail.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.832760096 CEST	192.168.2.7	1.1.1.1	0x7b1f	Standard query (0)	smtp.ce5aj6ck10.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.833014965 CEST	192.168.2.7	1.1.1.1	0xa45f	Standard query (0)	securesmtp.armmarket.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.960510015 CEST	192.168.2.7	1.1.1.1	0x3071	Standard query (0)	out.dba-gmbh.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.960956097 CEST	192.168.2.7	1.1.1.1	0x4e0c	Standard query (0)	mail.imagembr.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.961616993 CEST	192.168.2.7	1.1.1.1	0x7d60	Standard query (0)	secure.resultzinc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.962089062 CEST	192.168.2.7	1.1.1.1	0x6f4	Standard query (0)	mail.qq.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.962223053 CEST	192.168.2.7	1.1.1.1	0x4b93	Standard query (0)	smtp.knowall.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.962223053 CEST	192.168.2.7	1.1.1.1	0x7808	Standard query (0)	hzmx02.mxmail.netease.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.081198931 CEST	192.168.2.7	1.1.1.1	0x9cad	Standard query (0)	mx.verizon.ne	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.081899881 CEST	192.168.2.7	1.1.1.1	0x21f2	Standard query (0)	smtp.a7bb9fdcab.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.082134962 CEST	192.168.2.7	1.1.1.1	0xb317	Standard query (0)	globalgadgetuk.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.082241058 CEST	192.168.2.7	1.1.1.1	0x31be	Standard query (0)	securesmtp.extremeconstructioninc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.082345009 CEST	192.168.2.7	1.1.1.1	0x7447	Standard query (0)	smtp.notebookspronto.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.196252108 CEST	192.168.2.7	1.1.1.1	0x5e94	Standard query (0)	secure.sbsaude.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.196496964 CEST	192.168.2.7	1.1.1.1	0x5ced	Standard query (0)	securesmtp.catral.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.196608067 CEST	192.168.2.7	1.1.1.1	0xbb5a	Standard query (0)	mail.haulio.io	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.331069946 CEST	192.168.2.7	1.1.1.1	0x1da6	Standard query (0)	smtp.janseycpas.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.445583105 CEST	192.168.2.7	1.1.1.1	0xd182	Standard query (0)	out.jsprm.online	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.445873976 CEST	192.168.2.7	1.1.1.1	0xc0a7	Standard query (0)	securesmtp.utb.salem.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.446115017 CEST	192.168.2.7	1.1.1.1	0xf14e	Standard query (0)	mail.juweliermueller.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.579535961 CEST	192.168.2.7	1.1.1.1	0x7956	Standard query (0)	secure.probiz.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.579760075 CEST	192.168.2.7	1.1.1.1	0xe145	Standard query (0)	out.cod.com.co	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.701689959 CEST	192.168.2.7	1.1.1.1	0x74dd	Standard query (0)	smtp.imdico.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.702075005 CEST	192.168.2.7	1.1.1.1	0x5395	Standard query (0)	mail.enzojeep.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.823816061 CEST	192.168.2.7	1.1.1.1	0x2b87	Standard query (0)	impactinternational-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.824178934 CEST	192.168.2.7	1.1.1.1	0x9dd6	Standard query (0)	krilly.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.824393034 CEST	192.168.2.7	1.1.1.1	0x1ea5	Standard query (0)	mail.porjes.sk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.953116894 CEST	192.168.2.7	1.1.1.1	0x408b	Standard query (0)	yorku.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.953386068 CEST	192.168.2.7	1.1.1.1	0x8c54	Standard query (0)	chr-systems.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.953676939 CEST	192.168.2.7	1.1.1.1	0x50e5	Standard query (0)	smtp.lancashire.newsquest.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.953747988 CEST	192.168.2.7	1.1.1.1	0x9247	Standard query (0)	out.c21keyrealty.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.954344988 CEST	192.168.2.7	1.1.1.1	0x3fc2	Standard query (0)	mail.realsoul.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.071249962 CEST	192.168.2.7	1.1.1.1	0x7d07	Standard query (0)	mail.fischermichl.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.071542025 CEST	192.168.2.7	1.1.1.1	0xc851	Standard query (0)	mail.displayd.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.071814060 CEST	192.168.2.7	1.1.1.1	0xd4cc	Standard query (0)	out.singapurhelpdesk.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.071834087 CEST	192.168.2.7	1.1.1.1	0xfa36	Standard query (0)	smtp.ebruerol.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.072094917 CEST	192.168.2.7	1.1.1.1	0x599f	Standard query (0)	mail.unliminet.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.072367907 CEST	192.168.2.7	1.1.1.1	0x784b	Standard query (0)	mail.restech.com.sa	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.199502945 CEST	192.168.2.7	1.1.1.1	0x4ae5	Standard query (0)	smtp.cultura.combr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.199901104 CEST	192.168.2.7	1.1.1.1	0xbb43	Standard query (0)	securesmtp.fronat.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.319751978 CEST	192.168.2.7	1.1.1.1	0x5d59	Standard query (0)	shsgroup.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.320038080 CEST	192.168.2.7	1.1.1.1	0x813a	Standard query (0)	out.smartdealsaccessory.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.320413113 CEST	192.168.2.7	1.1.1.1	0x15d1	Standard query (0)	mx.viaga.info	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.321082115 CEST	192.168.2.7	1.1.1.1	0x6ac6	Standard query (0)	smtp.officinaeverdi.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.321082115 CEST	192.168.2.7	1.1.1.1	0x9834	Standard query (0)	upcmail.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.447372913 CEST	192.168.2.7	1.1.1.1	0xf51a	Standard query (0)	jacarandainternational.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.447676897 CEST	192.168.2.7	1.1.1.1	0x7405	Standard query (0)	smtp.mv-hallstadt.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.565243006 CEST	192.168.2.7	1.1.1.1	0x4c16	Standard query (0)	mail.sma.belajar.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.565536976 CEST	192.168.2.7	1.1.1.1	0xb818	Standard query (0)	fionaevans.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.565959930 CEST	192.168.2.7	1.1.1.1	0x9933	Standard query (0)	out.myprix.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.565960884 CEST	192.168.2.7	1.1.1.1	0xd415	Standard query (0)	out.rosangelacastro.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.567117929 CEST	192.168.2.7	1.1.1.1	0xffde	Standard query (0)	gmk42.plus.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.685887098 CEST	192.168.2.7	1.1.1.1	0x5e81	Standard query (0)	securesmtp.nobugs.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.686171055 CEST	192.168.2.7	1.1.1.1	0xda5d	Standard query (0)	securesmtp.greenlightlocating.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.686429977 CEST	192.168.2.7	1.1.1.1	0x8527	Standard query (0)	secure.andersenpub.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.687052011 CEST	192.168.2.7	1.1.1.1	0xc80f	Standard query (0)	smtp054.gdfnet.df.gov.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.687269926 CEST	192.168.2.7	1.1.1.1	0xbfd9	Standard query (0)	secure.mychaplaincy.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.809159994 CEST	192.168.2.7	1.1.1.1	0x33ef	Standard query (0)	bs-solutions.com.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.809484005 CEST	192.168.2.7	1.1.1.1	0x10c5	Standard query (0)	intercanal.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.809849977 CEST	192.168.2.7	1.1.1.1	0xc93f	Standard query (0)	securesmtp.ribs.press	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.809976101 CEST	192.168.2.7	1.1.1.1	0xe74d	Standard query (0)	mx-02-eu-central-1.prod.hydra.sophos.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.810101032 CEST	192.168.2.7	1.1.1.1	0xe91e	Standard query (0)	secure.educacao.pmrp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.952487946 CEST	192.168.2.7	1.1.1.1	0x188b	Standard query (0)	jwpub.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.057931900 CEST	192.168.2.7	1.1.1.1	0x20bd	Standard query (0)	uit.ac.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.058372021 CEST	192.168.2.7	1.1.1.1	0x7b08	Standard query (0)	smtp.ozhanyogurrtcu.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.058717012 CEST	192.168.2.7	1.1.1.1	0x7af	Standard query (0)	vntechcon.vn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.058717012 CEST	192.168.2.7	1.1.1.1	0xab0a	Standard query (0)	secure.jvo.se	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.059009075 CEST	192.168.2.7	1.1.1.1	0xe477	Standard query (0)	smtp.kone.way	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.199428082 CEST	192.168.2.7	1.1.1.1	0xea21	Standard query (0)	arpek.org.tn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.199796915 CEST	192.168.2.7	1.1.1.1	0xea2d	Standard query (0)	ssss-gouv-qc-ca.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.199992895 CEST	192.168.2.7	1.1.1.1	0xe47b	Standard query (0)	securesmtp.monacelli.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.200320005 CEST	192.168.2.7	1.1.1.1	0xac83	Standard query (0)	smtp.heino.ch	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.200320005 CEST	192.168.2.7	1.1.1.1	0x2e3	Standard query (0)	smtp.technokabel.com.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.318537951 CEST	192.168.2.7	1.1.1.1	0xd377	Standard query (0)	smtp.freenet.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.444510937 CEST	192.168.2.7	1.1.1.1	0x8f57	Standard query (0)	secure.wiseworldseminars.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.444715023 CEST	192.168.2.7	1.1.1.1	0x580b	Standard query (0)	mail.oceanica.ufrj.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.444813967 CEST	192.168.2.7	1.1.1.1	0x8ae1	Standard query (0)	mxb-00795303.gslb.pphosted.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.563617945 CEST	192.168.2.7	1.1.1.1	0x9ff8	Standard query (0)	secure.tdservice.eu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.563678026 CEST	192.168.2.7	1.1.1.1	0xe92e	Standard query (0)	elbers.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.563767910 CEST	192.168.2.7	1.1.1.1	0xd425	Standard query (0)	indiatimes.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.564033985 CEST	192.168.2.7	1.1.1.1	0x4e04	Standard query (0)	cnsm.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.564033985 CEST	192.168.2.7	1.1.1.1	0x7e7c	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.684303999 CEST	192.168.2.7	1.1.1.1	0x8d86	Standard query (0)	rodofly.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.684645891 CEST	192.168.2.7	1.1.1.1	0x2f7d	Standard query (0)	out.b.socialsergsasearchengineranker.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.684741974 CEST	192.168.2.7	1.1.1.1	0x4d5b	Standard query (0)	taalim.ma	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.685112953 CEST	192.168.2.7	1.1.1.1	0xf1a0	Standard query (0)	mail.mygsc.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.935374975 CEST	192.168.2.7	1.1.1.1	0x359c	Standard query (0)	smtp.mailme.dk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.935374975 CEST	192.168.2.7	1.1.1.1	0xc38e	Standard query (0)	securesmtp.oventrop.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.935933113 CEST	192.168.2.7	1.1.1.1	0x8f9c	Standard query (0)	socal-lighting.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.936158895 CEST	192.168.2.7	1.1.1.1	0xcdba	Standard query (0)	mx.breakthur.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.961399078 CEST	192.168.2.7	1.1.1.1	0xe4e6	Standard query (0)	mail.mcgill.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.961599112 CEST	192.168.2.7	1.1.1.1	0xd9f6	Standard query (0)	ruffini.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.961875916 CEST	192.168.2.7	1.1.1.1	0xd020	Standard query (0)	smtp.1und1.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.962255001 CEST	192.168.2.7	1.1.1.1	0x6c1	Standard query (0)	out.sitechqm.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.962429047 CEST	192.168.2.7	1.1.1.1	0x41e0	Standard query (0)	smtp.maxiaudio2014.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.073672056 CEST	192.168.2.7	1.1.1.1	0x7af	Standard query (0)	vntechcon.vn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.077269077 CEST	192.168.2.7	1.1.1.1	0x3a29	Standard query (0)	mail.kmcontab.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.077536106 CEST	192.168.2.7	1.1.1.1	0x1b3	Standard query (0)	out.yachtseahorse.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.078264952 CEST	192.168.2.7	1.1.1.1	0xd86	Standard query (0)	securesmtp.decorxxi.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.078536987 CEST	192.168.2.7	1.1.1.1	0x17d9	Standard query (0)	clyps.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.199623108 CEST	192.168.2.7	1.1.1.1	0xb503	Standard query (0)	smtp.grossworld.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.199954987 CEST	192.168.2.7	1.1.1.1	0x1a3c	Standard query (0)	optushome.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.200212955 CEST	192.168.2.7	1.1.1.1	0x9ad9	Standard query (0)	secure.6ec49ec1be.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.312540054 CEST	192.168.2.7	1.1.1.1	0x791b	Standard query (0)	securesmtp.kellam.us.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.312773943 CEST	192.168.2.7	1.1.1.1	0xaee0	Standard query (0)	smtp.trans-ocean.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.312968969 CEST	192.168.2.7	1.1.1.1	0x8f62	Standard query (0)	out.webpc.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.313729048 CEST	192.168.2.7	1.1.1.1	0x8096	Standard query (0)	mail.franksu.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.447999001 CEST	192.168.2.7	1.1.1.1	0xab05	Standard query (0)	smtp.portugalmail.pt	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.448450089 CEST	192.168.2.7	1.1.1.1	0x1dec	Standard query (0)	smtp.kftec.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.567553997 CEST	192.168.2.7	1.1.1.1	0xdecc	Standard query (0)	out.guesscab.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.568505049 CEST	192.168.2.7	1.1.1.1	0x1faf	Standard query (0)	c-ms.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.691414118 CEST	192.168.2.7	1.1.1.1	0x94f1	Standard query (0)	i.softbank.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.692007065 CEST	192.168.2.7	1.1.1.1	0x7041	Standard query (0)	smtp.flatironssolutions.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.692245007 CEST	192.168.2.7	1.1.1.1	0x6d69	Standard query (0)	securesmtp.jgseguranca.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.948297977 CEST	192.168.2.7	1.1.1.1	0x86b7	Standard query (0)	out.rhodes.k12.il.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.948846102 CEST	192.168.2.7	1.1.1.1	0x4f65	Standard query (0)	out.nartproje.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.949521065 CEST	192.168.2.7	1.1.1.1	0x7938	Standard query (0)	securesmtp.hausatlantik.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.084511995 CEST	192.168.2.7	1.1.1.1	0x7af	Standard query (0)	vntechcon.vn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.191307068 CEST	192.168.2.7	1.1.1.1	0xbdad	Standard query (0)	coemi.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.191649914 CEST	192.168.2.7	1.1.1.1	0xd908	Standard query (0)	smtp.hetnet.nl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.191865921 CEST	192.168.2.7	1.1.1.1	0x477c	Standard query (0)	secure.tokainuts.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.192047119 CEST	192.168.2.7	1.1.1.1	0x3a31	Standard query (0)	hwonline.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.309446096 CEST	192.168.2.7	1.1.1.1	0x72e	Standard query (0)	securesmtp.maconcom.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.309503078 CEST	192.168.2.7	1.1.1.1	0x34b4	Standard query (0)	smtp.tds.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.309731960 CEST	192.168.2.7	1.1.1.1	0x8f0d	Standard query (0)	smtp.waukesha.k12.wi.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.437102079 CEST	192.168.2.7	1.1.1.1	0x85f5	Standard query (0)	solidsolucoes.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.437318087 CEST	192.168.2.7	1.1.1.1	0x562	Standard query (0)	int.efoa.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.437433958 CEST	192.168.2.7	1.1.1.1	0x7ead	Standard query (0)	secure.arrowaviation.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.437619925 CEST	192.168.2.7	1.1.1.1	0xbbab	Standard query (0)	mail.cardios.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.554801941 CEST	192.168.2.7	1.1.1.1	0xb00b	Standard query (0)	securesmtp.cancerresearch.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.554801941 CEST	192.168.2.7	1.1.1.1	0x5a49	Standard query (0)	mail.berlin.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.555063009 CEST	192.168.2.7	1.1.1.1	0x6361	Standard query (0)	mx.progiftstore.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.684117079 CEST	192.168.2.7	1.1.1.1	0x4b29	Standard query (0)	student.itera.ac.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.684437990 CEST	192.168.2.7	1.1.1.1	0x92f9	Standard query (0)	smtp.ens-bousaada.dz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.684514046 CEST	192.168.2.7	1.1.1.1	0xe146	Standard query (0)	securesmtp.selectivedata.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.684806108 CEST	192.168.2.7	1.1.1.1	0x335e	Standard query (0)	out.surpass-tech.com.cn	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.810122013 CEST	192.168.2.7	1.1.1.1	0x4290	Standard query (0)	smtp.centrum.cz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.810847044 CEST	192.168.2.7	1.1.1.1	0x7882	Standard query (0)	smtp.acerinox.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.811564922 CEST	192.168.2.7	1.1.1.1	0xcd30	Standard query (0)	mail.sptiles.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.811564922 CEST	192.168.2.7	1.1.1.1	0x8be9	Standard query (0)	smtp.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.926285982 CEST	192.168.2.7	1.1.1.1	0xea6f	Standard query (0)	smtp.hairformation.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.926625013 CEST	192.168.2.7	1.1.1.1	0xa54	Standard query (0)	smtp.creativecanvas.info	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.055983067 CEST	192.168.2.7	1.1.1.1	0x68ae	Standard query (0)	out.antares-so.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.056396961 CEST	192.168.2.7	1.1.1.1	0x9031	Standard query (0)	securesmtp.c2servizi.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.056396961 CEST	192.168.2.7	1.1.1.1	0x7776	Standard query (0)	idenco.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.056677103 CEST	192.168.2.7	1.1.1.1	0x1f7d	Standard query (0)	senosalud.org	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.056869030 CEST	192.168.2.7	1.1.1.1	0xea3d	Standard query (0)	smtp.nissoshoji.co.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.056996107 CEST	192.168.2.7	1.1.1.1	0x469f	Standard query (0)	mail.artesconstrutora.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.057145119 CEST	192.168.2.7	1.1.1.1	0x6cb1	Standard query (0)	securesmtp.crossco.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.057293892 CEST	192.168.2.7	1.1.1.1	0xe83f	Standard query (0)	mx-caprica.zoneedit.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.193574905 CEST	192.168.2.7	1.1.1.1	0x40d7	Standard query (0)	gamajl.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.193742990 CEST	192.168.2.7	1.1.1.1	0x771	Standard query (0)	mail.umagezana.co.za	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.313961983 CEST	192.168.2.7	1.1.1.1	0xe386	Standard query (0)	ardya.co.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.314126968 CEST	192.168.2.7	1.1.1.1	0x694e	Standard query (0)	mail.triplebond3.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.314371109 CEST	192.168.2.7	1.1.1.1	0x5e28	Standard query (0)	smtp.evoluaeducacao.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.314371109 CEST	192.168.2.7	1.1.1.1	0x8847	Standard query (0)	smtp.muni25demayo.gob.ar	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.442070961 CEST	192.168.2.7	1.1.1.1	0x79c6	Standard query (0)	zahora.eu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.443135977 CEST	192.168.2.7	1.1.1.1	0x5390	Standard query (0)	smtp.usit.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.446822882 CEST	192.168.2.7	1.1.1.1	0x562	Standard query (0)	int.efoa.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.559467077 CEST	192.168.2.7	1.1.1.1	0xb6d1	Standard query (0)	secure.rainagaintanks.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.559771061 CEST	192.168.2.7	1.1.1.1	0xea30	Standard query (0)	mail.gobiz.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.560781956 CEST	192.168.2.7	1.1.1.1	0x4bc8	Standard query (0)	out.grunwedl.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.677361965 CEST	192.168.2.7	1.1.1.1	0x4b29	Standard query (0)	student.itera.ac.id	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.686263084 CEST	192.168.2.7	1.1.1.1	0x165d	Standard query (0)	secure.com.tencent.mobileqq	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.686501980 CEST	192.168.2.7	1.1.1.1	0x8220	Standard query (0)	smtp.ns.sympatico.ca	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.802634954 CEST	192.168.2.7	1.1.1.1	0xf8f5	Standard query (0)	securesmtp.rodas3.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.802925110 CEST	192.168.2.7	1.1.1.1	0x4e4f	Standard query (0)	securesmtp.tessta.no	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.803251982 CEST	192.168.2.7	1.1.1.1	0x9e42	Standard query (0)	securesmtp.harris.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.803297997 CEST	192.168.2.7	1.1.1.1	0xf5c7	Standard query (0)	mx1-us1.ppe-hosted.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.803909063 CEST	192.168.2.7	1.1.1.1	0x4c0	Standard query (0)	smtp.gesundheitbb.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.067701101 CEST	192.168.2.7	1.1.1.1	0x469f	Standard query (0)	mail.artesconstrutora.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.302218914 CEST	192.168.2.7	1.1.1.1	0x5e28	Standard query (0)	smtp.evoluaeducacao.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.443104982 CEST	192.168.2.7	1.1.1.1	0x562	Standard query (0)	int.efoa.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.133179903 CEST	192.168.2.7	1.1.1.1	0x513f	Standard query (0)	out.pop.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.133315086 CEST	192.168.2.7	1.1.1.1	0xa43d	Standard query (0)	secure.chadwellacademy.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.133779049 CEST	192.168.2.7	1.1.1.1	0xe925	Standard query (0)	seekersrecruitment.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.133780003 CEST	192.168.2.7	1.1.1.1	0x5738	Standard query (0)	out.fcgnfndhj.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.134319067 CEST	192.168.2.7	1.1.1.1	0x7bb9	Standard query (0)	secure.home-assist.com.au	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.134505033 CEST	192.168.2.7	1.1.1.1	0x5c82	Standard query (0)	mail.independent.ie	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.134531975 CEST	192.168.2.7	1.1.1.1	0xb0f5	Standard query (0)	mail.joho-kochi.or.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.134867907 CEST	192.168.2.7	1.1.1.1	0xfa8d	Standard query (0)	out.eresmas.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.135201931 CEST	192.168.2.7	1.1.1.1	0xc4bc	Standard query (0)	mail.noname.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.135201931 CEST	192.168.2.7	1.1.1.1	0x1017	Standard query (0)	securesmtp.sisnet.ssku.k12.ca.us	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.138290882 CEST	192.168.2.7	1.1.1.1	0x7f85	Standard query (0)	mxlb.ispgateway.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.139014959 CEST	192.168.2.7	1.1.1.1	0x34cc	Standard query (0)	smtp.hsbc.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.139014959 CEST	192.168.2.7	1.1.1.1	0x1aa4	Standard query (0)	mail.grupoembracon.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.139763117 CEST	192.168.2.7	1.1.1.1	0x1b4b	Standard query (0)	securesmtp.escaparatedeharo.com.mx	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.139763117 CEST	192.168.2.7	1.1.1.1	0xebfe	Standard query (0)	meetinleeds.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.140007019 CEST	192.168.2.7	1.1.1.1	0x220d	Standard query (0)	dacoll.co.uk	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.140367031 CEST	192.168.2.7	1.1.1.1	0x574f	Standard query (0)	smtp.ma.point.ne.jp	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.140367031 CEST	192.168.2.7	1.1.1.1	0x7ef9	Standard query (0)	smtp.mtcqfs.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.140746117 CEST	192.168.2.7	1.1.1.1	0xcdd3	Standard query (0)	minicat.es	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.140773058 CEST	192.168.2.7	1.1.1.1	0x46ca	Standard query (0)	noos.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.140949011 CEST	192.168.2.7	1.1.1.1	0x4a28	Standard query (0)	mx.mix-good.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.141297102 CEST	192.168.2.7	1.1.1.1	0x233a	Standard query (0)	itelefonica.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.141360044 CEST	192.168.2.7	1.1.1.1	0x4aa2	Standard query (0)	mail.caudlept.plus.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.141597986 CEST	192.168.2.7	1.1.1.1	0xd040	Standard query (0)	mail.progmasters.hu	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.141597986 CEST	192.168.2.7	1.1.1.1	0x2ed9	Standard query (0)	telefonica.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.141927004 CEST	192.168.2.7	1.1.1.1	0x98c	Standard query (0)	securesmtp.wsadv.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.142393112 CEST	192.168.2.7	1.1.1.1	0x846f	Standard query (0)	mail.izabelfailde.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.142793894 CEST	192.168.2.7	1.1.1.1	0xedb7	Standard query (0)	secure.manx.neta	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.142793894 CEST	192.168.2.7	1.1.1.1	0x69a9	Standard query (0)	smtp.internouno.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.143059969 CEST	192.168.2.7	1.1.1.1	0xf859	Standard query (0)	nordnet.fr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.143059969 CEST	192.168.2.7	1.1.1.1	0xfefb	Standard query (0)	cnsl.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.143241882 CEST	192.168.2.7	1.1.1.1	0x7d89	Standard query (0)	smtp.nsgi.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.143671036 CEST	192.168.2.7	1.1.1.1	0xac73	Standard query (0)	rg.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.143903017 CEST	192.168.2.7	1.1.1.1	0x22d4	Standard query (0)	smtp.fdte.org.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.144803047 CEST	192.168.2.7	1.1.1.1	0x46de	Standard query (0)	buziaczki.pl	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.145293951 CEST	192.168.2.7	1.1.1.1	0xfff9	Standard query (0)	mail.modular.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.145293951 CEST	192.168.2.7	1.1.1.1	0xb23f	Standard query (0)	secure.scoala174.ro	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.145643950 CEST	192.168.2.7	1.1.1.1	0x1e49	Standard query (0)	mail.irs.gov	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.147480011 CEST	192.168.2.7	1.1.1.1	0xd87a	Standard query (0)	securesmtp.pentagon.co.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.148756027 CEST	192.168.2.7	1.1.1.1	0x4c1f	Standard query (0)	securesmtp.gjs.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.261795998 CEST	192.168.2.7	1.1.1.1	0x4f02	Standard query (0)	out.sketchish.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.261953115 CEST	192.168.2.7	1.1.1.1	0xc138	Standard query (0)	secure.khemistrinola.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.262200117 CEST	192.168.2.7	1.1.1.1	0x6496	Standard query (0)	mail.aquabins.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.262630939 CEST	192.168.2.7	1.1.1.1	0xb59d	Standard query (0)	earth.za.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.262816906 CEST	192.168.2.7	1.1.1.1	0x43b2	Standard query (0)	out.tvdestaque15.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.382144928 CEST	192.168.2.7	1.1.1.1	0x1a9e	Standard query (0)	sil.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.496790886 CEST	192.168.2.7	1.1.1.1	0x5604	Standard query (0)	out.ptyinvestor.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.496962070 CEST	192.168.2.7	1.1.1.1	0x2e31	Standard query (0)	studenti.unipd.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.497349024 CEST	192.168.2.7	1.1.1.1	0x280d	Standard query (0)	smtp.sseduks.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.497688055 CEST	192.168.2.7	1.1.1.1	0x1335	Standard query (0)	smtp.habitacional.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.615685940 CEST	192.168.2.7	1.1.1.1	0xbc95	Standard query (0)	secure.holland1.plus.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.615890026 CEST	192.168.2.7	1.1.1.1	0x8f7e	Standard query (0)	email.tst	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.747581005 CEST	192.168.2.7	1.1.1.1	0x6e5d	Standard query (0)	smtp.ferretforce.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.747879982 CEST	192.168.2.7	1.1.1.1	0x5845	Standard query (0)	out.daringtouch.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.747912884 CEST	192.168.2.7	1.1.1.1	0xeab2	Standard query (0)	mail.masterop.com.br	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.866282940 CEST	192.168.2.7	1.1.1.1	0x915e	Standard query (0)	securesmtp.smlindustries.in	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.866545916 CEST	192.168.2.7	1.1.1.1	0xfd42	Standard query (0)	securesmtp.mokapos.com	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.994363070 CEST	192.168.2.7	1.1.1.1	0x892	Standard query (0)	out.supereva.it	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.994932890 CEST	192.168.2.7	1.1.1.1	0xc958	Standard query (0)	mx4.eganet.go.tz	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.995059967 CEST	192.168.2.7	1.1.1.1	0x6ce3	Standard query (0)	securesmtp.tematik.com.tr	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.112325907 CEST	192.168.2.7	1.1.1.1	0x5e7	Standard query (0)	securesmtp.dvwr.de	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.112652063 CEST	192.168.2.7	1.1.1.1	0xa24	Standard query (0)	ewetel.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.113485098 CEST	192.168.2.7	1.1.1.1	0xcfbe	Standard query (0)	prodigy.net	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.270889997 CEST	192.168.2.7	1.1.1.1	0xb59d	Standard query (0)	earth.za.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jun 4, 2024 12:42:32.679481983 CEST	1.1.1.1	192.168.2.7	0x7911	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:42:38.286992073 CEST	1.1.1.1	192.168.2.7	0x14b6	No error (0)	clwtumberaero.cyou		185.43.220.45	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.391690969 CEST	1.1.1.1	192.168.2.7	0xb818	Name error (3)	mail.edu.uni-klu.ac.at	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.530181885 CEST	1.1.1.1	192.168.2.7	0x52dd	Name error (3)	secure.omibyarnetwork.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.789402962 CEST	1.1.1.1	192.168.2.7	0x9711	No error (0)	yaho.de		76.223.84.192	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.789402962 CEST	1.1.1.1	192.168.2.7	0x9711	No error (0)	yaho.de		13.248.158.7	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.836322069 CEST	1.1.1.1	192.168.2.7	0xc589	No error (0)	thru.my		113.23.205.39	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.853338003 CEST	1.1.1.1	192.168.2.7	0xd751	Name error (3)	mail.stmmediastore.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.969017982 CEST	1.1.1.1	192.168.2.7	0x3f86	No error (0)	nieuwegein.nl		185.71.61.14	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.973592997 CEST	1.1.1.1	192.168.2.7	0x6022	No error (0)	relay.micso.it		195.32.69.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:23.991708040 CEST	1.1.1.1	192.168.2.7	0x3ae6	Name error (3)	secure.yatesfamily.me.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.010009050 CEST	1.1.1.1	192.168.2.7	0xfb76	Name error (3)	out.ouellette.homeip.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.038403988 CEST	1.1.1.1	192.168.2.7	0xd83a	No error (0)	smtp.ig.com.br	smtp-ha.skymail.net.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:24.038403988 CEST	1.1.1.1	192.168.2.7	0xd83a	No error (0)	smtp-ha.skymail.net.br		168.0.132.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.053797960 CEST	1.1.1.1	192.168.2.7	0x3beb	No error (0)	smtp.superig.com.br	smtp-ha.skymail.net.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:24.053797960 CEST	1.1.1.1	192.168.2.7	0x3beb	No error (0)	smtp-ha.skymail.net.br		168.0.132.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.093195915 CEST	1.1.1.1	192.168.2.7	0xeef0	Name error (3)	securesmtp.pasteur.gr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.191075087 CEST	1.1.1.1	192.168.2.7	0xa90f	Name error (3)	secure.tinkerbox.com.sg	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.216824055 CEST	1.1.1.1	192.168.2.7	0x5485	Name error (3)	mail.fwcd.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.223721981 CEST	1.1.1.1	192.168.2.7	0xae58	Name error (3)	smtp.ulmipu.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.314461946 CEST	1.1.1.1	192.168.2.7	0x9386	Name error (3)	securesmtp.firehousejerky.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.314559937 CEST	1.1.1.1	192.168.2.7	0xdd1	No error (0)	mxs1.iconpln.net.id		103.145.30.229	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.326319933 CEST	1.1.1.1	192.168.2.7	0xa6d6	No error (0)	smtp.goliathacademy.org		66.226.70.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.337532997 CEST	1.1.1.1	192.168.2.7	0x8fe	Name error (3)	mail.riviera-productions.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.457346916 CEST	1.1.1.1	192.168.2.7	0x108c	Name error (3)	mail.campingcasadicaccia.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.535938978 CEST	1.1.1.1	192.168.2.7	0x98f5	No error (0)	oi.com.br		187.6.211.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.591325045 CEST	1.1.1.1	192.168.2.7	0xba2	Name error (3)	smtp.saintys.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.617546082 CEST	1.1.1.1	192.168.2.7	0x81d1	No error (0)	smtp.lapermittocarry.com		204.11.56.48	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.710396051 CEST	1.1.1.1	192.168.2.7	0x63f7	Name error (3)	secure.retailwarenhuis.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.713778973 CEST	1.1.1.1	192.168.2.7	0x7c19	Name error (3)	secure.jsw.pl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.714229107 CEST	1.1.1.1	192.168.2.7	0xe826	Name error (3)	mail.birobar.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.718981981 CEST	1.1.1.1	192.168.2.7	0xf688	Name error (3)	mail.deutschgames.tv	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.728728056 CEST	1.1.1.1	192.168.2.7	0xf4da	No error (0)	smtp.freemail.hu		84.2.43.67	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.732520103 CEST	1.1.1.1	192.168.2.7	0xb76d	Name error (3)	smtp.mikromess.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.744476080 CEST	1.1.1.1	192.168.2.7	0x5584	No error (0)	eyou.com		117.50.20.113	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.751416922 CEST	1.1.1.1	192.168.2.7	0x822	No error (0)	docomo.ne.jp		52.223.34.187	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.751416922 CEST	1.1.1.1	192.168.2.7	0x822	No error (0)	docomo.ne.jp		35.71.162.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.787700891 CEST	1.1.1.1	192.168.2.7	0x887b	Name error (3)	out.sd151.k12.id.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.796348095 CEST	1.1.1.1	192.168.2.7	0x268e	No error (0)	mail.rfiusa.org	mail.rfiusa.org.netsolmail.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:24.796348095 CEST	1.1.1.1	192.168.2.7	0x268e	No error (0)	mail.rfiusa.org.netsolmail.net	http.netsol.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:24.796348095 CEST	1.1.1.1	192.168.2.7	0x268e	No error (0)	http.netsol.xion.oxcs.net		23.81.68.43	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.856687069 CEST	1.1.1.1	192.168.2.7	0x9819	No error (0)	mail.hot.ee	imap.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:24.856687069 CEST	1.1.1.1	192.168.2.7	0x9819	No error (0)	imap.dka.mailcore.net		194.19.134.85	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.856687069 CEST	1.1.1.1	192.168.2.7	0x9819	No error (0)	imap.dka.mailcore.net		185.138.56.213	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.857723951 CEST	1.1.1.1	192.168.2.7	0x7d50	Name error (3)	smtp.x-pert.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.865633965 CEST	1.1.1.1	192.168.2.7	0xbe15	No error (0)	smtp.ziggo.nl		84.116.6.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	mail.hsd.k12.or.us	outlook.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.111.82	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.223.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.91.34	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.222.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.172.98	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.228.130	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.214.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.222.226	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.891139984 CEST	1.1.1.1	192.168.2.7	0x4643	No error (0)	outlook.com		52.96.229.242	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.945792913 CEST	1.1.1.1	192.168.2.7	0xfa82	Name error (3)	secure.roncoroni.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.946013927 CEST	1.1.1.1	192.168.2.7	0xfa82	Name error (3)	secure.roncoroni.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.960963964 CEST	1.1.1.1	192.168.2.7	0xe7c7	Name error (3)	smtp.mbst.uni-rostock.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.961431026 CEST	1.1.1.1	192.168.2.7	0x4fa9	No error (0)	temporary-mail.net		188.114.96.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:24.961431026 CEST	1.1.1.1	192.168.2.7	0x4fa9	No error (0)	temporary-mail.net		188.114.97.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.001144886 CEST	1.1.1.1	192.168.2.7	0xb1c0	Name error (3)	mail.desbrown.karoo.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.009682894 CEST	1.1.1.1	192.168.2.7	0x972d	No error (0)	nate.com		120.50.131.112	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.019150019 CEST	1.1.1.1	192.168.2.7	0xafef	Name error (3)	out.laregionalsa.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.091614962 CEST	1.1.1.1	192.168.2.7	0x9359	No error (0)	mx3.agenturserver.de		185.15.192.58	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.092946053 CEST	1.1.1.1	192.168.2.7	0xa456	Name error (3)	out.francetv.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.095612049 CEST	1.1.1.1	192.168.2.7	0x2f80	No error (0)	mx.generic-isp.com		142.93.237.125	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.096733093 CEST	1.1.1.1	192.168.2.7	0xca37	No error (0)	aspmx2.googlemail.com		142.250.153.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.103826046 CEST	1.1.1.1	192.168.2.7	0xd8f3	Name error (3)	heilige-garde.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.104365110 CEST	1.1.1.1	192.168.2.7	0xf166	No error (0)	smtp.citromail.hu	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:25.104365110 CEST	1.1.1.1	192.168.2.7	0xf166	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.104365110 CEST	1.1.1.1	192.168.2.7	0xf166	No error (0)	smtp.dka.mailcore.net		185.138.56.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.105906963 CEST	1.1.1.1	192.168.2.7	0xbd8c	Name error (3)	securesmtp.asoberway.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.127909899 CEST	1.1.1.1	192.168.2.7	0x29b2	Name error (3)	secure.reecon.eclipse.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.203432083 CEST	1.1.1.1	192.168.2.7	0x66d3	No error (0)	mail.superkingsmall.com.ng	superkingsmall.com.ng		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:25.203432083 CEST	1.1.1.1	192.168.2.7	0x66d3	No error (0)	superkingsmall.com.ng		160.119.252.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.203480959 CEST	1.1.1.1	192.168.2.7	0x66d3	No error (0)	mail.superkingsmall.com.ng	superkingsmall.com.ng		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:25.203480959 CEST	1.1.1.1	192.168.2.7	0x66d3	No error (0)	superkingsmall.com.ng		160.119.252.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.218509912 CEST	1.1.1.1	192.168.2.7	0xd581	No error (0)	mail.uem.br	imap.gmail.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:25.218509912 CEST	1.1.1.1	192.168.2.7	0xd581	No error (0)	imap.gmail.com		108.177.15.108	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.218509912 CEST	1.1.1.1	192.168.2.7	0xd581	No error (0)	imap.gmail.com		108.177.15.109	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.218674898 CEST	1.1.1.1	192.168.2.7	0xed44	No error (0)	securesmtp.infotech.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.286808968 CEST	1.1.1.1	192.168.2.7	0xcd0d	Name error (3)	securesmtp.shahsolutions.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.335215092 CEST	1.1.1.1	192.168.2.7	0x90aa	No error (0)	aspmx.l.google.com		173.194.76.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.340792894 CEST	1.1.1.1	192.168.2.7	0xa235	No error (0)	telia.com		81.236.63.162	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.348380089 CEST	1.1.1.1	192.168.2.7	0x5a79	Name error (3)	securesmtp.deltaeurofridge.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.352102041 CEST	1.1.1.1	192.168.2.7	0x6716	No error (0)	smtp.post.cz		77.75.77.165	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.382791996 CEST	1.1.1.1	192.168.2.7	0x3572	Name error (3)	smtp.kartmagic.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.390347004 CEST	1.1.1.1	192.168.2.7	0xd370	Name error (3)	secure.kaera.co.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.406127930 CEST	1.1.1.1	192.168.2.7	0x7a6c	No error (0)	mail.pevkolej.k12.tr	pevkolej.k12.tr		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:25.406127930 CEST	1.1.1.1	192.168.2.7	0x7a6c	No error (0)	pevkolej.k12.tr		94.102.6.76	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.430210114 CEST	1.1.1.1	192.168.2.7	0x751b	Server failure (2)	out.ham.org.tw	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.430491924 CEST	1.1.1.1	192.168.2.7	0x751b	Server failure (2)	out.ham.org.tw	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.458621025 CEST	1.1.1.1	192.168.2.7	0x5db0	Name error (3)	secure.ctlcloud.pw	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.459840059 CEST	1.1.1.1	192.168.2.7	0x5af9	No error (0)	mx2.hostinger.com		172.65.182.103	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.461576939 CEST	1.1.1.1	192.168.2.7	0x4b58	Name error (3)	out.kingedwaracademy.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.471128941 CEST	1.1.1.1	192.168.2.7	0x43e1	Name error (3)	mail.aak-schubert.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.490202904 CEST	1.1.1.1	192.168.2.7	0x715f	Name error (3)	smtp.mexonexc.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.580553055 CEST	1.1.1.1	192.168.2.7	0x7dcd	No error (0)	mail.optonline.net	mail.altice.prod.cloud.openwave.ai		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:25.580553055 CEST	1.1.1.1	192.168.2.7	0x7dcd	No error (0)	mail.altice.prod.cloud.openwave.ai		65.20.63.172	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.601761103 CEST	1.1.1.1	192.168.2.7	0x83c8	No error (0)	smtp.telenet.be		195.130.132.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.601761103 CEST	1.1.1.1	192.168.2.7	0x83c8	No error (0)	smtp.telenet.be		195.130.132.11	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.605072021 CEST	1.1.1.1	192.168.2.7	0xe6b6	Name error (3)	securesmtp.luckyadmin.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.643213034 CEST	1.1.1.1	192.168.2.7	0xf29f	Name error (3)	mail.timolang.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.643702984 CEST	1.1.1.1	192.168.2.7	0x42bc	Name error (3)	securesmtp.svasti.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.697356939 CEST	1.1.1.1	192.168.2.7	0xc0b5	Name error (3)	secure.franmetal.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.701025963 CEST	1.1.1.1	192.168.2.7	0x1	No error (0)	smtp.carnegienet.net		104.153.0.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.710098982 CEST	1.1.1.1	192.168.2.7	0xedb	Name error (3)	securesmtp.jeffrutherford.com.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.721664906 CEST	1.1.1.1	192.168.2.7	0xac51	Name error (3)	secure.tahoo.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.723398924 CEST	1.1.1.1	192.168.2.7	0x30e3	No error (0)	theworkgroupinc.com		74.208.236.198	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.731426954 CEST	1.1.1.1	192.168.2.7	0x77d9	Name error (3)	secure.rutonworking.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:25.987118006 CEST	1.1.1.1	192.168.2.7	0x8d5e	Name error (3)	out.adoramidia.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.021522999 CEST	1.1.1.1	192.168.2.7	0x9d43	No error (0)	smtp.millims.com	us2.smtp.mailhostbox.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:26.021522999 CEST	1.1.1.1	192.168.2.7	0x9d43	No error (0)	us2.smtp.mailhostbox.com		208.91.199.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.021522999 CEST	1.1.1.1	192.168.2.7	0x9d43	No error (0)	us2.smtp.mailhostbox.com		208.91.198.143	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.021522999 CEST	1.1.1.1	192.168.2.7	0x9d43	No error (0)	us2.smtp.mailhostbox.com		208.91.199.224	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.021522999 CEST	1.1.1.1	192.168.2.7	0x9d43	No error (0)	us2.smtp.mailhostbox.com		208.91.199.223	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.065252066 CEST	1.1.1.1	192.168.2.7	0xaf77	Name error (3)	smtp.modaviva.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.094353914 CEST	1.1.1.1	192.168.2.7	0x7ef1	No error (0)	mail.costaveras.com.br	pop.costaveras.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:26.094353914 CEST	1.1.1.1	192.168.2.7	0x7ef1	No error (0)	pop.costaveras.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:26.094353914 CEST	1.1.1.1	192.168.2.7	0x7ef1	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.218472958 CEST	1.1.1.1	192.168.2.7	0xcc2b	No error (0)	medlinx.co.id		149.129.214.116	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.220141888 CEST	1.1.1.1	192.168.2.7	0x26f6	Name error (3)	out.558dcfb5e7.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.220921040 CEST	1.1.1.1	192.168.2.7	0x6b	Name error (3)	secure.leslilathrom.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.229948044 CEST	1.1.1.1	192.168.2.7	0xecb3	No error (0)	freddy-mueller.de		104.21.41.110	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.229948044 CEST	1.1.1.1	192.168.2.7	0xecb3	No error (0)	freddy-mueller.de		172.67.164.112	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.230743885 CEST	1.1.1.1	192.168.2.7	0x363b	Name error (3)	xbarnet.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.246536970 CEST	1.1.1.1	192.168.2.7	0x1ba1	Name error (3)	securesmtp.g-e.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.352197886 CEST	1.1.1.1	192.168.2.7	0x742d	Name error (3)	mail.eds.dd	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.362710953 CEST	1.1.1.1	192.168.2.7	0x57ca	No error (0)	gridinfosys-com.mail.protection.outlook.com		52.101.148.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.362710953 CEST	1.1.1.1	192.168.2.7	0x57ca	No error (0)	gridinfosys-com.mail.protection.outlook.com		52.101.148.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.362710953 CEST	1.1.1.1	192.168.2.7	0x57ca	No error (0)	gridinfosys-com.mail.protection.outlook.com		52.101.148.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.362710953 CEST	1.1.1.1	192.168.2.7	0x57ca	No error (0)	gridinfosys-com.mail.protection.outlook.com		52.101.148.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.366153002 CEST	1.1.1.1	192.168.2.7	0xde99	No error (0)	aon.at		193.81.82.81	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.368421078 CEST	1.1.1.1	192.168.2.7	0xe9c	Name error (3)	out.schreiner-schnitzenbaumer.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.402420044 CEST	1.1.1.1	192.168.2.7	0x6fbc	No error (0)	smtp.virgilio.it	out.virgilio.it		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:26.402420044 CEST	1.1.1.1	192.168.2.7	0x6fbc	No error (0)	out.virgilio.it		213.209.1.145	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.465848923 CEST	1.1.1.1	192.168.2.7	0x8f81	Name error (3)	5f798dfe5f.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.477654934 CEST	1.1.1.1	192.168.2.7	0xdb1d	Server failure (2)	digimail.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.482196093 CEST	1.1.1.1	192.168.2.7	0x947d	Name error (3)	jq-informatics.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.489521027 CEST	1.1.1.1	192.168.2.7	0xbf27	Name error (3)	secure.fhv.at	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.530682087 CEST	1.1.1.1	192.168.2.7	0x4f8b	Name error (3)	smtp.a3proyectos.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.537771940 CEST	1.1.1.1	192.168.2.7	0xf6c1	No error (0)	ultra-speed.url.tw		210.59.228.45	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.551189899 CEST	1.1.1.1	192.168.2.7	0x1	No error (0)	wsspartans.org		216.239.32.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.551189899 CEST	1.1.1.1	192.168.2.7	0x1	No error (0)	wsspartans.org		216.239.34.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.551189899 CEST	1.1.1.1	192.168.2.7	0x1	No error (0)	wsspartans.org		216.239.36.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.551189899 CEST	1.1.1.1	192.168.2.7	0x1	No error (0)	wsspartans.org		216.239.38.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.566884995 CEST	1.1.1.1	192.168.2.7	0x136e	No error (0)	tradetec.es		5.135.40.30	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.577615976 CEST	1.1.1.1	192.168.2.7	0x413e	No error (0)	mail.i.ua		104.18.2.81	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.577615976 CEST	1.1.1.1	192.168.2.7	0x413e	No error (0)	mail.i.ua		104.18.3.81	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.601239920 CEST	1.1.1.1	192.168.2.7	0x6793	Name error (3)	mail.8418f58be3.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.611561060 CEST	1.1.1.1	192.168.2.7	0x83ff	No error (0)	spoluzaci.cz		77.75.78.173	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.626689911 CEST	1.1.1.1	192.168.2.7	0x89aa	No error (0)	mail.sg10vl.ro	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:26.626689911 CEST	1.1.1.1	192.168.2.7	0x89aa	No error (0)	ghs.googlehosted.com		172.217.18.115	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.706326008 CEST	1.1.1.1	192.168.2.7	0x558d	Name error (3)	secure.monplaisircollege.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.710140944 CEST	1.1.1.1	192.168.2.7	0x3c0a	Name error (3)	mail.ecountrystore.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.717202902 CEST	1.1.1.1	192.168.2.7	0x8864	Name error (3)	out.caslondon.on.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.735430956 CEST	1.1.1.1	192.168.2.7	0x322b	Name error (3)	smtp.privfit.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.799511909 CEST	1.1.1.1	192.168.2.7	0xfb31	No error (0)	smtp.adv.oabsp.org.br	smtp-ha.skymail.net.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:26.799511909 CEST	1.1.1.1	192.168.2.7	0xfb31	No error (0)	smtp-ha.skymail.net.br		168.0.132.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.846342087 CEST	1.1.1.1	192.168.2.7	0xe02c	No error (0)	4blue.com.br		188.114.97.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.846342087 CEST	1.1.1.1	192.168.2.7	0xe02c	No error (0)	4blue.com.br		188.114.96.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.942084074 CEST	1.1.1.1	192.168.2.7	0x44d0	No error (0)	foodscience.co.jp		163.44.185.233	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.942131996 CEST	1.1.1.1	192.168.2.7	0x44d0	No error (0)	foodscience.co.jp		163.44.185.233	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.959839106 CEST	1.1.1.1	192.168.2.7	0xe4e9	Name error (3)	smtp.videa.hu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.973927975 CEST	1.1.1.1	192.168.2.7	0x9db0	No error (0)	out.auladaf.com		172.67.188.253	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.973927975 CEST	1.1.1.1	192.168.2.7	0x9db0	No error (0)	out.auladaf.com		104.21.51.221	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:26.988538980 CEST	1.1.1.1	192.168.2.7	0x63e4	No error (0)	redeuniaonacional.com.br		108.167.188.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.006942034 CEST	1.1.1.1	192.168.2.7	0x3f4b	No error (0)	mail.hdp.com.br	hdp.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:27.006942034 CEST	1.1.1.1	192.168.2.7	0x3f4b	No error (0)	hdp.com.br		107.155.89.162	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.069689035 CEST	1.1.1.1	192.168.2.7	0x84b9	Name error (3)	secure.chest.or.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.106364012 CEST	1.1.1.1	192.168.2.7	0xc103	Name error (3)	securesmtp.rosellestudent.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.130579948 CEST	1.1.1.1	192.168.2.7	0x9ab9	No error (0)	out.greenvapes.co.uk		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.141128063 CEST	1.1.1.1	192.168.2.7	0xa75d	No error (0)	mail.lorenzapucci.it		62.149.128.166	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.141128063 CEST	1.1.1.1	192.168.2.7	0xa75d	No error (0)	mail.lorenzapucci.it		62.149.128.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.141128063 CEST	1.1.1.1	192.168.2.7	0xa75d	No error (0)	mail.lorenzapucci.it		62.149.128.157	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.141128063 CEST	1.1.1.1	192.168.2.7	0xa75d	No error (0)	mail.lorenzapucci.it		62.149.128.151	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.141128063 CEST	1.1.1.1	192.168.2.7	0xa75d	No error (0)	mail.lorenzapucci.it		62.149.128.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.141128063 CEST	1.1.1.1	192.168.2.7	0xa75d	No error (0)	mail.lorenzapucci.it		62.149.128.160	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.152278900 CEST	1.1.1.1	192.168.2.7	0x120d	Name error (3)	out.bits.com.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.166660070 CEST	1.1.1.1	192.168.2.7	0x24f0	No error (0)	promad.com.mx		216.230.229.247	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.208528042 CEST	1.1.1.1	192.168.2.7	0xb46b	Name error (3)	securesmtp.quigleyssmokehouse.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.220865011 CEST	1.1.1.1	192.168.2.7	0xd199	No error (0)	15zero15-com.mail.protection.outlook.com		52.101.73.24	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.220865011 CEST	1.1.1.1	192.168.2.7	0xd199	No error (0)	15zero15-com.mail.protection.outlook.com		52.101.73.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.220865011 CEST	1.1.1.1	192.168.2.7	0xd199	No error (0)	15zero15-com.mail.protection.outlook.com		52.101.68.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.220865011 CEST	1.1.1.1	192.168.2.7	0xd199	No error (0)	15zero15-com.mail.protection.outlook.com		52.101.68.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.220865011 CEST	1.1.1.1	192.168.2.7	0xd199	No error (0)	15zero15-com.mail.protection.outlook.com		52.101.73.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.220865011 CEST	1.1.1.1	192.168.2.7	0xd199	No error (0)	15zero15-com.mail.protection.outlook.com		52.101.73.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.220865011 CEST	1.1.1.1	192.168.2.7	0xd199	No error (0)	15zero15-com.mail.protection.outlook.com		52.101.68.39	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.231455088 CEST	1.1.1.1	192.168.2.7	0x87a7	No error (0)	secure.saintongeecoconfort.fr		109.234.161.75	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.243756056 CEST	1.1.1.1	192.168.2.7	0x1938	Name error (3)	smtp.gruppounica.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.321144104 CEST	1.1.1.1	192.168.2.7	0xc1c3	Name error (3)	secure.bigcarnes.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.321613073 CEST	1.1.1.1	192.168.2.7	0x1d5f	No error (0)	mwt-mx.email-protect.gosecure.net		208.80.204.162	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.324657917 CEST	1.1.1.1	192.168.2.7	0xeebe	Name error (3)	securesmtp.renovamaquinas.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.333304882 CEST	1.1.1.1	192.168.2.7	0x59a4	Name error (3)	mail.rts.net.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.342204094 CEST	1.1.1.1	192.168.2.7	0xfa77	Name error (3)	maebars.tk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.363401890 CEST	1.1.1.1	192.168.2.7	0x2ceb	No error (0)	depedmalaboncity.ph		97.74.81.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.364022970 CEST	1.1.1.1	192.168.2.7	0xab73	Name error (3)	securesmtp.ugecamne.fitech.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.433597088 CEST	1.1.1.1	192.168.2.7	0xd0eb	Name error (3)	out.ag.wakwak.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.450103998 CEST	1.1.1.1	192.168.2.7	0x60a2	Name error (3)	masingresos.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.454143047 CEST	1.1.1.1	192.168.2.7	0x9bc2	No error (0)	smtp.sysria.com		217.76.151.9	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.463494062 CEST	1.1.1.1	192.168.2.7	0x99b5	Name error (3)	mail.gmbol.cem	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.483191013 CEST	1.1.1.1	192.168.2.7	0x47ff	Name error (3)	mail.nationwide.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.488534927 CEST	1.1.1.1	192.168.2.7	0x91a3	Name error (3)	mail.kevinrush.plus.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.495162964 CEST	1.1.1.1	192.168.2.7	0xf44d	No error (0)	useroor.pr.hu		87.242.0.7	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.499140024 CEST	1.1.1.1	192.168.2.7	0xc787	Name error (3)	out.gabrielevilla.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.514899015 CEST	1.1.1.1	192.168.2.7	0x735e	Name error (3)	secure.lebrede.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.560193062 CEST	1.1.1.1	192.168.2.7	0x5a27	No error (0)	mail.dngc.ac.in	dngc.ac.in		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:27.560193062 CEST	1.1.1.1	192.168.2.7	0x5a27	No error (0)	dngc.ac.in		142.171.118.47	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.565459967 CEST	1.1.1.1	192.168.2.7	0x3ea2	No error (0)	mxb.mailgun.org		34.160.157.95	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.567586899 CEST	1.1.1.1	192.168.2.7	0xa67d	Name error (3)	out.lowhosting.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.569710016 CEST	1.1.1.1	192.168.2.7	0xd6c	No error (0)	smtp.vodafone.de	smtp.vodafonemail.de		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:27.569710016 CEST	1.1.1.1	192.168.2.7	0xd6c	No error (0)	smtp.vodafonemail.de		2.207.150.234	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.575587034 CEST	1.1.1.1	192.168.2.7	0xeb39	No error (0)	smtp.yare-edu.org.uk		79.170.40.4	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.581373930 CEST	1.1.1.1	192.168.2.7	0xeff	Name error (3)	out.gmil.nz	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.584702969 CEST	1.1.1.1	192.168.2.7	0x2ce3	No error (0)	gravolab.ro		89.42.218.97	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.632323980 CEST	1.1.1.1	192.168.2.7	0x7b02	No error (0)	out.o2bkids.com	o2bkids.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:27.632323980 CEST	1.1.1.1	192.168.2.7	0x7b02	No error (0)	o2bkids.com		192.124.249.56	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.647743940 CEST	1.1.1.1	192.168.2.7	0x7d8c	No error (0)	alliebillings.com	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:27.647743940 CEST	1.1.1.1	192.168.2.7	0x7d8c	No error (0)	77980.bodis.com		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.673868895 CEST	1.1.1.1	192.168.2.7	0x9036	No error (0)	securesmtp.ms890.org		199.34.228.151	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.678427935 CEST	1.1.1.1	192.168.2.7	0x2e80	Name error (3)	secure.ag.netyou.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.920495033 CEST	1.1.1.1	192.168.2.7	0x9eae	Name error (3)	securesmtp.nds.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.920746088 CEST	1.1.1.1	192.168.2.7	0xb8c	No error (0)	smtp.crtba.org.br	smtp-ha.skymail.net.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:27.920746088 CEST	1.1.1.1	192.168.2.7	0xb8c	No error (0)	smtp-ha.skymail.net.br		168.0.132.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.920948029 CEST	1.1.1.1	192.168.2.7	0x4336	Name error (3)	smtp.i.hosei.ac.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.922187090 CEST	1.1.1.1	192.168.2.7	0x911a	Name error (3)	secure.namtrieu.com.vn	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.922676086 CEST	1.1.1.1	192.168.2.7	0xb8c	No error (0)	smtp.crtba.org.br	smtp-ha.skymail.net.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:27.922676086 CEST	1.1.1.1	192.168.2.7	0xb8c	No error (0)	smtp-ha.skymail.net.br		168.0.132.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.922714949 CEST	1.1.1.1	192.168.2.7	0x911a	Name error (3)	secure.namtrieu.com.vn	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.931019068 CEST	1.1.1.1	192.168.2.7	0xbe08	No error (0)	telekom.de		80.158.67.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.938425064 CEST	1.1.1.1	192.168.2.7	0xca91	No error (0)	mail.sbfz.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.944550037 CEST	1.1.1.1	192.168.2.7	0x245b	Name error (3)	secure.p6comunicacao.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.945095062 CEST	1.1.1.1	192.168.2.7	0x8549	Name error (3)	out.uva.eg	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.951349020 CEST	1.1.1.1	192.168.2.7	0xc036	Name error (3)	securesmtp.unicredmg.coop.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.952651024 CEST	1.1.1.1	192.168.2.7	0x8f39	No error (0)	alt1.aspmx.l.google.com		142.250.153.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.953471899 CEST	1.1.1.1	192.168.2.7	0x20c7	No error (0)	ALT2.ASPMX.L.GOOGLE.COM		142.251.9.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.962166071 CEST	1.1.1.1	192.168.2.7	0xa68b	Name error (3)	secure.quikefoods.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.964216948 CEST	1.1.1.1	192.168.2.7	0x326c	Name error (3)	secure.resolution-air.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.972109079 CEST	1.1.1.1	192.168.2.7	0xbc30	No error (0)	securesmtp.vsvs.com		64.190.63.222	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.985980034 CEST	1.1.1.1	192.168.2.7	0x6561	Name error (3)	secure.plan316.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:27.997183084 CEST	1.1.1.1	192.168.2.7	0xfcd8	Name error (3)	secure.prion.ucl.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.002192974 CEST	1.1.1.1	192.168.2.7	0x17de	Name error (3)	out.kitchenbarn.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.077449083 CEST	1.1.1.1	192.168.2.7	0xd486	Name error (3)	smtp.chandela.co.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.086430073 CEST	1.1.1.1	192.168.2.7	0xed90	Name error (3)	secure.rollspack.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.088465929 CEST	1.1.1.1	192.168.2.7	0x6217	No error (0)	mx003.netsol.xion.oxcs.net		51.81.206.108	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.090650082 CEST	1.1.1.1	192.168.2.7	0x1a53	No error (0)	rogers.com		40.85.218.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.097347021 CEST	1.1.1.1	192.168.2.7	0x67a4	Name error (3)	out.rahsiakambing.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.097872972 CEST	1.1.1.1	192.168.2.7	0x3789	No error (0)	mclink.it		109.168.108.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.109312057 CEST	1.1.1.1	192.168.2.7	0xfdde	No error (0)	mx.talktalk.net		62.24.202.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.129559040 CEST	1.1.1.1	192.168.2.7	0x44f2	No error (0)	out.clubkombinat.de		81.28.232.69	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.151572943 CEST	1.1.1.1	192.168.2.7	0x8e8e	Name error (3)	securesmtp.novalisadvisors.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.155322075 CEST	1.1.1.1	192.168.2.7	0x2807	Name error (3)	smtp.technomade.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.163749933 CEST	1.1.1.1	192.168.2.7	0x5087	Name error (3)	out.santen.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.210890055 CEST	1.1.1.1	192.168.2.7	0x85de	Name error (3)	smtp.bhfh.rn	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.223088026 CEST	1.1.1.1	192.168.2.7	0xbaa0	Name error (3)	smtp.smany.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.226191998 CEST	1.1.1.1	192.168.2.7	0x337	No error (0)	freundeimnetz.de		81.169.145.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.253386021 CEST	1.1.1.1	192.168.2.7	0xae16	Name error (3)	mail.equpointproperty.co.tz	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.278709888 CEST	1.1.1.1	192.168.2.7	0xdc00	No error (0)	pra.com.tr		172.67.186.83	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.278709888 CEST	1.1.1.1	192.168.2.7	0xdc00	No error (0)	pra.com.tr		104.21.68.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.326679945 CEST	1.1.1.1	192.168.2.7	0xa29a	No error (0)	alt3.aspmx.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.328443050 CEST	1.1.1.1	192.168.2.7	0x2da3	Name error (3)	out.compolar.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.331204891 CEST	1.1.1.1	192.168.2.7	0x4ee6	No error (0)	wantel.com.br		154.53.51.218	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.356643915 CEST	1.1.1.1	192.168.2.7	0x36af	Name error (3)	smtp.alleader.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.370431900 CEST	1.1.1.1	192.168.2.7	0x1dc1	Name error (3)	mail.bbwgroup.cn	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.383820057 CEST	1.1.1.1	192.168.2.7	0x8df2	No error (0)	mail.aarhushfogvuc.dk	post.aarhushfogvuc.dk		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:28.383820057 CEST	1.1.1.1	192.168.2.7	0x8df2	No error (0)	post.aarhushfogvuc.dk		87.54.32.247	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.434889078 CEST	1.1.1.1	192.168.2.7	0xe930	No error (0)	smtp.jcom.home.ne.jp	jcom-home.mx.zaq.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:28.434889078 CEST	1.1.1.1	192.168.2.7	0xe930	No error (0)	jcom-home.mx.zaq.ne.jp		175.135.254.129	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.434889078 CEST	1.1.1.1	192.168.2.7	0xe930	No error (0)	jcom-home.mx.zaq.ne.jp		175.135.253.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.434958935 CEST	1.1.1.1	192.168.2.7	0x6467	No error (0)	mail.goo.ne.jp		114.179.184.189	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.437328100 CEST	1.1.1.1	192.168.2.7	0x49bd	Name error (3)	secure.media24.co.za	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.445712090 CEST	1.1.1.1	192.168.2.7	0x5030	No error (0)	mx.zoho.com		204.141.43.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.447230101 CEST	1.1.1.1	192.168.2.7	0xfbc5	No error (0)	aspmx5.googlemail.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.448776007 CEST	1.1.1.1	192.168.2.7	0xf168	No error (0)	mail.multcomercial.com.br	pop.multcomercial.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:28.448776007 CEST	1.1.1.1	192.168.2.7	0xf168	No error (0)	pop.multcomercial.com.br	mail.b.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:28.448776007 CEST	1.1.1.1	192.168.2.7	0xf168	No error (0)	mail.b.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.595774889 CEST	1.1.1.1	192.168.2.7	0x77	No error (0)	cheapnet.it		87.238.28.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.602401018 CEST	1.1.1.1	192.168.2.7	0x4398	Name error (3)	securesmtp.primrose.co	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.653875113 CEST	1.1.1.1	192.168.2.7	0x21f4	No error (0)	securesmtp.libertyelementary.net		208.91.197.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.664614916 CEST	1.1.1.1	192.168.2.7	0xe469	No error (0)	brturbo.com.br		50.116.87.133	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.691199064 CEST	1.1.1.1	192.168.2.7	0xd39	Name error (3)	secure.keiaisha.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.695084095 CEST	1.1.1.1	192.168.2.7	0x4611	No error (0)	smtp.schokman.co	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:28.695084095 CEST	1.1.1.1	192.168.2.7	0x4611	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.714728117 CEST	1.1.1.1	192.168.2.7	0xac2c	Name error (3)	smtp.tele2.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.719131947 CEST	1.1.1.1	192.168.2.7	0x6ef8	Name error (3)	smtp.epikureerna.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.734447002 CEST	1.1.1.1	192.168.2.7	0xe56b	Name error (3)	mail.hostlocation.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.741179943 CEST	1.1.1.1	192.168.2.7	0xfe66	No error (0)	smtp.sit.ac.nz		202.50.90.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.742172003 CEST	1.1.1.1	192.168.2.7	0x39d	No error (0)	mx.starikmail.in		167.172.23.243	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.843897104 CEST	1.1.1.1	192.168.2.7	0x4361	Name error (3)	securesmtp.institutozuriel.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.865448952 CEST	1.1.1.1	192.168.2.7	0x447b	Name error (3)	secure.koski.gov.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:28.975686073 CEST	1.1.1.1	192.168.2.7	0x5a02	No error (0)	ya.com		89.39.182.172	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.050434113 CEST	1.1.1.1	192.168.2.7	0x13dd	Name error (3)	securesmtp.rohr.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.084779978 CEST	1.1.1.1	192.168.2.7	0xb2	No error (0)	peonsport.es		195.201.87.79	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.105789900 CEST	1.1.1.1	192.168.2.7	0x20c6	Name error (3)	secure.localaccess.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.200628042 CEST	1.1.1.1	192.168.2.7	0x5f49	No error (0)	countryhillscrematorium.ca		107.180.3.104	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.220930099 CEST	1.1.1.1	192.168.2.7	0x4155	No error (0)	luster-kommune-no.mail.protection.outlook.com		52.101.73.22	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.220930099 CEST	1.1.1.1	192.168.2.7	0x4155	No error (0)	luster-kommune-no.mail.protection.outlook.com		52.101.73.11	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.220930099 CEST	1.1.1.1	192.168.2.7	0x4155	No error (0)	luster-kommune-no.mail.protection.outlook.com		52.101.68.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.220930099 CEST	1.1.1.1	192.168.2.7	0x4155	No error (0)	luster-kommune-no.mail.protection.outlook.com		52.101.73.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.220930099 CEST	1.1.1.1	192.168.2.7	0x4155	No error (0)	luster-kommune-no.mail.protection.outlook.com		52.101.73.8	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.220930099 CEST	1.1.1.1	192.168.2.7	0x4155	No error (0)	luster-kommune-no.mail.protection.outlook.com		52.101.68.29	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.220930099 CEST	1.1.1.1	192.168.2.7	0x4155	No error (0)	luster-kommune-no.mail.protection.outlook.com		52.101.68.8	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.220966101 CEST	1.1.1.1	192.168.2.7	0x6854	Name error (3)	mail.stmmediastore.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.268049002 CEST	1.1.1.1	192.168.2.7	0x70b8	Name error (3)	mail.ppski-kaltim.indobelajar.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.343791962 CEST	1.1.1.1	192.168.2.7	0xd2a8	Name error (3)	grifoncapital.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.500770092 CEST	1.1.1.1	192.168.2.7	0xd049	No error (0)	mail.aromamarketing.com.co	aromamarketing.com.co		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:29.500770092 CEST	1.1.1.1	192.168.2.7	0xd049	No error (0)	aromamarketing.com.co		75.102.22.71	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.500881910 CEST	1.1.1.1	192.168.2.7	0x9385	No error (0)	exactmedia.co.uk		67.205.22.228	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.517954111 CEST	1.1.1.1	192.168.2.7	0xf5be	No error (0)	secure.diocesivigevano.it		89.40.173.57	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.587229967 CEST	1.1.1.1	192.168.2.7	0x45a2	No error (0)	wcdsb.ca		54.39.244.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.647794962 CEST	1.1.1.1	192.168.2.7	0x5dde	No error (0)	mail.novabrand.nl		85.10.159.54	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.693706989 CEST	1.1.1.1	192.168.2.7	0xfa30	No error (0)	aspmx3.googlemail.com		142.251.9.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.706785917 CEST	1.1.1.1	192.168.2.7	0xd066	No error (0)	smtp.inspire.net.nz		203.114.168.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.815215111 CEST	1.1.1.1	192.168.2.7	0xa78a	No error (0)	guruku.id		188.114.96.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.815215111 CEST	1.1.1.1	192.168.2.7	0xa78a	No error (0)	guruku.id		188.114.97.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:29.849343061 CEST	1.1.1.1	192.168.2.7	0xcbe5	Name error (3)	smtp.kokillo.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.000978947 CEST	1.1.1.1	192.168.2.7	0xd79f	Name error (3)	secure.cardinal.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.186415911 CEST	1.1.1.1	192.168.2.7	0x432b	No error (0)	mx01.ionos.de		217.72.192.67	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.248930931 CEST	1.1.1.1	192.168.2.7	0x9425	No error (0)	primosoft.co.in		103.235.106.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.361002922 CEST	1.1.1.1	192.168.2.7	0x7e3a	Name error (3)	secure.carrollfoodservice.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.409128904 CEST	1.1.1.1	192.168.2.7	0x7e4c	No error (0)	smtp.cutlite.com.br	pop.cutlite.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:30.409128904 CEST	1.1.1.1	192.168.2.7	0x7e4c	No error (0)	pop.cutlite.com.br	mail.b.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:30.409128904 CEST	1.1.1.1	192.168.2.7	0x7e4c	No error (0)	mail.b.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.409157038 CEST	1.1.1.1	192.168.2.7	0x7e4c	No error (0)	smtp.cutlite.com.br	pop.cutlite.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:30.409157038 CEST	1.1.1.1	192.168.2.7	0x7e4c	No error (0)	pop.cutlite.com.br	mail.b.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:30.409157038 CEST	1.1.1.1	192.168.2.7	0x7e4c	No error (0)	mail.b.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.506834030 CEST	1.1.1.1	192.168.2.7	0x92a4	No error (0)	mail.ipolicandri.it		144.76.112.115	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.517169952 CEST	1.1.1.1	192.168.2.7	0x99a8	Name error (3)	secure.boditech.co.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.517183065 CEST	1.1.1.1	192.168.2.7	0x99a8	Name error (3)	secure.boditech.co.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.525067091 CEST	1.1.1.1	192.168.2.7	0x1444	No error (0)	smtp.gamil.com		192.252.154.117	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.544509888 CEST	1.1.1.1	192.168.2.7	0x3803	No error (0)	ntc.org.br		69.49.115.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.753094912 CEST	1.1.1.1	192.168.2.7	0x2e6d	No error (0)	securesmtp.donotreply.com		103.224.182.246	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.755173922 CEST	1.1.1.1	192.168.2.7	0x1d55	Name error (3)	smtp.giardinodiandrea.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.805749893 CEST	1.1.1.1	192.168.2.7	0x8070	Name error (3)	out.topdevelopers.co	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.982557058 CEST	1.1.1.1	192.168.2.7	0x6635	No error (0)	smtp.me.com	smtp.me.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:30.994730949 CEST	1.1.1.1	192.168.2.7	0x1826	No error (0)	securesmtp.tirol.com		213.33.87.55	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:30.997535944 CEST	1.1.1.1	192.168.2.7	0x617d	Name error (3)	mail.cascadeschools.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.002321005 CEST	1.1.1.1	192.168.2.7	0x5549	Name error (3)	secure.jeitler.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.017064095 CEST	1.1.1.1	192.168.2.7	0x18da	Name error (3)	securesmtp.gdjenkins.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.024317026 CEST	1.1.1.1	192.168.2.7	0xdb7	Name error (3)	secure.bronchick.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.164777040 CEST	1.1.1.1	192.168.2.7	0x70db	No error (0)	smtp.netzero.net		64.136.44.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.164777040 CEST	1.1.1.1	192.168.2.7	0x70db	No error (0)	smtp.netzero.net		64.136.52.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.233464003 CEST	1.1.1.1	192.168.2.7	0xd175	No error (0)	mx0.dravanet.net		109.61.0.142	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.233464003 CEST	1.1.1.1	192.168.2.7	0xd175	No error (0)	mx0.dravanet.net		109.61.0.141	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.237232924 CEST	1.1.1.1	192.168.2.7	0x3010	No error (0)	mx.free-lesbian-pic.in		104.131.176.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.429862022 CEST	1.1.1.1	192.168.2.7	0xb379	No error (0)	securesmtp.capsinc.com		208.113.231.255	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.464261055 CEST	1.1.1.1	192.168.2.7	0x57ae	No error (0)	sydkystenssejlklub.dk		168.119.150.59	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.472467899 CEST	1.1.1.1	192.168.2.7	0xf0b	No error (0)	smtp.ballarin.com.br	pop.ballarin.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:31.472467899 CEST	1.1.1.1	192.168.2.7	0xf0b	No error (0)	pop.ballarin.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:31.472467899 CEST	1.1.1.1	192.168.2.7	0xf0b	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.472546101 CEST	1.1.1.1	192.168.2.7	0xf0b	No error (0)	smtp.ballarin.com.br	pop.ballarin.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:31.472546101 CEST	1.1.1.1	192.168.2.7	0xf0b	No error (0)	pop.ballarin.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:31.472546101 CEST	1.1.1.1	192.168.2.7	0xf0b	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.579826117 CEST	1.1.1.1	192.168.2.7	0x37c8	No error (0)	agent-server.com		74.52.185.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.675102949 CEST	1.1.1.1	192.168.2.7	0x29f7	Name error (3)	out.erlenbaugh.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.979635954 CEST	1.1.1.1	192.168.2.7	0xa501	Name error (3)	secure.marronetransportes.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.979944944 CEST	1.1.1.1	192.168.2.7	0xb6a4	No error (0)	mail3.scanscope.net		54.74.99.47	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.979944944 CEST	1.1.1.1	192.168.2.7	0xb6a4	No error (0)	mail3.scanscope.net		51.140.50.9	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:31.990629911 CEST	1.1.1.1	192.168.2.7	0xf994	Name error (3)	secure.zairlock.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.023936987 CEST	1.1.1.1	192.168.2.7	0xeae0	Name error (3)	mail.fotografanna.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.024003029 CEST	1.1.1.1	192.168.2.7	0xeae0	Name error (3)	mail.fotografanna.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.066540003 CEST	1.1.1.1	192.168.2.7	0x48c	No error (0)	infoseek.jp		133.237.129.136	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.079026937 CEST	1.1.1.1	192.168.2.7	0xc4e2	Name error (3)	securesmtp.sousolution.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.178241968 CEST	1.1.1.1	192.168.2.7	0x3ad3	Name error (3)	secure.ehes.co.inn	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.178446054 CEST	1.1.1.1	192.168.2.7	0xd189	Name error (3)	out.jdajdj.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.441813946 CEST	1.1.1.1	192.168.2.7	0xc5e9	No error (0)	mx2-eu.spamexperts.com		149.13.75.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.452965975 CEST	1.1.1.1	192.168.2.7	0x1621	Name error (3)	secure.stertzbach.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.536727905 CEST	1.1.1.1	192.168.2.7	0xb192	No error (0)	dl-it.net		93.115.28.104	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.574238062 CEST	1.1.1.1	192.168.2.7	0xf5bb	Name error (3)	secure.monplaisircollege.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.596196890 CEST	1.1.1.1	192.168.2.7	0x8114	Name error (3)	secure.mueblesocram.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.642957926 CEST	1.1.1.1	192.168.2.7	0x97f8	No error (0)	smtp.kalbarprov.go.id	mail.kalbarprov.go.id		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:32.642957926 CEST	1.1.1.1	192.168.2.7	0x97f8	No error (0)	mail.kalbarprov.go.id		222.124.219.187	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.643156052 CEST	1.1.1.1	192.168.2.7	0x97f8	No error (0)	smtp.kalbarprov.go.id	mail.kalbarprov.go.id		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:32.643156052 CEST	1.1.1.1	192.168.2.7	0x97f8	No error (0)	mail.kalbarprov.go.id		222.124.219.187	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.643186092 CEST	1.1.1.1	192.168.2.7	0x97f8	No error (0)	smtp.kalbarprov.go.id	mail.kalbarprov.go.id		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:32.643186092 CEST	1.1.1.1	192.168.2.7	0x97f8	No error (0)	mail.kalbarprov.go.id		222.124.219.187	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.673176050 CEST	1.1.1.1	192.168.2.7	0x939c	Name error (3)	out.turazza.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.695591927 CEST	1.1.1.1	192.168.2.7	0x6c88	No error (0)	smtp.bbox.fr		194.158.122.55	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.707760096 CEST	1.1.1.1	192.168.2.7	0x7148	Name error (3)	securesmtp.nova-space.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.753462076 CEST	1.1.1.1	192.168.2.7	0xf693	Name error (3)	out.ethanlaffan.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.835247993 CEST	1.1.1.1	192.168.2.7	0xff50	Name error (3)	secure.kentcollege.kent.sch.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.857212067 CEST	1.1.1.1	192.168.2.7	0xee85	Name error (3)	smtp.kongsviktoppen.no	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.868669987 CEST	1.1.1.1	192.168.2.7	0xd20f	Name error (3)	securesmtp.mandela.ac.za	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.868726015 CEST	1.1.1.1	192.168.2.7	0xd20f	Name error (3)	securesmtp.mandela.ac.za	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.868757963 CEST	1.1.1.1	192.168.2.7	0xd20f	Name error (3)	securesmtp.mandela.ac.za	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.868788004 CEST	1.1.1.1	192.168.2.7	0xd20f	Name error (3)	securesmtp.mandela.ac.za	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.953607082 CEST	1.1.1.1	192.168.2.7	0x48d7	No error (0)	out.digitalmail.info		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:32.974224091 CEST	1.1.1.1	192.168.2.7	0xd9a2	Name error (3)	smtp.satmaster.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.016933918 CEST	1.1.1.1	192.168.2.7	0x70b3	No error (0)	mail.truthfinderlogin.com		204.11.56.48	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.644545078 CEST	1.1.1.1	192.168.2.7	0x511b	Name error (3)	secure.ag-mj-kty.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.650461912 CEST	1.1.1.1	192.168.2.7	0x77b2	Name error (3)	mail.fieldnetwork.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.704951048 CEST	1.1.1.1	192.168.2.7	0x5878	No error (0)	mx02.goneo.de		85.220.165.130	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.706821918 CEST	1.1.1.1	192.168.2.7	0xc41e	No error (0)	avis.it		35.214.249.211	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.709975004 CEST	1.1.1.1	192.168.2.7	0x3804	No error (0)	aseconsulting.de		116.202.134.231	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.782985926 CEST	1.1.1.1	192.168.2.7	0x9bfa	Name error (3)	smtp.johnhuxham.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.797730923 CEST	1.1.1.1	192.168.2.7	0x659f	No error (0)	mail.pol-arise.com.au		27.124.113.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.828999043 CEST	1.1.1.1	192.168.2.7	0xc5cc	Name error (3)	secure.bluebooks.co	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:33.842892885 CEST	1.1.1.1	192.168.2.7	0xdbfa	Name error (3)	smtp.sp8.net.pl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.097681046 CEST	1.1.1.1	192.168.2.7	0xeb9b	Name error (3)	ianthegg.cf	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.205897093 CEST	1.1.1.1	192.168.2.7	0x50fe	No error (0)	nwt.cz		185.111.97.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.218200922 CEST	1.1.1.1	192.168.2.7	0x28a2	Name error (3)	smtp.djcyren.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.322021008 CEST	1.1.1.1	192.168.2.7	0x7876	Name error (3)	smtp.webpagesoftware.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.330444098 CEST	1.1.1.1	192.168.2.7	0x3809	Name error (3)	smtp.mahlabmedia.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.586714029 CEST	1.1.1.1	192.168.2.7	0x4026	Name error (3)	out.acwebcreation.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.599184036 CEST	1.1.1.1	192.168.2.7	0x88c9	Name error (3)	secure.expressivapublicidade.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.687062979 CEST	1.1.1.1	192.168.2.7	0xfc6	Name error (3)	secure.callitltd.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.687253952 CEST	1.1.1.1	192.168.2.7	0xfc6	Name error (3)	secure.callitltd.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.722547054 CEST	1.1.1.1	192.168.2.7	0x3738	Name error (3)	securesmtp.bos-kaufbeuren.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.818883896 CEST	1.1.1.1	192.168.2.7	0x84e7	No error (0)	out.lindella.se	lindella.se		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:34.818883896 CEST	1.1.1.1	192.168.2.7	0x84e7	No error (0)	lindella.se		193.181.34.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.818957090 CEST	1.1.1.1	192.168.2.7	0x84e7	No error (0)	out.lindella.se	lindella.se		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:34.818957090 CEST	1.1.1.1	192.168.2.7	0x84e7	No error (0)	lindella.se		193.181.34.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.819025040 CEST	1.1.1.1	192.168.2.7	0x84e7	No error (0)	out.lindella.se	lindella.se		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:34.819025040 CEST	1.1.1.1	192.168.2.7	0x84e7	No error (0)	lindella.se		193.181.34.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.819073915 CEST	1.1.1.1	192.168.2.7	0x84e7	No error (0)	out.lindella.se	lindella.se		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:34.819073915 CEST	1.1.1.1	192.168.2.7	0x84e7	No error (0)	lindella.se		193.181.34.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.873133898 CEST	1.1.1.1	192.168.2.7	0xde2b	No error (0)	mail.comercialmonlevade.com.br	pop.comercialmonlevade.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:34.873133898 CEST	1.1.1.1	192.168.2.7	0xde2b	No error (0)	pop.comercialmonlevade.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:34.873133898 CEST	1.1.1.1	192.168.2.7	0xde2b	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.946518898 CEST	1.1.1.1	192.168.2.7	0xecac	Name error (3)	out.pc1expert.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:34.985419035 CEST	1.1.1.1	192.168.2.7	0x2667	No error (0)	securesmtp.ftl.if.ua		178.63.100.23	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.085530996 CEST	1.1.1.1	192.168.2.7	0xff01	No error (0)	mx.giochi0.it		104.131.176.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.096699953 CEST	1.1.1.1	192.168.2.7	0x901e	No error (0)	advancedroofing.co.za		129.232.148.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.180061102 CEST	1.1.1.1	192.168.2.7	0x302	Name error (3)	out.jespersen.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.191912889 CEST	1.1.1.1	192.168.2.7	0x4ec6	Name error (3)	mail.egyptemploymentbraux.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.192631960 CEST	1.1.1.1	192.168.2.7	0x9dd1	Name error (3)	secure.com.wwdfe.goog.wizardingworld	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.245318890 CEST	1.1.1.1	192.168.2.7	0x4013	No error (0)	smtp.bredballeprivatskole.dk	bredballeprivatskole.dk		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:35.245318890 CEST	1.1.1.1	192.168.2.7	0x4013	No error (0)	bredballeprivatskole.dk		77.247.67.170	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.324378967 CEST	1.1.1.1	192.168.2.7	0xc939	No error (0)	smtp.yxahoo.de		91.195.240.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.426502943 CEST	1.1.1.1	192.168.2.7	0xa948	No error (0)	zing.vn		49.213.103.199	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.426502943 CEST	1.1.1.1	192.168.2.7	0xa948	No error (0)	zing.vn		49.213.103.198	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.580780983 CEST	1.1.1.1	192.168.2.7	0x4ab1	No error (0)	mail.webstorm.co.za		41.193.157.227	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.643733978 CEST	1.1.1.1	192.168.2.7	0x5cb3	No error (0)	out.co.uk		64.91.253.60	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.755321980 CEST	1.1.1.1	192.168.2.7	0xe2dc	No error (0)	mx2.titan.email		52.45.199.183	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.755321980 CEST	1.1.1.1	192.168.2.7	0xe2dc	No error (0)	mx2.titan.email		52.73.77.51	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.755321980 CEST	1.1.1.1	192.168.2.7	0xe2dc	No error (0)	mx2.titan.email		34.231.204.167	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.762142897 CEST	1.1.1.1	192.168.2.7	0x7ecf	Name error (3)	securesmtp.hermeil.her	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.769373894 CEST	1.1.1.1	192.168.2.7	0x51a0	Name error (3)	cecon.coc.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.769385099 CEST	1.1.1.1	192.168.2.7	0xcc53	Name error (3)	out.trends360.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.969764948 CEST	1.1.1.1	192.168.2.7	0xde60	No error (0)	mail.aruba.it		94.177.209.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.970115900 CEST	1.1.1.1	192.168.2.7	0x663c	Name error (3)	securesmtp.stylo.pk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:35.971713066 CEST	1.1.1.1	192.168.2.7	0xf237	Name error (3)	securesmtp.leveragesports.ng	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.182203054 CEST	1.1.1.1	192.168.2.7	0xed4c	No error (0)	ieg.com.br		108.167.151.68	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.186719894 CEST	1.1.1.1	192.168.2.7	0xd7f1	No error (0)	dodo.com.au		202.138.49.32	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.242636919 CEST	1.1.1.1	192.168.2.7	0x884e	No error (0)	mta2.spin.it		79.143.126.202	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.463264942 CEST	1.1.1.1	192.168.2.7	0xc2ed	Name error (3)	securesmtp.jeparma.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.892834902 CEST	1.1.1.1	192.168.2.7	0x5b56	No error (0)	webfulcreations.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.892834902 CEST	1.1.1.1	192.168.2.7	0x5b56	No error (0)	webfulcreations.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.893995047 CEST	1.1.1.1	192.168.2.7	0xebf2	Name error (3)	secure.allevialiving.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.900703907 CEST	1.1.1.1	192.168.2.7	0x11af	No error (0)	mail.perimeterinstitute.ca	ghs.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:36.900703907 CEST	1.1.1.1	192.168.2.7	0x11af	No error (0)	ghs.google.com		142.250.186.179	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.945174932 CEST	1.1.1.1	192.168.2.7	0x79b9	No error (0)	smtp.engepred.com.br	smtp-cluster.idc2.mandic.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:36.945174932 CEST	1.1.1.1	192.168.2.7	0x79b9	No error (0)	smtp-cluster.idc2.mandic.com.br		177.70.110.120	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:36.981493950 CEST	1.1.1.1	192.168.2.7	0x5795	Name error (3)	out.kreisschule-surbtal.ch	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.034061909 CEST	1.1.1.1	192.168.2.7	0xd0eb	Name error (3)	out.cosmetics.gr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.110300064 CEST	1.1.1.1	192.168.2.7	0xc669	Name error (3)	out.malte.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.123955965 CEST	1.1.1.1	192.168.2.7	0xfb62	No error (0)	smtp.inserm.fr	mail.inserm.fr		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:37.123955965 CEST	1.1.1.1	192.168.2.7	0xfb62	No error (0)	mail.inserm.fr		195.15.132.130	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.123955965 CEST	1.1.1.1	192.168.2.7	0xfb62	No error (0)	mail.inserm.fr		195.15.132.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.146425009 CEST	1.1.1.1	192.168.2.7	0xa6d7	Name error (3)	out.matx.dk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.301246881 CEST	1.1.1.1	192.168.2.7	0x7647	No error (0)	iol.ie		193.120.143.144	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	mail.aluno.univesp.br	mail.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	mail.office365.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	ooc-g2.tm-4.office.com		40.99.150.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	ooc-g2.tm-4.office.com		52.98.243.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	ooc-g2.tm-4.office.com		52.98.175.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	ooc-g2.tm-4.office.com		52.98.241.178	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	ooc-g2.tm-4.office.com		52.98.179.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	ooc-g2.tm-4.office.com		52.98.242.242	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	ooc-g2.tm-4.office.com		52.97.135.98	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.327755928 CEST	1.1.1.1	192.168.2.7	0xaa03	No error (0)	ooc-g2.tm-4.office.com		40.99.149.210	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.460186005 CEST	1.1.1.1	192.168.2.7	0x128	Name error (3)	out.mansell.plc.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.485662937 CEST	1.1.1.1	192.168.2.7	0x204	Name error (3)	out.rmc98.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.768202066 CEST	1.1.1.1	192.168.2.7	0xc6cd	Server failure (2)	mail.rapidbikes.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.768245935 CEST	1.1.1.1	192.168.2.7	0xc6cd	Server failure (2)	mail.rapidbikes.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.768263102 CEST	1.1.1.1	192.168.2.7	0xc6cd	Server failure (2)	mail.rapidbikes.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.768517971 CEST	1.1.1.1	192.168.2.7	0xf102	Name error (3)	secure.mt.universal.org.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.768532991 CEST	1.1.1.1	192.168.2.7	0xb614	Name error (3)	mail.cenr.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.798619032 CEST	1.1.1.1	192.168.2.7	0x90f8	No error (0)	smtp.centrum.sk	smtp-relay-centrumsk.centrum.cz		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:37.798619032 CEST	1.1.1.1	192.168.2.7	0x90f8	No error (0)	smtp-relay-centrumsk.centrum.cz		46.255.231.19	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.895551920 CEST	1.1.1.1	192.168.2.7	0x6614	Name error (3)	mail.saeys.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.947307110 CEST	1.1.1.1	192.168.2.7	0x8d11	No error (0)	smtp.frontier.com	relay-ftrcom.glb.frontiernet.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:37.947307110 CEST	1.1.1.1	192.168.2.7	0x8d11	No error (0)	relay-ftrcom.glb.frontiernet.net		199.224.64.207	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.977029085 CEST	1.1.1.1	192.168.2.7	0x9296	No error (0)	mail.bresnan.net		47.43.18.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:37.977159977 CEST	1.1.1.1	192.168.2.7	0x242e	No error (0)	alt4.aspmx.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.012547016 CEST	1.1.1.1	192.168.2.7	0x7f1a	Name error (3)	candidatarosana.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.030220032 CEST	1.1.1.1	192.168.2.7	0x1a8a	Name error (3)	smtp.imcod.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.344938040 CEST	1.1.1.1	192.168.2.7	0x2b27	No error (0)	ASPMX.L.GOOGLE.COM		108.177.15.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.345335007 CEST	1.1.1.1	192.168.2.7	0x53cd	Name error (3)	out.web.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.367727041 CEST	1.1.1.1	192.168.2.7	0xff51	Name error (3)	smtp.agaron.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.370670080 CEST	1.1.1.1	192.168.2.7	0xa8e8	No error (0)	secure.dayone.fr		3.64.163.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.493959904 CEST	1.1.1.1	192.168.2.7	0x63d	No error (0)	thebasewarehouse.com.au		23.227.38.65	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.494748116 CEST	1.1.1.1	192.168.2.7	0x54af	Name error (3)	smtp.marinehealthfoods.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.500799894 CEST	1.1.1.1	192.168.2.7	0x120	Name error (3)	smtp.rtschmidt.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.610218048 CEST	1.1.1.1	192.168.2.7	0xb706	No error (0)	secure.vivointernetdiscada.com.br	vivointernetdiscada.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:38.656043053 CEST	1.1.1.1	192.168.2.7	0x69f6	No error (0)	optusnet.com.au		211.29.132.105	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.689156055 CEST	1.1.1.1	192.168.2.7	0x9592	No error (0)	blackrhinomktg.com		208.215.218.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.697690010 CEST	1.1.1.1	192.168.2.7	0x52fb	Name error (3)	out.caledonian.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.713136911 CEST	1.1.1.1	192.168.2.7	0x3886	No error (0)	mx01.hornetsecurity.com		94.100.132.8	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.725569010 CEST	1.1.1.1	192.168.2.7	0x7590	Name error (3)	mail.matehuala.tecnm.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.841609955 CEST	1.1.1.1	192.168.2.7	0x75c0	No error (0)	smtp.lumenhouse.com.br	smtp.uhserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:38.841609955 CEST	1.1.1.1	192.168.2.7	0x75c0	No error (0)	smtp.uhserver.com		200.147.36.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.841634989 CEST	1.1.1.1	192.168.2.7	0x75c0	No error (0)	smtp.lumenhouse.com.br	smtp.uhserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:38.841634989 CEST	1.1.1.1	192.168.2.7	0x75c0	No error (0)	smtp.uhserver.com		200.147.36.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.965751886 CEST	1.1.1.1	192.168.2.7	0xcad5	No error (0)	mail.supersul.com.br	smtp.virtual.vetorialnet.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:38.965751886 CEST	1.1.1.1	192.168.2.7	0xcad5	No error (0)	smtp.virtual.vetorialnet.com.br		187.86.131.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:38.965775967 CEST	1.1.1.1	192.168.2.7	0xcad5	No error (0)	mail.supersul.com.br	smtp.virtual.vetorialnet.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:38.965775967 CEST	1.1.1.1	192.168.2.7	0xcad5	No error (0)	smtp.virtual.vetorialnet.com.br		187.86.131.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.122931004 CEST	1.1.1.1	192.168.2.7	0x8354	Name error (3)	out.naseems.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.217854023 CEST	1.1.1.1	192.168.2.7	0x418e	Name error (3)	smtp.oscola.kl2.fl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.242125034 CEST	1.1.1.1	192.168.2.7	0x9d	No error (0)	incoming1.cnam.fr		163.173.128.32	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.288239002 CEST	1.1.1.1	192.168.2.7	0xfcdd	Name error (3)	secure.poliziadistoto.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.331579924 CEST	1.1.1.1	192.168.2.7	0x2c1d	No error (0)	earthlink.net		104.19.239.228	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.331579924 CEST	1.1.1.1	192.168.2.7	0x2c1d	No error (0)	earthlink.net		104.18.208.148	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.338577032 CEST	1.1.1.1	192.168.2.7	0xf003	No error (0)	ajioka-const.co.jp		180.55.189.114	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.456119061 CEST	1.1.1.1	192.168.2.7	0x8305	Name error (3)	secure.bpviz0xvp4.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.479257107 CEST	1.1.1.1	192.168.2.7	0xdc0a	Name error (3)	out.magiclife-es.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.511167049 CEST	1.1.1.1	192.168.2.7	0x4cd9	No error (0)	mail.kife.com.br	kife.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:39.511167049 CEST	1.1.1.1	192.168.2.7	0x4cd9	No error (0)	kife.com.br		177.154.191.243	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.543659925 CEST	1.1.1.1	192.168.2.7	0xd6f3	Name error (3)	smtp.engmaterialslab.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.558237076 CEST	1.1.1.1	192.168.2.7	0x6dbc	Name error (3)	securesmtp.novapack.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.586313009 CEST	1.1.1.1	192.168.2.7	0x60f1	Name error (3)	mail.versioncraft.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.614310026 CEST	1.1.1.1	192.168.2.7	0x9233	No error (0)	iconepc.fr		213.186.33.4	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.698263884 CEST	1.1.1.1	192.168.2.7	0x3975	No error (0)	linshiyouxiang.net		188.114.96.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.698263884 CEST	1.1.1.1	192.168.2.7	0x3975	No error (0)	linshiyouxiang.net		188.114.97.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.772805929 CEST	1.1.1.1	192.168.2.7	0x4327	No error (0)	hospitaleldovio.gov.co		190.8.176.9	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.838700056 CEST	1.1.1.1	192.168.2.7	0x450d	Name error (3)	email.tst	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:39.988177061 CEST	1.1.1.1	192.168.2.7	0x206b	No error (0)	mail.espi.mx	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:39.988177061 CEST	1.1.1.1	192.168.2.7	0x206b	No error (0)	ghs.googlehosted.com		142.250.186.83	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.056515932 CEST	1.1.1.1	192.168.2.7	0x29ba	Name error (3)	mail.atrgroup.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.221132994 CEST	1.1.1.1	192.168.2.7	0x726b	Name error (3)	mail.andima2.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.221149921 CEST	1.1.1.1	192.168.2.7	0x317e	No error (0)	1337.no		91.189.182.67	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.290858984 CEST	1.1.1.1	192.168.2.7	0x9a88	No error (0)	tiscali.cz		77.78.119.119	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.290858984 CEST	1.1.1.1	192.168.2.7	0x9a88	No error (0)	tiscali.cz		77.78.119.204	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.290858984 CEST	1.1.1.1	192.168.2.7	0x9a88	No error (0)	tiscali.cz		109.123.210.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.326714993 CEST	1.1.1.1	192.168.2.7	0x847e	Name error (3)	mail.tecnopoloti.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.451987028 CEST	1.1.1.1	192.168.2.7	0xf4a0	Name error (3)	securesmtp.poly-vac.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.547902107 CEST	1.1.1.1	192.168.2.7	0xeb06	Name error (3)	smtp.city.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.566612005 CEST	1.1.1.1	192.168.2.7	0x8e07	Name error (3)	secure.carmelacarnes.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.566716909 CEST	1.1.1.1	192.168.2.7	0x4268	No error (0)	mx.gfgfgf.org		167.172.23.243	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.986917973 CEST	1.1.1.1	192.168.2.7	0xe112	No error (0)	smtp.tpg.com.au	mail.tpg.com.au		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:40.986917973 CEST	1.1.1.1	192.168.2.7	0xe112	No error (0)	mail.tpg.com.au	sep-kakadu02.au-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:40.986917973 CEST	1.1.1.1	192.168.2.7	0xe112	No error (0)	sep-kakadu02.au-east.atmailcloud.com		52.63.237.70	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.986917973 CEST	1.1.1.1	192.168.2.7	0xe112	No error (0)	sep-kakadu02.au-east.atmailcloud.com		54.206.19.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:40.991760969 CEST	1.1.1.1	192.168.2.7	0x1768	Name error (3)	out.pop.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.026704073 CEST	1.1.1.1	192.168.2.7	0x4241	Name error (3)	securesmtp.speters.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.051429033 CEST	1.1.1.1	192.168.2.7	0xe227	Name error (3)	mail.ominet.net.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.073432922 CEST	1.1.1.1	192.168.2.7	0xd2b7	Name error (3)	secure.eoopy.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.175915003 CEST	1.1.1.1	192.168.2.7	0x752b	Name error (3)	out.rapid-mails.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.191591978 CEST	1.1.1.1	192.168.2.7	0x160f	Name error (3)	secure.tabarcaperitaciones.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.194595098 CEST	1.1.1.1	192.168.2.7	0x5100	Name error (3)	smtp.c3presents.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.343844891 CEST	1.1.1.1	192.168.2.7	0x88a2	No error (0)	smtp.uma.es	correo.uma.es		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:41.343844891 CEST	1.1.1.1	192.168.2.7	0x88a2	No error (0)	correo.uma.es	proxycorreo.uma.es		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:41.343844891 CEST	1.1.1.1	192.168.2.7	0x88a2	No error (0)	proxycorreo.uma.es		150.214.40.4	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.372673035 CEST	1.1.1.1	192.168.2.7	0xe146	Name error (3)	securesmtp.travel-associates.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.405188084 CEST	1.1.1.1	192.168.2.7	0xd1bc	Name error (3)	out.vilamatilde.dom.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.421600103 CEST	1.1.1.1	192.168.2.7	0x44f4	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.474842072 CEST	1.1.1.1	192.168.2.7	0xe826	Server failure (2)	securesmtp.microwebnet.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.475033998 CEST	1.1.1.1	192.168.2.7	0xe826	Server failure (2)	securesmtp.microwebnet.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.475066900 CEST	1.1.1.1	192.168.2.7	0xe826	Server failure (2)	securesmtp.microwebnet.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.545516968 CEST	1.1.1.1	192.168.2.7	0x84b2	No error (0)	aspmx4.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.547507048 CEST	1.1.1.1	192.168.2.7	0x6f2f	Name error (3)	nyakko.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.721707106 CEST	1.1.1.1	192.168.2.7	0xb79f	Name error (3)	out.steas.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.777065039 CEST	1.1.1.1	192.168.2.7	0x2f62	No error (0)	smtp.poli.br	smtp.gmail.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:41.777065039 CEST	1.1.1.1	192.168.2.7	0x2f62	No error (0)	smtp.gmail.com		108.177.15.109	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.796257973 CEST	1.1.1.1	192.168.2.7	0x2bd6	Name error (3)	smtp.vestbykommune.no	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.880409956 CEST	1.1.1.1	192.168.2.7	0x996a	No error (0)	smtp.barbacena.com.br		189.124.16.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.957336903 CEST	1.1.1.1	192.168.2.7	0x6279	No error (0)	smtp.eikon.ind.br	pop.eikon.ind.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:41.957336903 CEST	1.1.1.1	192.168.2.7	0x6279	No error (0)	pop.eikon.ind.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:41.957336903 CEST	1.1.1.1	192.168.2.7	0x6279	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:41.957381964 CEST	1.1.1.1	192.168.2.7	0x6279	No error (0)	smtp.eikon.ind.br	pop.eikon.ind.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:41.957381964 CEST	1.1.1.1	192.168.2.7	0x6279	No error (0)	pop.eikon.ind.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:41.957381964 CEST	1.1.1.1	192.168.2.7	0x6279	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.132311106 CEST	1.1.1.1	192.168.2.7	0xea30	Name error (3)	smtp.asd5.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.191265106 CEST	1.1.1.1	192.168.2.7	0xd73c	Name error (3)	elahost.pl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.237581968 CEST	1.1.1.1	192.168.2.7	0x31d4	No error (0)	lycos.co.kr		209.202.254.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.285141945 CEST	1.1.1.1	192.168.2.7	0x68b4	No error (0)	mx37.mb5p.com		147.182.189.184	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.285141945 CEST	1.1.1.1	192.168.2.7	0x68b4	No error (0)	mx37.mb5p.com		164.90.197.162	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.285141945 CEST	1.1.1.1	192.168.2.7	0x68b4	No error (0)	mx37.mb5p.com		164.90.197.143	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.285141945 CEST	1.1.1.1	192.168.2.7	0x68b4	No error (0)	mx37.mb5p.com		147.182.160.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.285141945 CEST	1.1.1.1	192.168.2.7	0x68b4	No error (0)	mx37.mb5p.com		164.90.197.105	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.285141945 CEST	1.1.1.1	192.168.2.7	0x68b4	No error (0)	mx37.mb5p.com		164.90.197.79	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.285141945 CEST	1.1.1.1	192.168.2.7	0x68b4	No error (0)	mx37.mb5p.com		147.182.130.78	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.285141945 CEST	1.1.1.1	192.168.2.7	0x68b4	No error (0)	mx37.mb5p.com		147.182.180.139	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.300038099 CEST	1.1.1.1	192.168.2.7	0x89c6	No error (0)	cluster9.us.messagelabs.com		67.219.246.213	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.300038099 CEST	1.1.1.1	192.168.2.7	0x89c6	No error (0)	cluster9.us.messagelabs.com		67.219.246.219	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.300038099 CEST	1.1.1.1	192.168.2.7	0x89c6	No error (0)	cluster9.us.messagelabs.com		67.219.247.111	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.300038099 CEST	1.1.1.1	192.168.2.7	0x89c6	No error (0)	cluster9.us.messagelabs.com		67.219.247.207	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.300038099 CEST	1.1.1.1	192.168.2.7	0x89c6	No error (0)	cluster9.us.messagelabs.com		67.219.250.219	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.300038099 CEST	1.1.1.1	192.168.2.7	0x89c6	No error (0)	cluster9.us.messagelabs.com		67.219.250.220	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.358448982 CEST	1.1.1.1	192.168.2.7	0x3cbf	Name error (3)	mail.tsacargo.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.435488939 CEST	1.1.1.1	192.168.2.7	0x86f0	No error (0)	out.thalmuehle.de		193.57.27.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.647547960 CEST	1.1.1.1	192.168.2.7	0xa97c	No error (0)	njit-hu.mail.protection.outlook.com		52.101.68.39	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.647547960 CEST	1.1.1.1	192.168.2.7	0xa97c	No error (0)	njit-hu.mail.protection.outlook.com		52.101.73.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.647547960 CEST	1.1.1.1	192.168.2.7	0xa97c	No error (0)	njit-hu.mail.protection.outlook.com		52.101.68.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.647547960 CEST	1.1.1.1	192.168.2.7	0xa97c	No error (0)	njit-hu.mail.protection.outlook.com		52.101.68.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.647547960 CEST	1.1.1.1	192.168.2.7	0xa97c	No error (0)	njit-hu.mail.protection.outlook.com		52.101.73.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.647547960 CEST	1.1.1.1	192.168.2.7	0xa97c	No error (0)	njit-hu.mail.protection.outlook.com		52.101.73.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.647547960 CEST	1.1.1.1	192.168.2.7	0xa97c	No error (0)	njit-hu.mail.protection.outlook.com		52.101.68.29	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.665791035 CEST	1.1.1.1	192.168.2.7	0xc6d3	Name error (3)	secure.departmentofforeigneducationaffairs.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.692068100 CEST	1.1.1.1	192.168.2.7	0x21d1	No error (0)	out.nuvodental.com		3.64.163.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.734196901 CEST	1.1.1.1	192.168.2.7	0x234f	No error (0)	smtp.lomasystems.com	traff-6.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:42.734196901 CEST	1.1.1.1	192.168.2.7	0x234f	No error (0)	traff-6.hugedomains.com	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:42.734196901 CEST	1.1.1.1	192.168.2.7	0x234f	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		3.140.13.188	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.734196901 CEST	1.1.1.1	192.168.2.7	0x234f	No error (0)	hdr-nlb10-d66bbad0736f8259.elb.us-east-2.amazonaws.com		18.119.154.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.806627989 CEST	1.1.1.1	192.168.2.7	0xc149	Name error (3)	secure.credishop.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.899717093 CEST	1.1.1.1	192.168.2.7	0x347b	No error (0)	mail.register.it		195.110.124.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:42.939176083 CEST	1.1.1.1	192.168.2.7	0xe0ea	Name error (3)	itelefonica.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.165860891 CEST	1.1.1.1	192.168.2.7	0x55b9	Name error (3)	out.nixonnyc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.168034077 CEST	1.1.1.1	192.168.2.7	0x80e7	Name error (3)	out.thecedarsacademy.org.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.183851004 CEST	1.1.1.1	192.168.2.7	0xdd1a	Name error (3)	mail.tncolombia.com.co	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.216037035 CEST	1.1.1.1	192.168.2.7	0x4d7b	Name error (3)	securesmtp.longaecugini.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.463555098 CEST	1.1.1.1	192.168.2.7	0x3cf6	Name error (3)	out.isdial.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.478755951 CEST	1.1.1.1	192.168.2.7	0xf2d8	Name error (3)	securesmtp.kp.co	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.516892910 CEST	1.1.1.1	192.168.2.7	0x6236	Name error (3)	mail.o2rise.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.703663111 CEST	1.1.1.1	192.168.2.7	0xba4c	Name error (3)	secure.ipoint2.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.793004036 CEST	1.1.1.1	192.168.2.7	0xba1b	Name error (3)	hot.pop	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.913878918 CEST	1.1.1.1	192.168.2.7	0x5737	Name error (3)	cmbnetworks.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:43.917296886 CEST	1.1.1.1	192.168.2.7	0x2d8b	No error (0)	mail01.rgk4it.com		45.174.184.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.019784927 CEST	1.1.1.1	192.168.2.7	0xe266	Name error (3)	out.webmanagers.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.164196968 CEST	1.1.1.1	192.168.2.7	0x6205	No error (0)	smtp.modaverao.com.br	mail.modaverao.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:44.164196968 CEST	1.1.1.1	192.168.2.7	0x6205	No error (0)	mail.modaverao.com.br		209.133.207.180	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.177123070 CEST	1.1.1.1	192.168.2.7	0x7e17	No error (0)	smtp.kalpa.nl		141.138.137.88	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.344626904 CEST	1.1.1.1	192.168.2.7	0x7b8b	Name error (3)	secure.ufpa.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.522241116 CEST	1.1.1.1	192.168.2.7	0x69a7	No error (0)	abv.bg		194.153.145.104	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.549087048 CEST	1.1.1.1	192.168.2.7	0xdd1f	No error (0)	mail.schulen-re.de		213.136.73.179	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.601433039 CEST	1.1.1.1	192.168.2.7	0x3bd8	No error (0)	mail.webaas.no		46.16.236.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.643685102 CEST	1.1.1.1	192.168.2.7	0x525	No error (0)	poczta.pl		194.181.93.175	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.700017929 CEST	1.1.1.1	192.168.2.7	0xb378	No error (0)	fultonind.kyschools.us		104.17.69.73	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.717605114 CEST	1.1.1.1	192.168.2.7	0xe23	Name error (3)	securesmtp.jeanettelund.dk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.805589914 CEST	1.1.1.1	192.168.2.7	0x754	Name error (3)	out.offthetrucks.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.878896952 CEST	1.1.1.1	192.168.2.7	0x8378	No error (0)	d.firstmail.website		147.45.50.123	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.889571905 CEST	1.1.1.1	192.168.2.7	0xb0e8	No error (0)	farwestconsulting.com.au		185.184.154.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.902884960 CEST	1.1.1.1	192.168.2.7	0x909f	Name error (3)	secure.ring-of-light.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:44.926498890 CEST	1.1.1.1	192.168.2.7	0x1cb4	Name error (3)	securesmtp.equpointproperty.co.tz	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.045279026 CEST	1.1.1.1	192.168.2.7	0x50df	No error (0)	mpchambers.net.au		122.202.1.87	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.078691959 CEST	1.1.1.1	192.168.2.7	0xac32	No error (0)	mail.dreamzultimate.com	traff-1.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:45.078691959 CEST	1.1.1.1	192.168.2.7	0xac32	No error (0)	traff-1.hugedomains.com	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:45.078691959 CEST	1.1.1.1	192.168.2.7	0xac32	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		52.71.57.184	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.078691959 CEST	1.1.1.1	192.168.2.7	0xac32	No error (0)	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		54.209.32.212	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.087578058 CEST	1.1.1.1	192.168.2.7	0xb773	Name error (3)	out.beybi.com.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.196178913 CEST	1.1.1.1	192.168.2.7	0x6ecb	Name error (3)	secure.atrgroup.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.197540998 CEST	1.1.1.1	192.168.2.7	0x1f32	Name error (3)	secure.telrad.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.230714083 CEST	1.1.1.1	192.168.2.7	0xda28	No error (0)	geelongprintworks.com.au		74.81.94.123	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.255487919 CEST	1.1.1.1	192.168.2.7	0xda3d	No error (0)	out.cartercarter.com.au		104.21.63.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.255487919 CEST	1.1.1.1	192.168.2.7	0xda3d	No error (0)	out.cartercarter.com.au		172.67.142.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.264234066 CEST	1.1.1.1	192.168.2.7	0xcde3	No error (0)	mx2.zoho.com		136.143.183.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.277229071 CEST	1.1.1.1	192.168.2.7	0xa608	Name error (3)	out.idac.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.345679045 CEST	1.1.1.1	192.168.2.7	0x8b	No error (0)	mail.ittatours.com		154.85.60.150	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.345679045 CEST	1.1.1.1	192.168.2.7	0x8b	No error (0)	mail.ittatours.com		152.32.175.174	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.493932009 CEST	1.1.1.1	192.168.2.7	0xd94b	Name error (3)	secure.cesgengenharia.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.520836115 CEST	1.1.1.1	192.168.2.7	0x9a1f	Name error (3)	out.nilopolis.rj.gov.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.568721056 CEST	1.1.1.1	192.168.2.7	0x60f2	No error (0)	mail.interfree.it	smtp.interfree.it		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:45.568721056 CEST	1.1.1.1	192.168.2.7	0x60f2	No error (0)	smtp.interfree.it		80.91.55.62	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.648744106 CEST	1.1.1.1	192.168.2.7	0x93a3	No error (0)	greensrealty-com.mail.protection.outlook.com		52.101.8.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.648744106 CEST	1.1.1.1	192.168.2.7	0x93a3	No error (0)	greensrealty-com.mail.protection.outlook.com		52.101.9.17	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.648744106 CEST	1.1.1.1	192.168.2.7	0x93a3	No error (0)	greensrealty-com.mail.protection.outlook.com		52.101.10.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.648744106 CEST	1.1.1.1	192.168.2.7	0x93a3	No error (0)	greensrealty-com.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.648744106 CEST	1.1.1.1	192.168.2.7	0x93a3	No error (0)	greensrealty-com.mail.protection.outlook.com		52.101.9.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.648744106 CEST	1.1.1.1	192.168.2.7	0x93a3	No error (0)	greensrealty-com.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.648744106 CEST	1.1.1.1	192.168.2.7	0x93a3	No error (0)	greensrealty-com.mail.protection.outlook.com		52.101.10.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.742996931 CEST	1.1.1.1	192.168.2.7	0x6871	No error (0)	indiatimes.com		104.102.49.62	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.800316095 CEST	1.1.1.1	192.168.2.7	0x5096	Name error (3)	smtp.sunpackaging.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.905249119 CEST	1.1.1.1	192.168.2.7	0x8bf9	No error (0)	mail.greenfinch.com		52.28.82.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:45.978318930 CEST	1.1.1.1	192.168.2.7	0x5f0a	No error (0)	ibestvip.com.br		192.185.211.72	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.073471069 CEST	1.1.1.1	192.168.2.7	0x8a76	No error (0)	secure.gofriday.co	pr-suspensions.go.co		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:46.073471069 CEST	1.1.1.1	192.168.2.7	0x8a76	No error (0)	pr-suspensions.go.co	pr-suspensions-neuweb-biz.expedrion.biz		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:46.073471069 CEST	1.1.1.1	192.168.2.7	0x8a76	No error (0)	pr-suspensions-neuweb-biz.expedrion.biz	Registry-Web-Suspension-1912215664.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:46.073471069 CEST	1.1.1.1	192.168.2.7	0x8a76	No error (0)	Registry-Web-Suspension-1912215664.us-east-1.elb.amazonaws.com		54.224.85.34	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.073471069 CEST	1.1.1.1	192.168.2.7	0x8a76	No error (0)	Registry-Web-Suspension-1912215664.us-east-1.elb.amazonaws.com		54.86.119.232	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.124036074 CEST	1.1.1.1	192.168.2.7	0x96fa	Name error (3)	secure.langeweile-hh.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.144658089 CEST	1.1.1.1	192.168.2.7	0x7ee0	Name error (3)	securesmtp.busschaertparket.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.381243944 CEST	1.1.1.1	192.168.2.7	0x660c	Name error (3)	smtp.teenawilliams.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.438245058 CEST	1.1.1.1	192.168.2.7	0x4563	Name error (3)	mail.chaos4x4.co.za	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.560621023 CEST	1.1.1.1	192.168.2.7	0x7970	No error (0)	smtp.metalix.com.br	smtp.uhserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:46.560621023 CEST	1.1.1.1	192.168.2.7	0x7970	No error (0)	smtp.uhserver.com		200.147.36.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.560652018 CEST	1.1.1.1	192.168.2.7	0x7970	No error (0)	smtp.metalix.com.br	smtp.uhserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:46.560652018 CEST	1.1.1.1	192.168.2.7	0x7970	No error (0)	smtp.uhserver.com		200.147.36.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.641146898 CEST	1.1.1.1	192.168.2.7	0x33e5	Name error (3)	out.grupoats.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.691095114 CEST	1.1.1.1	192.168.2.7	0xfe1c	Name error (3)	mail.evalink.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.781320095 CEST	1.1.1.1	192.168.2.7	0xa9df	No error (0)	smtp.indamail.hu	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:46.781320095 CEST	1.1.1.1	192.168.2.7	0xa9df	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.781320095 CEST	1.1.1.1	192.168.2.7	0xa9df	No error (0)	smtp.dka.mailcore.net		185.138.56.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.866161108 CEST	1.1.1.1	192.168.2.7	0xee08	No error (0)	orbicularisoculi.be		46.30.213.119	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.866213083 CEST	1.1.1.1	192.168.2.7	0xee08	No error (0)	orbicularisoculi.be		46.30.213.119	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.912200928 CEST	1.1.1.1	192.168.2.7	0xf370	No error (0)	allanmc.com.br		130.185.238.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.933558941 CEST	1.1.1.1	192.168.2.7	0x7246	Name error (3)	securesmtp.tallero.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:46.936584949 CEST	1.1.1.1	192.168.2.7	0xdf53	No error (0)	globezenit.be		176.62.173.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.062495947 CEST	1.1.1.1	192.168.2.7	0x7f5a	No error (0)	student.genius.sch.id		103.55.39.211	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.225312948 CEST	1.1.1.1	192.168.2.7	0x79a	No error (0)	securesmtp.ashayogabali.com		208.91.197.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.249429941 CEST	1.1.1.1	192.168.2.7	0xfc3f	No error (0)	smallborn.com		104.168.90.116	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.267385960 CEST	1.1.1.1	192.168.2.7	0x81b9	No error (0)	mx01.mail-redirect.de		88.99.82.73	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.297439098 CEST	1.1.1.1	192.168.2.7	0xcc5d	No error (0)	hiddenvillage.in		103.14.97.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.378722906 CEST	1.1.1.1	192.168.2.7	0xd0a	Name error (3)	securesmtp.eturecup.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.392386913 CEST	1.1.1.1	192.168.2.7	0xc33b	Name error (3)	securesmtp.avanteam.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.405508041 CEST	1.1.1.1	192.168.2.7	0x80d2	No error (0)	mail.jlchacha.com		45.11.76.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.409104109 CEST	1.1.1.1	192.168.2.7	0x4f65	Name error (3)	securesmtp.vivelacinq.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.415024996 CEST	1.1.1.1	192.168.2.7	0xd3ce	Name error (3)	soleforma.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.425275087 CEST	1.1.1.1	192.168.2.7	0x8588	No error (0)	smtp.dmobile-etc.fr	ssl0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:47.425275087 CEST	1.1.1.1	192.168.2.7	0x8588	No error (0)	ssl0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.646025896 CEST	1.1.1.1	192.168.2.7	0x2936	Name error (3)	securesmtp.copperfio.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.646152973 CEST	1.1.1.1	192.168.2.7	0x1fbf	No error (0)	smtp.techness.com.br	buick.webhaus.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:47.646152973 CEST	1.1.1.1	192.168.2.7	0x1fbf	No error (0)	buick.webhaus.com.br		186.227.194.58	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.661614895 CEST	1.1.1.1	192.168.2.7	0xaefc	Name error (3)	mail.drrd.gov.mm	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.662244081 CEST	1.1.1.1	192.168.2.7	0x4fff	Name error (3)	secure.iesmariabellido.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.669683933 CEST	1.1.1.1	192.168.2.7	0xf509	Name error (3)	smtp.knightstone.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.672023058 CEST	1.1.1.1	192.168.2.7	0x1fa	Name error (3)	securesmtp.response-team.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.792332888 CEST	1.1.1.1	192.168.2.7	0x505d	Name error (3)	mail.gollygumdrops.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.808315992 CEST	1.1.1.1	192.168.2.7	0xaf8c	No error (0)	smtp.freeler.nl		195.121.65.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.857218981 CEST	1.1.1.1	192.168.2.7	0xb25c	Name error (3)	mail.diyanetvakfi.org.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:47.958842039 CEST	1.1.1.1	192.168.2.7	0xd0c8	No error (0)	araf.pk		208.91.199.7	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.071907997 CEST	1.1.1.1	192.168.2.7	0x8298	Name error (3)	out.insean.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.148231983 CEST	1.1.1.1	192.168.2.7	0x9167	Name error (3)	out.epieletroeletronicos.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.183320045 CEST	1.1.1.1	192.168.2.7	0xa0cf	No error (0)	targetpublicidade.com.br		69.49.115.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.303652048 CEST	1.1.1.1	192.168.2.7	0x6747	Name error (3)	mail.mingeo.hu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.365902901 CEST	1.1.1.1	192.168.2.7	0x730b	Name error (3)	mail.wecand.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.376409054 CEST	1.1.1.1	192.168.2.7	0x8c42	Name error (3)	securesmtp.course-shelton.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.415643930 CEST	1.1.1.1	192.168.2.7	0x3f1a	No error (0)	securesmtp.paulhurley.co.uk		80.82.112.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.439507008 CEST	1.1.1.1	192.168.2.7	0x6b7c	No error (0)	out.rexsales.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.439507008 CEST	1.1.1.1	192.168.2.7	0x6b7c	No error (0)	out.rexsales.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.559328079 CEST	1.1.1.1	192.168.2.7	0xcf2d	No error (0)	smtp.etu.univ-lorraine.fr	mta-out.mel.univ-lorraine.fr		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:48.559328079 CEST	1.1.1.1	192.168.2.7	0xcf2d	No error (0)	mta-out.mel.univ-lorraine.fr		193.54.32.8	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.624056101 CEST	1.1.1.1	192.168.2.7	0x97fd	No error (0)	mx-vip-02.kinghost.net		191.6.216.39	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.648336887 CEST	1.1.1.1	192.168.2.7	0xb631	No error (0)	neostrada.pl		80.48.169.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.754873037 CEST	1.1.1.1	192.168.2.7	0x5730	No error (0)	pep4teens.de		217.160.0.220	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.755655050 CEST	1.1.1.1	192.168.2.7	0x64de	Name error (3)	bradlo.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.758135080 CEST	1.1.1.1	192.168.2.7	0x58d5	Name error (3)	secure.adrianheuer.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.763112068 CEST	1.1.1.1	192.168.2.7	0xf913	No error (0)	smtp.mx5.ttcn.ne.jp	smtp2.cm.dream.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:48.763112068 CEST	1.1.1.1	192.168.2.7	0xf913	No error (0)	smtp2.cm.dream.jp		59.157.128.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.773041964 CEST	1.1.1.1	192.168.2.7	0xeee5	Name error (3)	secure.gauss00.math2.nat.tu-bs.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.889358997 CEST	1.1.1.1	192.168.2.7	0x45c9	Name error (3)	ptwilad.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:48.898674011 CEST	1.1.1.1	192.168.2.7	0x811c	Name error (3)	securesmtp.dalyatur.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.002629042 CEST	1.1.1.1	192.168.2.7	0x5b6c	Name error (3)	securesmtp.michellelowe.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.048815966 CEST	1.1.1.1	192.168.2.7	0xc0f9	No error (0)	spam.kog.co.kr		14.45.79.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.244108915 CEST	1.1.1.1	192.168.2.7	0xbfda	Name error (3)	out.vctormelo.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.258085966 CEST	1.1.1.1	192.168.2.7	0xe0bc	No error (0)	mail.toyota.com.my		58.26.8.206	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.381939888 CEST	1.1.1.1	192.168.2.7	0x7e12	No error (0)	sy-pinocchio.de		116.202.21.121	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.406363964 CEST	1.1.1.1	192.168.2.7	0x6be1	Name error (3)	mail.abbak.karoo.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.463491917 CEST	1.1.1.1	192.168.2.7	0x58f7	No error (0)	smtp.iprocess.com.br		189.50.110.23	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.490010023 CEST	1.1.1.1	192.168.2.7	0x52cd	No error (0)	mail.chimaeracapital.com		203.185.247.178	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.527865887 CEST	1.1.1.1	192.168.2.7	0x60ce	No error (0)	smtp.mimoma.nl		185.135.241.111	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.605786085 CEST	1.1.1.1	192.168.2.7	0x1495	No error (0)	mail.dk		3.125.131.179	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.605786085 CEST	1.1.1.1	192.168.2.7	0x1495	No error (0)	mail.dk		18.192.246.145	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.605786085 CEST	1.1.1.1	192.168.2.7	0x1495	No error (0)	mail.dk		18.193.144.171	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.628787994 CEST	1.1.1.1	192.168.2.7	0xadcb	Name error (3)	mail.gmbol.cem	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.652518988 CEST	1.1.1.1	192.168.2.7	0x4fa3	No error (0)	vangeertruyen.be		79.174.131.240	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.893613100 CEST	1.1.1.1	192.168.2.7	0x57a6	Name error (3)	securesmtp.freee.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.901966095 CEST	1.1.1.1	192.168.2.7	0x6ef6	No error (0)	smtp.novagranja.com.br	smtp.uhserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:49.901966095 CEST	1.1.1.1	192.168.2.7	0x6ef6	No error (0)	smtp.uhserver.com		200.147.36.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.901993990 CEST	1.1.1.1	192.168.2.7	0x6ef6	No error (0)	smtp.novagranja.com.br	smtp.uhserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:49.901993990 CEST	1.1.1.1	192.168.2.7	0x6ef6	No error (0)	smtp.uhserver.com		200.147.36.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.909471989 CEST	1.1.1.1	192.168.2.7	0x3166	No error (0)	silverkolt.hu		79.172.249.130	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:49.994467974 CEST	1.1.1.1	192.168.2.7	0xa9cd	Name error (3)	out.linuxonly4u.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.006659031 CEST	1.1.1.1	192.168.2.7	0x7df3	Name error (3)	zalliedimpex.com.pk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.127568960 CEST	1.1.1.1	192.168.2.7	0x65fb	No error (0)	jlrsound-com-au.mail.protection.outlook.com		52.101.151.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.127568960 CEST	1.1.1.1	192.168.2.7	0x65fb	No error (0)	jlrsound-com-au.mail.protection.outlook.com		52.101.149.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.127568960 CEST	1.1.1.1	192.168.2.7	0x65fb	No error (0)	jlrsound-com-au.mail.protection.outlook.com		52.101.149.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.127568960 CEST	1.1.1.1	192.168.2.7	0x65fb	No error (0)	jlrsound-com-au.mail.protection.outlook.com		52.101.149.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.267854929 CEST	1.1.1.1	192.168.2.7	0x6e87	Name error (3)	mail.entrepreneurthemovie.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.313286066 CEST	1.1.1.1	192.168.2.7	0x992c	No error (0)	smtp.ruraltel.net	smtp-nextech.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:50.313286066 CEST	1.1.1.1	192.168.2.7	0x992c	No error (0)	smtp-nextech.atmailcloud.com	sep.us-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:50.313286066 CEST	1.1.1.1	192.168.2.7	0x992c	No error (0)	sep.us-east.atmailcloud.com	sep.pc3.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:50.313286066 CEST	1.1.1.1	192.168.2.7	0x992c	No error (0)	sep.pc3.atmailcloud.com		3.225.35.191	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.313286066 CEST	1.1.1.1	192.168.2.7	0x992c	No error (0)	sep.pc3.atmailcloud.com		18.214.227.117	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.313286066 CEST	1.1.1.1	192.168.2.7	0x992c	No error (0)	sep.pc3.atmailcloud.com		52.55.13.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.350644112 CEST	1.1.1.1	192.168.2.7	0x9f38	Name error (3)	smtp.americanprecisionmach.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.351413965 CEST	1.1.1.1	192.168.2.7	0xcc42	Name error (3)	secure.arecadesign.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.413830042 CEST	1.1.1.1	192.168.2.7	0x9b4d	No error (0)	smtp.montevideo.com.uy	smtp-mvd.montevideo.com.uy		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:50.413830042 CEST	1.1.1.1	192.168.2.7	0x9b4d	No error (0)	smtp-mvd.montevideo.com.uy		200.40.52.164	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.436835051 CEST	1.1.1.1	192.168.2.7	0xb32a	Name error (3)	smtp.configsite.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.480957031 CEST	1.1.1.1	192.168.2.7	0xc950	No error (0)	amgen.com		44.230.23.127	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.480957031 CEST	1.1.1.1	192.168.2.7	0xc950	No error (0)	amgen.com		34.211.160.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.480957031 CEST	1.1.1.1	192.168.2.7	0xc950	No error (0)	amgen.com		34.215.2.45	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.589683056 CEST	1.1.1.1	192.168.2.7	0x6b3e	No error (0)	mail.casadometal.com.br		177.11.53.234	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.593519926 CEST	1.1.1.1	192.168.2.7	0x2e2a	Name error (3)	secure.mecpreci.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.622050047 CEST	1.1.1.1	192.168.2.7	0xbf7c	Name error (3)	smtp.radiokurzschluss.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.659207106 CEST	1.1.1.1	192.168.2.7	0xcf1	No error (0)	mx.comune.caltagirone.ct.it		62.149.128.166	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.659207106 CEST	1.1.1.1	192.168.2.7	0xcf1	No error (0)	mx.comune.caltagirone.ct.it		62.149.128.151	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.659207106 CEST	1.1.1.1	192.168.2.7	0xcf1	No error (0)	mx.comune.caltagirone.ct.it		62.149.128.160	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.659207106 CEST	1.1.1.1	192.168.2.7	0xcf1	No error (0)	mx.comune.caltagirone.ct.it		62.149.128.74	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.659207106 CEST	1.1.1.1	192.168.2.7	0xcf1	No error (0)	mx.comune.caltagirone.ct.it		62.149.128.157	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.659207106 CEST	1.1.1.1	192.168.2.7	0xcf1	No error (0)	mx.comune.caltagirone.ct.it		62.149.128.72	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.659207106 CEST	1.1.1.1	192.168.2.7	0xcf1	No error (0)	mx.comune.caltagirone.ct.it		62.149.128.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.659207106 CEST	1.1.1.1	192.168.2.7	0xcf1	No error (0)	mx.comune.caltagirone.ct.it		62.149.128.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.729978085 CEST	1.1.1.1	192.168.2.7	0x422a	Name error (3)	smtp.sheepwingkocorozashi.co.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.732249022 CEST	1.1.1.1	192.168.2.7	0x2c87	No error (0)	mail.optac.in		119.18.54.146	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:50.864031076 CEST	1.1.1.1	192.168.2.7	0x9d17	Name error (3)	secure.simplesbandalarga.page	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.010191917 CEST	1.1.1.1	192.168.2.7	0x4c5f	No error (0)	secure.kysportsmarketing.com		204.11.56.48	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.094726086 CEST	1.1.1.1	192.168.2.7	0xf525	Name error (3)	smtp.porto.adv.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.170794964 CEST	1.1.1.1	192.168.2.7	0xbafa	No error (0)	sercomtel.com.br		45.60.247.143	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.170794964 CEST	1.1.1.1	192.168.2.7	0xbafa	No error (0)	sercomtel.com.br		45.60.241.143	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.235970974 CEST	1.1.1.1	192.168.2.7	0xa614	Name error (3)	securesmtp.imprint.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.251157999 CEST	1.1.1.1	192.168.2.7	0x106c	Name error (3)	out.mbipools.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.256927013 CEST	1.1.1.1	192.168.2.7	0xf68e	No error (0)	mail.alwjergroup.net	http.bluehost.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:51.256927013 CEST	1.1.1.1	192.168.2.7	0xf68e	No error (0)	http.bluehost.xion.oxcs.net		173.208.41.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.307105064 CEST	1.1.1.1	192.168.2.7	0xc72f	Name error (3)	out.smart-core.cn	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.390408993 CEST	1.1.1.1	192.168.2.7	0x5284	Name error (3)	smtp.haggerston.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.467844963 CEST	1.1.1.1	192.168.2.7	0x9eaf	No error (0)	cecemp.org		76.223.105.230	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.467844963 CEST	1.1.1.1	192.168.2.7	0x9eaf	No error (0)	cecemp.org		13.248.243.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.488214970 CEST	1.1.1.1	192.168.2.7	0x83d7	Name error (3)	secure.walshfence.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.489376068 CEST	1.1.1.1	192.168.2.7	0x95d	No error (0)	smtp.konto.pl		81.2.195.204	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.531537056 CEST	1.1.1.1	192.168.2.7	0x6d63	Name error (3)	out.pop.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.546185970 CEST	1.1.1.1	192.168.2.7	0x1666	Name error (3)	out.smpn17bdg.sch.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.594213009 CEST	1.1.1.1	192.168.2.7	0x2335	Name error (3)	smtp.education.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.634129047 CEST	1.1.1.1	192.168.2.7	0x6cdc	No error (0)	sse.com.au		203.0.178.91	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.650091887 CEST	1.1.1.1	192.168.2.7	0xddbd	No error (0)	smtp.corretorlopes.com.br	smtp-cluster.idc2.mandic.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:51.650091887 CEST	1.1.1.1	192.168.2.7	0xddbd	No error (0)	smtp-cluster.idc2.mandic.com.br		177.70.110.120	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.703627110 CEST	1.1.1.1	192.168.2.7	0x1a2c	No error (0)	deped.gov.ph		52.148.72.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.723143101 CEST	1.1.1.1	192.168.2.7	0x53ca	Name error (3)	out.sdfgsd.sdffd	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.729279041 CEST	1.1.1.1	192.168.2.7	0x9c3d	Name error (3)	aspexpos.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.749747992 CEST	1.1.1.1	192.168.2.7	0x20d6	No error (0)	smtp.hawaiiantel.net	smtp.hawaiiantel.net.cust.b.hostedemail.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:51.749747992 CEST	1.1.1.1	192.168.2.7	0x20d6	No error (0)	smtp.hawaiiantel.net.cust.b.hostedemail.com		64.98.38.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.754616976 CEST	1.1.1.1	192.168.2.7	0x1780	Name error (3)	smtp.cherrysports.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.837960005 CEST	1.1.1.1	192.168.2.7	0xadaf	Name error (3)	secure.gladiusfencing.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.843764067 CEST	1.1.1.1	192.168.2.7	0xc92c	Name error (3)	secure.datisa.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.859627962 CEST	1.1.1.1	192.168.2.7	0x4660	Name error (3)	secure.9a869680ce.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:51.985002041 CEST	1.1.1.1	192.168.2.7	0x4178	Name error (3)	secure.chartwer.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		5.161.98.212	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		167.235.143.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		5.75.171.74	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		178.62.199.248	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		91.107.214.206	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		162.55.164.116	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		5.161.194.135	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		165.227.156.49	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		49.13.4.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.076961994 CEST	1.1.1.1	192.168.2.7	0x5c5c	No error (0)	mail.h-email.net		165.227.159.144	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.105915070 CEST	1.1.1.1	192.168.2.7	0x5649	No error (0)	tar-mx.myhost.ro		86.105.9.181	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.436383009 CEST	1.1.1.1	192.168.2.7	0x94fb	Name error (3)	secure.marti.com.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.436842918 CEST	1.1.1.1	192.168.2.7	0x4471	No error (0)	smtp.diginova.co.za	mail.diginova.co.za		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:52.436842918 CEST	1.1.1.1	192.168.2.7	0x4471	No error (0)	mail.diginova.co.za		196.22.132.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.449280024 CEST	1.1.1.1	192.168.2.7	0x50ba	No error (0)	za-smtp-inbound-2.mimecast.co.za		41.74.197.201	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.449280024 CEST	1.1.1.1	192.168.2.7	0x50ba	No error (0)	za-smtp-inbound-2.mimecast.co.za		41.74.197.210	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.449280024 CEST	1.1.1.1	192.168.2.7	0x50ba	No error (0)	za-smtp-inbound-2.mimecast.co.za		41.74.193.210	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.449280024 CEST	1.1.1.1	192.168.2.7	0x50ba	No error (0)	za-smtp-inbound-2.mimecast.co.za		41.74.193.201	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.457276106 CEST	1.1.1.1	192.168.2.7	0x44db	Name error (3)	securesmtp.nh.freeinet	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.460033894 CEST	1.1.1.1	192.168.2.7	0xce73	Name error (3)	mail.saintys.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.460427046 CEST	1.1.1.1	192.168.2.7	0x6a74	Name error (3)	secure.melodypicture.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.462692976 CEST	1.1.1.1	192.168.2.7	0xaca8	No error (0)	smtp.tems.es		217.76.146.62	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.488109112 CEST	1.1.1.1	192.168.2.7	0xbaec	No error (0)	mx00.ionos.es		212.227.15.41	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.519078970 CEST	1.1.1.1	192.168.2.7	0xca64	Name error (3)	mail.students.arh.ukim.mk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.608371973 CEST	1.1.1.1	192.168.2.7	0x33c3	No error (0)	smtp.alice.de		91.136.8.184	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.840692997 CEST	1.1.1.1	192.168.2.7	0xa7d7	No error (0)	securesmtp.wtenweerde.nl		91.184.0.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.840790033 CEST	1.1.1.1	192.168.2.7	0xf701	No error (0)	gilmour.org		54.209.77.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.841581106 CEST	1.1.1.1	192.168.2.7	0xec37	No error (0)	astoriasolutions-com.mail.protection.outlook.com		52.101.132.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.841581106 CEST	1.1.1.1	192.168.2.7	0xec37	No error (0)	astoriasolutions-com.mail.protection.outlook.com		52.101.137.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.841581106 CEST	1.1.1.1	192.168.2.7	0xec37	No error (0)	astoriasolutions-com.mail.protection.outlook.com		52.101.132.30	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.841581106 CEST	1.1.1.1	192.168.2.7	0xec37	No error (0)	astoriasolutions-com.mail.protection.outlook.com		52.101.137.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.858470917 CEST	1.1.1.1	192.168.2.7	0x5572	Name error (3)	smtp.octaviomartin.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:52.892901897 CEST	1.1.1.1	192.168.2.7	0xee3c	No error (0)	secure.pioneer-net.com	pioneer-net.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:52.892901897 CEST	1.1.1.1	192.168.2.7	0xee3c	No error (0)	pioneer-net.com		207.174.2.43	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.004101992 CEST	1.1.1.1	192.168.2.7	0xa0d	No error (0)	mail.gamesacademy.it		89.31.75.11	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.033433914 CEST	1.1.1.1	192.168.2.7	0x6402	Name error (3)	mail.rogowindustries.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.161034107 CEST	1.1.1.1	192.168.2.7	0x3387	No error (0)	pdd.edmi.com.au	brisbane.edmi.com.au		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:53.161034107 CEST	1.1.1.1	192.168.2.7	0x3387	No error (0)	brisbane.edmi.com.au		115.70.199.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.161060095 CEST	1.1.1.1	192.168.2.7	0x3387	No error (0)	pdd.edmi.com.au	brisbane.edmi.com.au		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:53.161060095 CEST	1.1.1.1	192.168.2.7	0x3387	No error (0)	brisbane.edmi.com.au		115.70.199.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.204222918 CEST	1.1.1.1	192.168.2.7	0x965f	Name error (3)	securesmtp.arcontemp.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.253547907 CEST	1.1.1.1	192.168.2.7	0x77ca	No error (0)	interia.eu		217.74.65.52	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.322704077 CEST	1.1.1.1	192.168.2.7	0xb6ba	No error (0)	fibertel.com.br		177.11.53.234	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.388081074 CEST	1.1.1.1	192.168.2.7	0xca93	Name error (3)	secure.disparco.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.416430950 CEST	1.1.1.1	192.168.2.7	0x92a	Name error (3)	mail.feldkamp.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.423154116 CEST	1.1.1.1	192.168.2.7	0x15fb	No error (0)	dinamicaservicomg.com.br		186.202.135.240	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.424146891 CEST	1.1.1.1	192.168.2.7	0xd49	Name error (3)	secure.eventelite.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.511266947 CEST	1.1.1.1	192.168.2.7	0x2b37	Name error (3)	mail.herpain.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.548801899 CEST	1.1.1.1	192.168.2.7	0xfdb0	Name error (3)	out.goophone.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.630986929 CEST	1.1.1.1	192.168.2.7	0x3cd	Name error (3)	out.foxhiver.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.664083004 CEST	1.1.1.1	192.168.2.7	0x1	Name error (3)	secure.scopemail.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.678831100 CEST	1.1.1.1	192.168.2.7	0x3631	No error (0)	mail.huge.id.au	huge.id.au		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:53.678831100 CEST	1.1.1.1	192.168.2.7	0x3631	No error (0)	huge.id.au		216.92.181.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.696940899 CEST	1.1.1.1	192.168.2.7	0x4701	No error (0)	mail.isutrecht.nl	prod1.plateservers.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:53.696940899 CEST	1.1.1.1	192.168.2.7	0x4701	No error (0)	prod1.plateservers.com		52.210.80.236	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.753587961 CEST	1.1.1.1	192.168.2.7	0xe1dc	No error (0)	elogica.com.br		187.108.207.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.897504091 CEST	1.1.1.1	192.168.2.7	0x8864	No error (0)	securesmtp.aclion.com		1.1.1.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:53.991141081 CEST	1.1.1.1	192.168.2.7	0xd656	Name error (3)	secure.display.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.084827900 CEST	1.1.1.1	192.168.2.7	0x8fa1	No error (0)	smtp.semikalisz.pl		193.17.184.242	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.115104914 CEST	1.1.1.1	192.168.2.7	0x1b16	No error (0)	alt2.aspmx.l.google.com		142.251.9.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.120693922 CEST	1.1.1.1	192.168.2.7	0x1d4c	Name error (3)	email.tst	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.138688087 CEST	1.1.1.1	192.168.2.7	0xbb1	No error (0)	secure.andreaskoenig.de		92.205.52.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.232275963 CEST	1.1.1.1	192.168.2.7	0x577a	No error (0)	mail.mctv.ne.jp		61.122.216.220	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.251487970 CEST	1.1.1.1	192.168.2.7	0xf2fd	Name error (3)	secure.sorrentonet.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.293095112 CEST	1.1.1.1	192.168.2.7	0x9cb7	No error (0)	secure.coast.foooq.com		15.197.192.55	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.323501110 CEST	1.1.1.1	192.168.2.7	0x2a57	Name error (3)	secure.vardhamancomputers.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.366175890 CEST	1.1.1.1	192.168.2.7	0x32d4	Name error (3)	smtp.happyprinting.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.485055923 CEST	1.1.1.1	192.168.2.7	0xa161	Name error (3)	mail.angyy.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.500101089 CEST	1.1.1.1	192.168.2.7	0xbf3d	No error (0)	mailgate.tugraz.at		129.27.2.197	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.592144966 CEST	1.1.1.1	192.168.2.7	0xa139	No error (0)	itapema-sc-gov-br.mail.protection.outlook.com		104.47.22.202	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.592144966 CEST	1.1.1.1	192.168.2.7	0xa139	No error (0)	itapema-sc-gov-br.mail.protection.outlook.com		104.47.23.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.613787889 CEST	1.1.1.1	192.168.2.7	0xde02	No error (0)	mail.civiliter.es	civiliter.es		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:54.613787889 CEST	1.1.1.1	192.168.2.7	0xde02	No error (0)	civiliter.es		213.227.131.210	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.621206045 CEST	1.1.1.1	192.168.2.7	0xd8cc	Name error (3)	out.theminitiger.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.664175987 CEST	1.1.1.1	192.168.2.7	0x6aa9	No error (0)	mail.d1.dion.ne.jp	msa.d1.dion.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:54.664175987 CEST	1.1.1.1	192.168.2.7	0x6aa9	No error (0)	msa.d1.dion.ne.jp		106.187.245.193	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.664206982 CEST	1.1.1.1	192.168.2.7	0xf930	Name error (3)	secure.kdbrindes.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.704405069 CEST	1.1.1.1	192.168.2.7	0x48e9	Name error (3)	smtp.yildirimlarnakliyat.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.726157904 CEST	1.1.1.1	192.168.2.7	0xc25	Name error (3)	mail.cweng.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.843482018 CEST	1.1.1.1	192.168.2.7	0xa918	Name error (3)	securesmtp.kaufland.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.851888895 CEST	1.1.1.1	192.168.2.7	0x75d3	Name error (3)	itelefonica.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.981213093 CEST	1.1.1.1	192.168.2.7	0xc579	Name error (3)	secure.fairhoperealtygroup.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:54.991933107 CEST	1.1.1.1	192.168.2.7	0x7f09	Name error (3)	out.panelel.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.043416977 CEST	1.1.1.1	192.168.2.7	0x956f	Name error (3)	securesmtp.line.no	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.056642056 CEST	1.1.1.1	192.168.2.7	0xe9ce	No error (0)	mail.cmfertilizer.com.au	mail.bne.server-mail.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:55.056642056 CEST	1.1.1.1	192.168.2.7	0xe9ce	No error (0)	mail.bne.server-mail.com		203.210.102.92	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.056719065 CEST	1.1.1.1	192.168.2.7	0xe9ce	No error (0)	mail.cmfertilizer.com.au	mail.bne.server-mail.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:55.056719065 CEST	1.1.1.1	192.168.2.7	0xe9ce	No error (0)	mail.bne.server-mail.com		203.210.102.92	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.095129967 CEST	1.1.1.1	192.168.2.7	0xf96a	Name error (3)	secure.eighty8fiji.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.095185041 CEST	1.1.1.1	192.168.2.7	0xb6bb	Name error (3)	securesmtp.estudioborasi.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.095278978 CEST	1.1.1.1	192.168.2.7	0x4c3c	No error (0)	d55365a.ess.barracudanetworks.com		209.222.82.255	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.095278978 CEST	1.1.1.1	192.168.2.7	0x4c3c	No error (0)	d55365a.ess.barracudanetworks.com		209.222.82.252	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.095278978 CEST	1.1.1.1	192.168.2.7	0x4c3c	No error (0)	d55365a.ess.barracudanetworks.com		209.222.82.253	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.104424000 CEST	1.1.1.1	192.168.2.7	0xd7af	No error (0)	autograf.pl		75.2.24.159	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.104424000 CEST	1.1.1.1	192.168.2.7	0xd7af	No error (0)	autograf.pl		99.83.253.192	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.217945099 CEST	1.1.1.1	192.168.2.7	0x26e5	Name error (3)	mail.glow.demon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.249767065 CEST	1.1.1.1	192.168.2.7	0x26c2	No error (0)	cichecka.co.uk		94.152.13.93	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.340801001 CEST	1.1.1.1	192.168.2.7	0xac50	No error (0)	smtp.skynet.be	relay.glb.proximus.be		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:55.340801001 CEST	1.1.1.1	192.168.2.7	0xac50	No error (0)	relay.glb.proximus.be		195.238.22.30	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.343492985 CEST	1.1.1.1	192.168.2.7	0xff38	No error (0)	out.postafiok.hu		217.65.97.72	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.485177994 CEST	1.1.1.1	192.168.2.7	0x2207	Name error (3)	out.semikron.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.512805939 CEST	1.1.1.1	192.168.2.7	0xbccb	Name error (3)	out.evcofoods.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.539520025 CEST	1.1.1.1	192.168.2.7	0x8e8b	Name error (3)	out.email.mayville.k12.wi.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.594512939 CEST	1.1.1.1	192.168.2.7	0x64f6	No error (0)	nucleos.de		89.31.143.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.602212906 CEST	1.1.1.1	192.168.2.7	0xf22a	No error (0)	securesmtp.masterahome.com		216.40.34.41	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.677491903 CEST	1.1.1.1	192.168.2.7	0x15e6	Name error (3)	securesmtp.mapsolution.co.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.677522898 CEST	1.1.1.1	192.168.2.7	0x15e6	Name error (3)	securesmtp.mapsolution.co.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.707905054 CEST	1.1.1.1	192.168.2.7	0x77c0	No error (0)	smtp.dream.jp	smtp2.cm.dream.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:55.707905054 CEST	1.1.1.1	192.168.2.7	0x77c0	No error (0)	smtp2.cm.dream.jp		59.157.128.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.710539103 CEST	1.1.1.1	192.168.2.7	0x5764	Name error (3)	securesmtp.avantticomunicacao.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.743669987 CEST	1.1.1.1	192.168.2.7	0x11f4	Name error (3)	secure.reallocadora.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.840135098 CEST	1.1.1.1	192.168.2.7	0x7387	Name error (3)	secure.jjstoragesystems.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.869000912 CEST	1.1.1.1	192.168.2.7	0xa01d	Name error (3)	out.brauliolopes.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.904844046 CEST	1.1.1.1	192.168.2.7	0x8ed9	No error (0)	smtp.bex.net	mail.buckeyecom.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:55.904844046 CEST	1.1.1.1	192.168.2.7	0x8ed9	No error (0)	mail.buckeyecom.net		209.67.129.55	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.963430882 CEST	1.1.1.1	192.168.2.7	0x2850	No error (0)	eu-smtp-inbound-1.mimecast.com		91.220.42.241	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.963430882 CEST	1.1.1.1	192.168.2.7	0x2850	No error (0)	eu-smtp-inbound-1.mimecast.com		91.220.42.201	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.963430882 CEST	1.1.1.1	192.168.2.7	0x2850	No error (0)	eu-smtp-inbound-1.mimecast.com		195.130.217.201	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.963430882 CEST	1.1.1.1	192.168.2.7	0x2850	No error (0)	eu-smtp-inbound-1.mimecast.com		195.130.217.211	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.963430882 CEST	1.1.1.1	192.168.2.7	0x2850	No error (0)	eu-smtp-inbound-1.mimecast.com		195.130.217.241	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.963430882 CEST	1.1.1.1	192.168.2.7	0x2850	No error (0)	eu-smtp-inbound-1.mimecast.com		91.220.42.211	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:55.965447903 CEST	1.1.1.1	192.168.2.7	0x1bc7	No error (0)	mx.b.locaweb.com.br		177.153.23.242	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.004888058 CEST	1.1.1.1	192.168.2.7	0xc006	Name error (3)	secure.brsist.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.022548914 CEST	1.1.1.1	192.168.2.7	0xefc7	No error (0)	mail.hdr.com.au		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.213525057 CEST	1.1.1.1	192.168.2.7	0x77e6	Name error (3)	securesmtp.dpsw.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.234513044 CEST	1.1.1.1	192.168.2.7	0x705e	No error (0)	es-pa.nl		81.26.217.148	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.345072985 CEST	1.1.1.1	192.168.2.7	0xb2f7	No error (0)	gapps.zcu.cz		147.228.4.62	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.405643940 CEST	1.1.1.1	192.168.2.7	0x6c9d	No error (0)	mail.ac-poitiers.fr	smtp.ac-poitiers.fr		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:56.405643940 CEST	1.1.1.1	192.168.2.7	0x6c9d	No error (0)	smtp.ac-poitiers.fr	sr13-smtp-01.ac-poitiers.fr		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:56.405643940 CEST	1.1.1.1	192.168.2.7	0x6c9d	No error (0)	sr13-smtp-01.ac-poitiers.fr		195.83.13.244	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.481178045 CEST	1.1.1.1	192.168.2.7	0x389b	Name error (3)	mail.majcherczyk.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.499391079 CEST	1.1.1.1	192.168.2.7	0x9a81	No error (0)	mail.agriturismoquercia.com		62.149.128.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.499391079 CEST	1.1.1.1	192.168.2.7	0x9a81	No error (0)	mail.agriturismoquercia.com		62.149.128.160	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.499391079 CEST	1.1.1.1	192.168.2.7	0x9a81	No error (0)	mail.agriturismoquercia.com		62.149.128.166	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.499391079 CEST	1.1.1.1	192.168.2.7	0x9a81	No error (0)	mail.agriturismoquercia.com		62.149.128.157	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.499391079 CEST	1.1.1.1	192.168.2.7	0x9a81	No error (0)	mail.agriturismoquercia.com		62.149.128.151	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.499391079 CEST	1.1.1.1	192.168.2.7	0x9a81	No error (0)	mail.agriturismoquercia.com		62.149.128.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.755978107 CEST	1.1.1.1	192.168.2.7	0xa8c6	No error (0)	smtp.brsuper.com.br	smtp-vip.kinghost.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:56.755978107 CEST	1.1.1.1	192.168.2.7	0xa8c6	No error (0)	smtp-vip.kinghost.net		191.6.216.100	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.755978107 CEST	1.1.1.1	192.168.2.7	0xa8c6	No error (0)	smtp-vip.kinghost.net		191.6.216.99	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.952310085 CEST	1.1.1.1	192.168.2.7	0xe900	Name error (3)	secure.saludbc.gob.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.959517956 CEST	1.1.1.1	192.168.2.7	0x87f0	No error (0)	mxw.mxhichina.com		47.246.99.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.961337090 CEST	1.1.1.1	192.168.2.7	0x46c2	Name error (3)	out.getlife.indi	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.994654894 CEST	1.1.1.1	192.168.2.7	0xc238	No error (0)	mx10.se.isp-net.nl		149.13.75.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.994654894 CEST	1.1.1.1	192.168.2.7	0xc238	No error (0)	mx10.se.isp-net.nl		38.111.198.185	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.994654894 CEST	1.1.1.1	192.168.2.7	0xc238	No error (0)	mx10.se.isp-net.nl		130.117.54.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:56.994654894 CEST	1.1.1.1	192.168.2.7	0xc238	No error (0)	mx10.se.isp-net.nl		154.59.104.23	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.004837990 CEST	1.1.1.1	192.168.2.7	0xe9bc	Name error (3)	pcftp.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.021229029 CEST	1.1.1.1	192.168.2.7	0xc57e	No error (0)	smtp.gisspecialisten.nl		86.105.244.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.158802032 CEST	1.1.1.1	192.168.2.7	0xe943	No error (0)	smtp.netzero.com	smtp-com.netzero.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:57.158802032 CEST	1.1.1.1	192.168.2.7	0xe943	No error (0)	smtp-com.netzero.net		64.136.44.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.158802032 CEST	1.1.1.1	192.168.2.7	0xe943	No error (0)	smtp-com.netzero.net		64.136.52.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.229231119 CEST	1.1.1.1	192.168.2.7	0x88ea	No error (0)	gm.com		198.208.74.205	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.229231119 CEST	1.1.1.1	192.168.2.7	0x88ea	No error (0)	gm.com		198.208.73.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.301976919 CEST	1.1.1.1	192.168.2.7	0xd375	No error (0)	kalsoonizorg.nl		185.104.29.102	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.323278904 CEST	1.1.1.1	192.168.2.7	0xc49d	No error (0)	smtp.dotbob.com	traff-5.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:57.323278904 CEST	1.1.1.1	192.168.2.7	0xc49d	No error (0)	traff-5.hugedomains.com	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:57.323278904 CEST	1.1.1.1	192.168.2.7	0xc49d	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		34.205.242.146	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.323278904 CEST	1.1.1.1	192.168.2.7	0xc49d	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		54.161.222.85	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.366882086 CEST	1.1.1.1	192.168.2.7	0xeabc	No error (0)	sbcglabal.net		199.59.243.220	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.380299091 CEST	1.1.1.1	192.168.2.7	0x73f7	No error (0)	smtp.shaw.ca	shawmail.glb.shawcable.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:57.380299091 CEST	1.1.1.1	192.168.2.7	0x73f7	No error (0)	shawmail.glb.shawcable.net		64.59.136.142	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.380299091 CEST	1.1.1.1	192.168.2.7	0x73f7	No error (0)	shawmail.glb.shawcable.net		64.59.128.135	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		211.9.223.212	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.217	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		211.9.223.214	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		211.9.223.213	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.221	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.218	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.216	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.215	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.213	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.214	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.220	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.219	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		211.9.223.215	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.212	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		211.9.223.216	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.474124908 CEST	1.1.1.1	192.168.2.7	0x5493	No error (0)	vlmx20.secure.ne.jp		122.200.253.211	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.504395008 CEST	1.1.1.1	192.168.2.7	0x79a	No error (0)	xn--pokmonworld-dbb.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.504395008 CEST	1.1.1.1	192.168.2.7	0x79a	No error (0)	xn--pokmonworld-dbb.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.515779018 CEST	1.1.1.1	192.168.2.7	0x5041	Name error (3)	smtp.acoulson.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.603802919 CEST	1.1.1.1	192.168.2.7	0xa84e	Name error (3)	out.readinessconcepts.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.605545044 CEST	1.1.1.1	192.168.2.7	0xee3d	No error (0)	cip.org.ar		174.136.29.130	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.614464045 CEST	1.1.1.1	192.168.2.7	0xe365	Name error (3)	secure.mearingsmith.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.725641966 CEST	1.1.1.1	192.168.2.7	0x8e7e	No error (0)	elecomm-engineer.co.uk		94.136.40.82	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.859185934 CEST	1.1.1.1	192.168.2.7	0x3cdf	No error (0)	kaltenkirchen.de		92.204.39.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.870163918 CEST	1.1.1.1	192.168.2.7	0xbb64	Server failure (2)	mail.kingsofcomedy.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:57.971318960 CEST	1.1.1.1	192.168.2.7	0xc608	Name error (3)	securesmtp.arthurfrancia.ammuca.eu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.073884010 CEST	1.1.1.1	192.168.2.7	0xe650	No error (0)	prixconstrutora.com.br		187.45.240.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.084027052 CEST	1.1.1.1	192.168.2.7	0x3c1	Name error (3)	secure.cesgengenharia.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.127334118 CEST	1.1.1.1	192.168.2.7	0x54f2	Name error (3)	smtp.tele2.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.212054968 CEST	1.1.1.1	192.168.2.7	0x69b	No error (0)	smtpin.rzone.de		81.169.145.97	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.212084055 CEST	1.1.1.1	192.168.2.7	0x8cbf	No error (0)	sky.com		90.216.128.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.286048889 CEST	1.1.1.1	192.168.2.7	0x20e3	Name error (3)	out.ldias.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.332950115 CEST	1.1.1.1	192.168.2.7	0xf5e9	Name error (3)	secure.jrf.org.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.352566004 CEST	1.1.1.1	192.168.2.7	0x1	No error (0)	glaube.de		188.40.120.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.473642111 CEST	1.1.1.1	192.168.2.7	0x4385	No error (0)	proxy7.greco.com.br		167.114.161.198	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.499289989 CEST	1.1.1.1	192.168.2.7	0xfc85	Server failure (2)	goldcrestchemicals.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.571191072 CEST	1.1.1.1	192.168.2.7	0x7318	No error (0)	unb-br.mail.protection.outlook.com		52.101.8.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.571191072 CEST	1.1.1.1	192.168.2.7	0x7318	No error (0)	unb-br.mail.protection.outlook.com		52.101.40.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.571191072 CEST	1.1.1.1	192.168.2.7	0x7318	No error (0)	unb-br.mail.protection.outlook.com		52.101.41.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.571191072 CEST	1.1.1.1	192.168.2.7	0x7318	No error (0)	unb-br.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.571191072 CEST	1.1.1.1	192.168.2.7	0x7318	No error (0)	unb-br.mail.protection.outlook.com		52.101.42.16	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.571191072 CEST	1.1.1.1	192.168.2.7	0x7318	No error (0)	unb-br.mail.protection.outlook.com		52.101.10.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.571191072 CEST	1.1.1.1	192.168.2.7	0x7318	No error (0)	unb-br.mail.protection.outlook.com		52.101.42.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.585947037 CEST	1.1.1.1	192.168.2.7	0x28af	No error (0)	mx3.fuse.net		150.136.132.149	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.640047073 CEST	1.1.1.1	192.168.2.7	0xccd9	No error (0)	smtp.inwind.it		213.209.1.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.887342930 CEST	1.1.1.1	192.168.2.7	0x93e0	No error (0)	smtp.email.it	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:58.887342930 CEST	1.1.1.1	192.168.2.7	0x93e0	No error (0)	smtp.dka.mailcore.net		185.138.56.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.887342930 CEST	1.1.1.1	192.168.2.7	0x93e0	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:58.902857065 CEST	1.1.1.1	192.168.2.7	0xd702	Name error (3)	out.5f798dfe5f.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.000264883 CEST	1.1.1.1	192.168.2.7	0xa6f0	No error (0)	smtp.infinito.it		194.185.246.171	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.026288033 CEST	1.1.1.1	192.168.2.7	0x1714	No error (0)	smtp.unil.ch	smtp1.unil.ch		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:59.026288033 CEST	1.1.1.1	192.168.2.7	0x1714	No error (0)	smtp1.unil.ch		130.223.0.23	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.226435900 CEST	1.1.1.1	192.168.2.7	0xb200	Name error (3)	smtp.tekun.co.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.237756014 CEST	1.1.1.1	192.168.2.7	0xff74	No error (0)	adlers.com		205.178.189.129	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.244034052 CEST	1.1.1.1	192.168.2.7	0xd9f	No error (0)	mx.jk.locaweb.com.br		200.234.204.130	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.267338991 CEST	1.1.1.1	192.168.2.7	0xa203	Name error (3)	securesmtp.baovetaybinh.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.409626007 CEST	1.1.1.1	192.168.2.7	0xce73	Name error (3)	ammann.whitney.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.553930044 CEST	1.1.1.1	192.168.2.7	0x13b	No error (0)	secure.mdfurnace.com		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.594211102 CEST	1.1.1.1	192.168.2.7	0x5e43	No error (0)	mx2.de.opalstack.com		178.162.221.165	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.600099087 CEST	1.1.1.1	192.168.2.7	0x69c4	No error (0)	smtp.peak.org	peak.org.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:43:59.600099087 CEST	1.1.1.1	192.168.2.7	0x69c4	No error (0)	peak.org.av-mx.com		129.153.232.207	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.616080046 CEST	1.1.1.1	192.168.2.7	0x7046	Name error (3)	securesmtp.6fvbvb.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.618952036 CEST	1.1.1.1	192.168.2.7	0x8105	Name error (3)	out.liderancacobrancas.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.681464911 CEST	1.1.1.1	192.168.2.7	0xcc5c	Name error (3)	out.tu.ac.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.690838099 CEST	1.1.1.1	192.168.2.7	0x8f99	No error (0)	out.atlashomewares.com		151.101.1.124	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.690838099 CEST	1.1.1.1	192.168.2.7	0x8f99	No error (0)	out.atlashomewares.com		151.101.193.124	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.690838099 CEST	1.1.1.1	192.168.2.7	0x8f99	No error (0)	out.atlashomewares.com		151.101.129.124	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.690838099 CEST	1.1.1.1	192.168.2.7	0x8f99	No error (0)	out.atlashomewares.com		151.101.65.124	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.702733994 CEST	1.1.1.1	192.168.2.7	0xb2a4	No error (0)	sp-wolastarogrodzka.pl		194.181.228.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.828902960 CEST	1.1.1.1	192.168.2.7	0x1c58	No error (0)	smtp.cogeco.ca		193.122.131.100	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.943564892 CEST	1.1.1.1	192.168.2.7	0xe1ba	Name error (3)	secure.sepiaconsultants.co.za	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:43:59.985635996 CEST	1.1.1.1	192.168.2.7	0x8bdb	Name error (3)	qdteopw5mf.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.008474112 CEST	1.1.1.1	192.168.2.7	0x9679	Name error (3)	securesmtp.jeanneyoung.biz	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.108644962 CEST	1.1.1.1	192.168.2.7	0x69d5	Name error (3)	smtp.kaeler.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.113475084 CEST	1.1.1.1	192.168.2.7	0x8dda	No error (0)	smtp.getmail.no	smtp.dka.mailcore.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:00.113475084 CEST	1.1.1.1	192.168.2.7	0x8dda	No error (0)	smtp.dka.mailcore.net		194.19.134.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.113475084 CEST	1.1.1.1	192.168.2.7	0x8dda	No error (0)	smtp.dka.mailcore.net		185.138.56.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.114361048 CEST	1.1.1.1	192.168.2.7	0xf80e	No error (0)	mail.nexgo.de	smtp.vodafonemail.de		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:00.114361048 CEST	1.1.1.1	192.168.2.7	0xf80e	No error (0)	smtp.vodafonemail.de		2.207.150.234	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.141616106 CEST	1.1.1.1	192.168.2.7	0x9319	No error (0)	smtp.foodpage.co.uk	smtp.stackmail.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:00.141616106 CEST	1.1.1.1	192.168.2.7	0x9319	No error (0)	smtp.stackmail.com		185.151.28.68	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.217550039 CEST	1.1.1.1	192.168.2.7	0x78c4	No error (0)	secure.columbusacademy.org		98.103.127.188	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.256237030 CEST	1.1.1.1	192.168.2.7	0x9ccf	Name error (3)	securesmtp.albap.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.268093109 CEST	1.1.1.1	192.168.2.7	0x7553	Name error (3)	secure.sea-radio.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.304959059 CEST	1.1.1.1	192.168.2.7	0x29aa	Name error (3)	securesmtp.gnsmail.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.367691040 CEST	1.1.1.1	192.168.2.7	0x44cf	Name error (3)	secure.yjudovlkxard.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.406028986 CEST	1.1.1.1	192.168.2.7	0x466d	No error (0)	smtp.westnet.com.au	mail.westnet.com.au		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:00.406028986 CEST	1.1.1.1	192.168.2.7	0x466d	No error (0)	mail.westnet.com.au	sep-kakadu04.au-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:00.406028986 CEST	1.1.1.1	192.168.2.7	0x466d	No error (0)	sep-kakadu04.au-east.atmailcloud.com		13.55.195.118	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.406028986 CEST	1.1.1.1	192.168.2.7	0x466d	No error (0)	sep-kakadu04.au-east.atmailcloud.com		52.64.186.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.408756018 CEST	1.1.1.1	192.168.2.7	0x8220	Name error (3)	secure.estudante.sed.sc.gov.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.428520918 CEST	1.1.1.1	192.168.2.7	0x4450	No error (0)	riyadh.gov.sa		66.9.139.60	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.505307913 CEST	1.1.1.1	192.168.2.7	0x50c6	No error (0)	smtp.jphimelick.com	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:00.505307913 CEST	1.1.1.1	192.168.2.7	0x50c6	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.521289110 CEST	1.1.1.1	192.168.2.7	0xd559	No error (0)	smtp.slinetransport.com		64.79.170.162	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.558839083 CEST	1.1.1.1	192.168.2.7	0xb112	No error (0)	secure.matimco.com		208.91.197.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.727402925 CEST	1.1.1.1	192.168.2.7	0x2d09	Name error (3)	mail.anagataitsolutions.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.796446085 CEST	1.1.1.1	192.168.2.7	0xd59d	No error (0)	smtp.gifford.uk.com		15.197.240.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:00.859745026 CEST	1.1.1.1	192.168.2.7	0xadc3	No error (0)	sion.com		200.58.112.242	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.262363911 CEST	1.1.1.1	192.168.2.7	0x9a	Name error (3)	smtp.leiaute.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.263295889 CEST	1.1.1.1	192.168.2.7	0xbb4b	Name error (3)	out.constructel.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.282743931 CEST	1.1.1.1	192.168.2.7	0x3e29	Name error (3)	smtp.rolimconsult.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.283715010 CEST	1.1.1.1	192.168.2.7	0x50e0	No error (0)	smtp.boginmunns.com		35.237.181.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.304121971 CEST	1.1.1.1	192.168.2.7	0xf5a9	No error (0)	gardnerfamily.co.uk		46.23.69.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.317030907 CEST	1.1.1.1	192.168.2.7	0x20a9	No error (0)	goltz.pc-point.info		185.186.226.199	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.388834000 CEST	1.1.1.1	192.168.2.7	0x62a	No error (0)	kbstest.co.kr		52.79.32.252	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.389029026 CEST	1.1.1.1	192.168.2.7	0x62a	No error (0)	kbstest.co.kr		52.79.32.252	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.402065992 CEST	1.1.1.1	192.168.2.7	0x7590	Name error (3)	smtp.zwoho.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.419594049 CEST	1.1.1.1	192.168.2.7	0xb781	No error (0)	smtp.me.com	smtp.me.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:01.541918039 CEST	1.1.1.1	192.168.2.7	0x8e67	Name error (3)	secure.clad.co.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.569951057 CEST	1.1.1.1	192.168.2.7	0x46d9	Name error (3)	jr77.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.596750021 CEST	1.1.1.1	192.168.2.7	0x713b	No error (0)	techimpex.com.br		191.252.4.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.599143028 CEST	1.1.1.1	192.168.2.7	0x713b	No error (0)	techimpex.com.br		191.252.4.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.647808075 CEST	1.1.1.1	192.168.2.7	0xa245	Name error (3)	jewks.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.659152031 CEST	1.1.1.1	192.168.2.7	0x89dc	No error (0)	smokinaces.in		67.223.118.47	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.762614012 CEST	1.1.1.1	192.168.2.7	0x8751	Name error (3)	securesmtp.sebr.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.797319889 CEST	1.1.1.1	192.168.2.7	0xc282	Name error (3)	securesmtp.malora.ch	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.801820040 CEST	1.1.1.1	192.168.2.7	0xd0c6	No error (0)	site3.smtp.mx.exch580.serverdata.net		64.78.40.209	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.887279034 CEST	1.1.1.1	192.168.2.7	0x4869	No error (0)	mxb.ovh.net		46.105.45.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.889767885 CEST	1.1.1.1	192.168.2.7	0x1bbf	Name error (3)	mail.reckkommunikation.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.923583984 CEST	1.1.1.1	192.168.2.7	0xa923	No error (0)	securesmtp.chiranjeevminerals.in	82774.BODIS.COM		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:01.923583984 CEST	1.1.1.1	192.168.2.7	0xa923	No error (0)	82774.BODIS.COM		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:01.953439951 CEST	1.1.1.1	192.168.2.7	0xcd6b	No error (0)	bimantara.co.id		84.32.84.32	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.014271021 CEST	1.1.1.1	192.168.2.7	0xe607	Name error (3)	out.cfreight.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.028871059 CEST	1.1.1.1	192.168.2.7	0x79ee	No error (0)	glory-web.com		183.181.84.7	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.031127930 CEST	1.1.1.1	192.168.2.7	0xc9d9	No error (0)	mail.sbcglobalnet.com		95.211.75.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.052182913 CEST	1.1.1.1	192.168.2.7	0x85b7	Name error (3)	mail.campbelllee1.plus.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.057043076 CEST	1.1.1.1	192.168.2.7	0x1014	Name error (3)	secure.internacionalmaritima.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.059941053 CEST	1.1.1.1	192.168.2.7	0x5ea5	No error (0)	mail.5ssolucoes.com.br	pop.5ssolucoes.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:02.059941053 CEST	1.1.1.1	192.168.2.7	0x5ea5	No error (0)	pop.5ssolucoes.com.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:02.059941053 CEST	1.1.1.1	192.168.2.7	0x5ea5	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.064829111 CEST	1.1.1.1	192.168.2.7	0x2bfb	No error (0)	mail.obre.fr	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:02.064829111 CEST	1.1.1.1	192.168.2.7	0x2bfb	No error (0)	ghs.googlehosted.com		142.250.185.179	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.111747980 CEST	1.1.1.1	192.168.2.7	0x4e1	Name error (3)	securesmtp.kohlercia.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.206612110 CEST	1.1.1.1	192.168.2.7	0x285b	No error (0)	mail.vibtech.com.br		104.156.56.14	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.446434021 CEST	1.1.1.1	192.168.2.7	0x8efb	Name error (3)	secure.asnatec.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.461858034 CEST	1.1.1.1	192.168.2.7	0x9714	Name error (3)	securesmtp.arezzocentrokiaikido.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.466892958 CEST	1.1.1.1	192.168.2.7	0xa1ef	No error (0)	geerolf.be		46.30.215.245	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.499840975 CEST	1.1.1.1	192.168.2.7	0xcd8a	Name error (3)	smtp.ondeon.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.500591993 CEST	1.1.1.1	192.168.2.7	0x7a4	No error (0)	mail.jq.com.ar		200.58.110.107	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.528528929 CEST	1.1.1.1	192.168.2.7	0x429d	Name error (3)	out.chugach.ak.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.621181011 CEST	1.1.1.1	192.168.2.7	0x1ce1	No error (0)	smtp.magnasys.net		154.219.188.75	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.630739927 CEST	1.1.1.1	192.168.2.7	0xbbe4	No error (0)	iitk.ac.in		202.3.77.184	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.641858101 CEST	1.1.1.1	192.168.2.7	0x8614	Name error (3)	mail.firestw.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.645571947 CEST	1.1.1.1	192.168.2.7	0xed23	Name error (3)	secure.nakedforsatan.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.656845093 CEST	1.1.1.1	192.168.2.7	0x5319	No error (0)	mail.emeraldfalls.com		185.83.214.222	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.656914949 CEST	1.1.1.1	192.168.2.7	0x5319	No error (0)	mail.emeraldfalls.com		185.83.214.222	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.762000084 CEST	1.1.1.1	192.168.2.7	0x2da4	No error (0)	mailin.mx-hub.cz		130.193.14.152	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.768295050 CEST	1.1.1.1	192.168.2.7	0xae6	No error (0)	mail.benjaminbulot.be		46.30.213.91	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.887145996 CEST	1.1.1.1	192.168.2.7	0xe86b	Name error (3)	smtp.pmhobbycraft.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.905714035 CEST	1.1.1.1	192.168.2.7	0x5eac	No error (0)	toumaz.com		35.195.63.198	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.918251038 CEST	1.1.1.1	192.168.2.7	0x5b51	Name error (3)	securesmtp.janimation.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:02.955130100 CEST	1.1.1.1	192.168.2.7	0x398	Name error (3)	smtp.rwfxstudio.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.022825956 CEST	1.1.1.1	192.168.2.7	0x41c0	No error (0)	capitaltitle.net		174.138.108.232	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.025847912 CEST	1.1.1.1	192.168.2.7	0xc5f2	No error (0)	smtp.osnanet.de		212.6.122.175	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.042264938 CEST	1.1.1.1	192.168.2.7	0x2be6	Name error (3)	out.caledonian.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.141278982 CEST	1.1.1.1	192.168.2.7	0x210e	Name error (3)	expertonlinedigital.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.157358885 CEST	1.1.1.1	192.168.2.7	0x98b8	Name error (3)	smtp.printincclothing.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.208965063 CEST	1.1.1.1	192.168.2.7	0xfb42	No error (0)	smtp.cadaris.com.br	pop.cadaris.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:03.208965063 CEST	1.1.1.1	192.168.2.7	0xfb42	No error (0)	pop.cadaris.com.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:03.208965063 CEST	1.1.1.1	192.168.2.7	0xfb42	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.265224934 CEST	1.1.1.1	192.168.2.7	0x91c0	Name error (3)	mail.mcboe.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.290695906 CEST	1.1.1.1	192.168.2.7	0x2691	No error (0)	vitalgosys.com		185.230.63.186	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.290695906 CEST	1.1.1.1	192.168.2.7	0x2691	No error (0)	vitalgosys.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.290695906 CEST	1.1.1.1	192.168.2.7	0x2691	No error (0)	vitalgosys.com		185.230.63.171	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.397895098 CEST	1.1.1.1	192.168.2.7	0x4419	Name error (3)	smtp.synack.mckinsey.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.512068033 CEST	1.1.1.1	192.168.2.7	0xc752	No error (0)	mail.unia-arquitectos.com		35.214.159.114	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.524467945 CEST	1.1.1.1	192.168.2.7	0xb2fe	No error (0)	secure.amrop.de		20.50.2.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.575284004 CEST	1.1.1.1	192.168.2.7	0x1f8b	Name error (3)	smtp.corby-cats.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.619534016 CEST	1.1.1.1	192.168.2.7	0xfe15	No error (0)	mx3.orcon.net.nz		60.234.97.11	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.622998953 CEST	1.1.1.1	192.168.2.7	0x23a0	No error (0)	fpf-pe.com.br		186.227.204.171	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.636348009 CEST	1.1.1.1	192.168.2.7	0x545c	No error (0)	inmail1.index.hu		217.20.130.197	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.640322924 CEST	1.1.1.1	192.168.2.7	0x6906	Name error (3)	smtp.ccn5.aitai.ne.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.640547037 CEST	1.1.1.1	192.168.2.7	0x6906	Name error (3)	smtp.ccn5.aitai.ne.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.653616905 CEST	1.1.1.1	192.168.2.7	0xa116	No error (0)	mail.mnfgroup.limited		125.213.170.209	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.675019979 CEST	1.1.1.1	192.168.2.7	0x3f07	Name error (3)	acsu.buffalo.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.874411106 CEST	1.1.1.1	192.168.2.7	0xe170	Name error (3)	securesmtp.chartwer.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.894794941 CEST	1.1.1.1	192.168.2.7	0x90f5	Name error (3)	securesmtp.fba8b04559.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	mail.fiap.com.br	outlook.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	ooc-g2.tm-4.office.com		40.99.150.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	ooc-g2.tm-4.office.com		52.98.228.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	ooc-g2.tm-4.office.com		52.98.179.82	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	ooc-g2.tm-4.office.com		52.98.242.242	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	ooc-g2.tm-4.office.com		52.98.171.226	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	ooc-g2.tm-4.office.com		52.98.152.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	ooc-g2.tm-4.office.com		52.98.241.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.930315971 CEST	1.1.1.1	192.168.2.7	0x4b06	No error (0)	ooc-g2.tm-4.office.com		52.98.243.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.996870041 CEST	1.1.1.1	192.168.2.7	0xb900	Name error (3)	secure.archificio.eu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:03.997901917 CEST	1.1.1.1	192.168.2.7	0x2c1f	Name error (3)	securesmtp.executivebshop.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.023848057 CEST	1.1.1.1	192.168.2.7	0x8e53	No error (0)	smtp.awaasphalt.com	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:04.023848057 CEST	1.1.1.1	192.168.2.7	0x8e53	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.079355955 CEST	1.1.1.1	192.168.2.7	0x7af0	No error (0)	smtp.superig.com.br	smtp-ha.skymail.net.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:04.079355955 CEST	1.1.1.1	192.168.2.7	0x7af0	No error (0)	smtp-ha.skymail.net.br		168.0.132.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.230582952 CEST	1.1.1.1	192.168.2.7	0xe2ba	No error (0)	bcc.com.vn		103.21.220.58	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.251305103 CEST	1.1.1.1	192.168.2.7	0xc02f	No error (0)	secure.neverskip.com	o8qjzrb.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:04.251305103 CEST	1.1.1.1	192.168.2.7	0xc02f	No error (0)	o8qjzrb.ng.impervadns.net		45.60.76.209	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.265147924 CEST	1.1.1.1	192.168.2.7	0xc412	Name error (3)	mail.craig-cooper.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.359416962 CEST	1.1.1.1	192.168.2.7	0x7a48	No error (0)	sysmap-com-br.mail.protection.outlook.com		52.101.194.19	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.359416962 CEST	1.1.1.1	192.168.2.7	0x7a48	No error (0)	sysmap-com-br.mail.protection.outlook.com		52.101.41.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.359416962 CEST	1.1.1.1	192.168.2.7	0x7a48	No error (0)	sysmap-com-br.mail.protection.outlook.com		52.101.42.9	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.359416962 CEST	1.1.1.1	192.168.2.7	0x7a48	No error (0)	sysmap-com-br.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.359416962 CEST	1.1.1.1	192.168.2.7	0x7a48	No error (0)	sysmap-com-br.mail.protection.outlook.com		52.101.8.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.359416962 CEST	1.1.1.1	192.168.2.7	0x7a48	No error (0)	sysmap-com-br.mail.protection.outlook.com		52.101.8.51	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.359416962 CEST	1.1.1.1	192.168.2.7	0x7a48	No error (0)	sysmap-com-br.mail.protection.outlook.com		52.101.11.9	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.487447977 CEST	1.1.1.1	192.168.2.7	0x70fa	Name error (3)	out.zacharyschools.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.488050938 CEST	1.1.1.1	192.168.2.7	0x28dd	Name error (3)	smtp.hipnosesemsegredos.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.513000965 CEST	1.1.1.1	192.168.2.7	0x56f8	Name error (3)	svalios.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.519763947 CEST	1.1.1.1	192.168.2.7	0xc39f	Name error (3)	securesmtp.adfacility.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.567723989 CEST	1.1.1.1	192.168.2.7	0x78a4	Name error (3)	out.pop.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.573447943 CEST	1.1.1.1	192.168.2.7	0xec36	No error (0)	mail.rabbit.com.au		203.134.11.58	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.574374914 CEST	1.1.1.1	192.168.2.7	0xec36	No error (0)	mail.rabbit.com.au		203.134.11.58	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.608985901 CEST	1.1.1.1	192.168.2.7	0x2165	Name error (3)	lquinngroup.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.609714985 CEST	1.1.1.1	192.168.2.7	0xe440	No error (0)	vitstudent.ac.in		115.248.50.250	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.682945013 CEST	1.1.1.1	192.168.2.7	0xf630	Name error (3)	smtp.nordialog.no	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.779846907 CEST	1.1.1.1	192.168.2.7	0x2175	Name error (3)	securesmtp.sterling-m.co.za	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.793437958 CEST	1.1.1.1	192.168.2.7	0x2269	No error (0)	bergamont.de		13.32.99.68	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.793437958 CEST	1.1.1.1	192.168.2.7	0x2269	No error (0)	bergamont.de		13.32.99.99	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.793437958 CEST	1.1.1.1	192.168.2.7	0x2269	No error (0)	bergamont.de		13.32.99.103	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.793437958 CEST	1.1.1.1	192.168.2.7	0x2269	No error (0)	bergamont.de		13.32.99.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.838473082 CEST	1.1.1.1	192.168.2.7	0xf4f0	Name error (3)	secure.libang.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.877213955 CEST	1.1.1.1	192.168.2.7	0x77c	No error (0)	sensus-se.se1.mx-wecloud.net		185.38.180.4	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.881608009 CEST	1.1.1.1	192.168.2.7	0x6767	Name error (3)	out.thebfagroup.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.926409960 CEST	1.1.1.1	192.168.2.7	0xa569	Name error (3)	securesmtp.86.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.982053041 CEST	1.1.1.1	192.168.2.7	0xcc23	No error (0)	smtp.strato.de		81.169.145.133	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:04.990230083 CEST	1.1.1.1	192.168.2.7	0x3d3c	Name error (3)	securesmtp.obiettividarte.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.012370110 CEST	1.1.1.1	192.168.2.7	0x488f	Name error (3)	smtp.albinosquirrel.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.160356998 CEST	1.1.1.1	192.168.2.7	0x63f0	Name error (3)	smtp.institut-gmk.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.240328074 CEST	1.1.1.1	192.168.2.7	0x8e76	Name error (3)	securesmtp.javamountaincoffee.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.246160030 CEST	1.1.1.1	192.168.2.7	0xf6b3	Name error (3)	out.reimo.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.267020941 CEST	1.1.1.1	192.168.2.7	0x89a3	Name error (3)	securesmtp.albap.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.526420116 CEST	1.1.1.1	192.168.2.7	0xf2fd	Name error (3)	out.motadata.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.539475918 CEST	1.1.1.1	192.168.2.7	0xd9a8	No error (0)	usp.br		200.144.248.41	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.540898085 CEST	1.1.1.1	192.168.2.7	0x7b6a	Name error (3)	secure.uniforja.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.556329966 CEST	1.1.1.1	192.168.2.7	0xa8f4	No error (0)	smtp.islandbreeze.org	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:05.556329966 CEST	1.1.1.1	192.168.2.7	0xa8f4	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.565360069 CEST	1.1.1.1	192.168.2.7	0x8fa3	Name error (3)	mail.saintmarkschoolethiopia.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.598970890 CEST	1.1.1.1	192.168.2.7	0x30a4	Name error (3)	smtp.priveesport.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.649806976 CEST	1.1.1.1	192.168.2.7	0x561	No error (0)	securesmtp.hodders.co.uk		76.223.67.189	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.649806976 CEST	1.1.1.1	192.168.2.7	0x561	No error (0)	securesmtp.hodders.co.uk		13.248.213.45	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.651279926 CEST	1.1.1.1	192.168.2.7	0x2474	Name error (3)	securesmtp.ipfoundation.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.660732985 CEST	1.1.1.1	192.168.2.7	0x18a0	Name error (3)	smtp.mv-hallstadt.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.674437046 CEST	1.1.1.1	192.168.2.7	0xd118	No error (0)	mtsspa.it		104.21.7.175	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.674437046 CEST	1.1.1.1	192.168.2.7	0xd118	No error (0)	mtsspa.it		172.67.187.245	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.742904902 CEST	1.1.1.1	192.168.2.7	0x6041	Name error (3)	out.goaheadit.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.743067980 CEST	1.1.1.1	192.168.2.7	0x6041	Name error (3)	out.goaheadit.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.791594028 CEST	1.1.1.1	192.168.2.7	0xaa9b	Name error (3)	securesmtp.rhenus.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.821156025 CEST	1.1.1.1	192.168.2.7	0xe092	Name error (3)	smtp.scuoledueville.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:05.892914057 CEST	1.1.1.1	192.168.2.7	0xd078	Name error (3)	securesmtp.sgmcclan.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.049484015 CEST	1.1.1.1	192.168.2.7	0x91a7	Name error (3)	secure.tmssas.co	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.140760899 CEST	1.1.1.1	192.168.2.7	0x3c05	Name error (3)	smtp.hotmbyail.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.217756987 CEST	1.1.1.1	192.168.2.7	0x881e	No error (0)	securesmtp.acotes.com		207.148.248.143	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.247088909 CEST	1.1.1.1	192.168.2.7	0x661c	Name error (3)	secure.egba.ba.gov.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.264369965 CEST	1.1.1.1	192.168.2.7	0xec85	Name error (3)	smtp.cm-photography.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.269779921 CEST	1.1.1.1	192.168.2.7	0x1c2f	No error (0)	wzl2.pl		188.128.143.70	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.290376902 CEST	1.1.1.1	192.168.2.7	0xb149	No error (0)	mail.renardoo.com		176.31.45.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.325834036 CEST	1.1.1.1	192.168.2.7	0x537	Name error (3)	mail.cofibox.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.337131023 CEST	1.1.1.1	192.168.2.7	0x99da	No error (0)	familiaanabel.com.ar		200.58.112.170	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.386626005 CEST	1.1.1.1	192.168.2.7	0xd82b	Name error (3)	starfunevents.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.388189077 CEST	1.1.1.1	192.168.2.7	0xfafa	Name error (3)	bniya.store	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.389745951 CEST	1.1.1.1	192.168.2.7	0xffd2	Name error (3)	out.ssgn.by.lo-net2.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.398441076 CEST	1.1.1.1	192.168.2.7	0xaf8a	No error (0)	smtp.iinet.net.au	mail.iinet.net.au		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:06.398441076 CEST	1.1.1.1	192.168.2.7	0xaf8a	No error (0)	mail.iinet.net.au	sep-kakadu03.au-east.atmailcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:06.398441076 CEST	1.1.1.1	192.168.2.7	0xaf8a	No error (0)	sep-kakadu03.au-east.atmailcloud.com		52.62.236.135	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.398441076 CEST	1.1.1.1	192.168.2.7	0xaf8a	No error (0)	sep-kakadu03.au-east.atmailcloud.com		54.153.230.49	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.576308966 CEST	1.1.1.1	192.168.2.7	0xeae1	No error (0)	geschwinde.net		91.227.204.35	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.595153093 CEST	1.1.1.1	192.168.2.7	0x3fec	No error (0)	ovelinea.net		192.185.16.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.642318964 CEST	1.1.1.1	192.168.2.7	0xd7d7	Name error (3)	securesmtp.freehandsdesing.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.674859047 CEST	1.1.1.1	192.168.2.7	0xccc4	No error (0)	smtp.univ-lille.fr	vip-vs-messagerie.univ-lille.fr		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:06.674859047 CEST	1.1.1.1	192.168.2.7	0xccc4	No error (0)	vip-vs-messagerie.univ-lille.fr		194.254.129.242	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.674859047 CEST	1.1.1.1	192.168.2.7	0xccc4	No error (0)	vip-vs-messagerie.univ-lille.fr		194.254.129.243	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.690967083 CEST	1.1.1.1	192.168.2.7	0x45e5	No error (0)	pref.ishikawa.lg.jp		211.120.194.34	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.742032051 CEST	1.1.1.1	192.168.2.7	0xb50f	No error (0)	smtp.zjhyiec.com	smtphz.qiye.163.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:06.742032051 CEST	1.1.1.1	192.168.2.7	0xb50f	No error (0)	smtphz.qiye.163.com	hwhz.qiye.ntes53.netease.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:06.742032051 CEST	1.1.1.1	192.168.2.7	0xb50f	No error (0)	hwhz.qiye.ntes53.netease.com		103.129.255.237	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.742032051 CEST	1.1.1.1	192.168.2.7	0xb50f	No error (0)	hwhz.qiye.ntes53.netease.com		103.129.255.238	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.766135931 CEST	1.1.1.1	192.168.2.7	0xa63f	Name error (3)	mail.chopsley.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.776216030 CEST	1.1.1.1	192.168.2.7	0xceb2	Name error (3)	mail.bribaxe.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.783039093 CEST	1.1.1.1	192.168.2.7	0x1fb3	Server failure (2)	mail.uddie.fsnet.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.895067930 CEST	1.1.1.1	192.168.2.7	0xbe6b	Name error (3)	chicasconperroparapracticarsexoconelperro.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.902784109 CEST	1.1.1.1	192.168.2.7	0x81d6	Name error (3)	out.recruitmentsystems.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.904839993 CEST	1.1.1.1	192.168.2.7	0x1f3e	Name error (3)	mail.ch.adp.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:06.912847996 CEST	1.1.1.1	192.168.2.7	0x5912	Name error (3)	out.cross-stitch-corner.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.084073067 CEST	1.1.1.1	192.168.2.7	0x9cb	No error (0)	smtp.rainagaintanks.com.au	mail.rainagaintanks.com.au.cust.a.hostedemail.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:07.084073067 CEST	1.1.1.1	192.168.2.7	0x9cb	No error (0)	mail.rainagaintanks.com.au.cust.a.hostedemail.com		216.40.42.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.126260996 CEST	1.1.1.1	192.168.2.7	0xc90a	No error (0)	smtp.balcab.ch	smtp.hispeed.ch		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:07.126260996 CEST	1.1.1.1	192.168.2.7	0xc90a	No error (0)	smtp.hispeed.ch	smtp-hispeed-ch.cname.unified.services		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:07.126260996 CEST	1.1.1.1	192.168.2.7	0xc90a	No error (0)	smtp-hispeed-ch.cname.unified.services		94.169.2.19	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.132909060 CEST	1.1.1.1	192.168.2.7	0xc9f6	No error (0)	mx3.pub.mailpod11-cph3.one.com		104.37.34.232	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.139389038 CEST	1.1.1.1	192.168.2.7	0xbd21	Name error (3)	mail.riovaradero.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.148973942 CEST	1.1.1.1	192.168.2.7	0x8481	Name error (3)	secure.rhythmuswege.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.157666922 CEST	1.1.1.1	192.168.2.7	0xb1fa	Name error (3)	securesmtp.feb.upr.ac.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.165266037 CEST	1.1.1.1	192.168.2.7	0xdcdc	No error (0)	hotmal.de		85.17.10.131	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.177316904 CEST	1.1.1.1	192.168.2.7	0xcacd	No error (0)	mail.arcticwinter.de		77.111.240.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.198309898 CEST	1.1.1.1	192.168.2.7	0x48f3	No error (0)	mail.lognet.com.br		50.116.86.118	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.207000971 CEST	1.1.1.1	192.168.2.7	0xc0d2	Name error (3)	out.mail.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.262310982 CEST	1.1.1.1	192.168.2.7	0xb7bb	No error (0)	ukwms.ac.id		202.46.29.32	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.294022083 CEST	1.1.1.1	192.168.2.7	0x4536	Name error (3)	out.srcharlessd.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.294363976 CEST	1.1.1.1	192.168.2.7	0x1c21	No error (0)	smtp.volny.cz		46.255.231.17	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.339222908 CEST	1.1.1.1	192.168.2.7	0xfa2d	Name error (3)	securesmtp.lete.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.406761885 CEST	1.1.1.1	192.168.2.7	0x80bd	Name error (3)	out.jaleomantenimiento.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.407718897 CEST	1.1.1.1	192.168.2.7	0x7723	Name error (3)	securesmtp.sr-f.dk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.425951004 CEST	1.1.1.1	192.168.2.7	0x3bcb	Name error (3)	securesmtp.aetnahhl.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.432048082 CEST	1.1.1.1	192.168.2.7	0x6d5	Name error (3)	secure.unither.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.462229013 CEST	1.1.1.1	192.168.2.7	0xa6	Server failure (2)	mail.martys.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.463090897 CEST	1.1.1.1	192.168.2.7	0xa6	Server failure (2)	mail.martys.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.466666937 CEST	1.1.1.1	192.168.2.7	0x473f	Name error (3)	securesmtp.sanshin.co.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.525777102 CEST	1.1.1.1	192.168.2.7	0x9a65	Name error (3)	urbanusroad.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.533205986 CEST	1.1.1.1	192.168.2.7	0xbae6	Name error (3)	out.gitc.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.547821045 CEST	1.1.1.1	192.168.2.7	0x3c11	No error (0)	infotectecnologia.com.br		191.252.83.189	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.639780998 CEST	1.1.1.1	192.168.2.7	0xa7dd	No error (0)	smtp.bluetel.co.za		154.0.173.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.696949005 CEST	1.1.1.1	192.168.2.7	0x2683	Name error (3)	secure.amerique.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.698035955 CEST	1.1.1.1	192.168.2.7	0x2733	Name error (3)	smtp.trutta.f9.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.741686106 CEST	1.1.1.1	192.168.2.7	0xec1f	No error (0)	mail.softlogic.lk		220.247.203.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.741700888 CEST	1.1.1.1	192.168.2.7	0xec1f	No error (0)	mail.softlogic.lk		220.247.203.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.741714001 CEST	1.1.1.1	192.168.2.7	0xec1f	No error (0)	mail.softlogic.lk		220.247.203.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.803957939 CEST	1.1.1.1	192.168.2.7	0xae63	No error (0)	aguiafix.com.br		169.57.141.94	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.808696032 CEST	1.1.1.1	192.168.2.7	0xf8a8	No error (0)	secure.greenfinch.com		52.28.82.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.886195898 CEST	1.1.1.1	192.168.2.7	0xc182	Name error (3)	securesmtp.asgatech.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.896888971 CEST	1.1.1.1	192.168.2.7	0x6760	Name error (3)	smtp.sherkhen.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.953423023 CEST	1.1.1.1	192.168.2.7	0x3aa1	Name error (3)	out.caledonian.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:07.966773033 CEST	1.1.1.1	192.168.2.7	0x73a2	Server failure (2)	costa.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.012439013 CEST	1.1.1.1	192.168.2.7	0xea6b	Name error (3)	itelefonica.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.014755011 CEST	1.1.1.1	192.168.2.7	0xff75	Name error (3)	securesmtp.stmmediastore.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.017725945 CEST	1.1.1.1	192.168.2.7	0x9cc5	No error (0)	avks.in		103.14.122.124	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.033176899 CEST	1.1.1.1	192.168.2.7	0x85ee	No error (0)	out.fmailxc.com.com		44.231.68.41	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.033176899 CEST	1.1.1.1	192.168.2.7	0x85ee	No error (0)	out.fmailxc.com.com		54.148.136.8	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.033176899 CEST	1.1.1.1	192.168.2.7	0x85ee	No error (0)	out.fmailxc.com.com		52.88.78.121	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.033176899 CEST	1.1.1.1	192.168.2.7	0x85ee	No error (0)	out.fmailxc.com.com		44.225.224.62	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.035134077 CEST	1.1.1.1	192.168.2.7	0xfd80	Name error (3)	secure.thelabarber.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.044051886 CEST	1.1.1.1	192.168.2.7	0x23e3	Name error (3)	mail.ziragold.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.078950882 CEST	1.1.1.1	192.168.2.7	0x4567	No error (0)	mail.bann.com.br	pop.bann.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:08.078950882 CEST	1.1.1.1	192.168.2.7	0x4567	No error (0)	pop.bann.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:08.078950882 CEST	1.1.1.1	192.168.2.7	0x4567	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.159598112 CEST	1.1.1.1	192.168.2.7	0xc0b0	Name error (3)	secure.duede.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.200505018 CEST	1.1.1.1	192.168.2.7	0xc8f6	Name error (3)	securesmtp.kenwood.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.202837944 CEST	1.1.1.1	192.168.2.7	0x58e	Name error (3)	smtp.kbiinc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.252299070 CEST	1.1.1.1	192.168.2.7	0x28f0	Name error (3)	securesmtp.lpajc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.252321005 CEST	1.1.1.1	192.168.2.7	0x28f0	Name error (3)	securesmtp.lpajc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.269690037 CEST	1.1.1.1	192.168.2.7	0x253	No error (0)	mail.ppp.de		193.141.101.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.292124987 CEST	1.1.1.1	192.168.2.7	0x2edc	Name error (3)	securesmtp.bmwnet.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.341193914 CEST	1.1.1.1	192.168.2.7	0xb132	No error (0)	mail.hipermateriais.com.br	pop.hipermateriais.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:08.341193914 CEST	1.1.1.1	192.168.2.7	0xb132	No error (0)	pop.hipermateriais.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:08.341193914 CEST	1.1.1.1	192.168.2.7	0xb132	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.376159906 CEST	1.1.1.1	192.168.2.7	0xe15c	Name error (3)	secure.organiccounty.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.376796961 CEST	1.1.1.1	192.168.2.7	0x14cd	Name error (3)	out.fiorentinimoveis.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.432027102 CEST	1.1.1.1	192.168.2.7	0xae1f	No error (0)	mail.beauty-depot.ca		51.161.115.217	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.434717894 CEST	1.1.1.1	192.168.2.7	0x3d0b	No error (0)	smtp.grupomil.com.br	smtp-cluster.idc2.mandic.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:08.434717894 CEST	1.1.1.1	192.168.2.7	0x3d0b	No error (0)	smtp-cluster.idc2.mandic.com.br		177.70.110.120	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.492130995 CEST	1.1.1.1	192.168.2.7	0xab2	Name error (3)	out.dmt.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.528364897 CEST	1.1.1.1	192.168.2.7	0xd69d	No error (0)	mail.computeraffare.com		89.31.72.17	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.547483921 CEST	1.1.1.1	192.168.2.7	0x8dae	No error (0)	mail.vemilac.com.tr	mx-out03.natrohost.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:08.547483921 CEST	1.1.1.1	192.168.2.7	0x8dae	No error (0)	mx-out03.natrohost.com		94.73.188.24	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.567318916 CEST	1.1.1.1	192.168.2.7	0x8ccf	Name error (3)	smtp.baamrecscsonsulting.co.tz	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.619195938 CEST	1.1.1.1	192.168.2.7	0x66b	No error (0)	mail2.mail-vert.fr		141.94.139.121	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.644886971 CEST	1.1.1.1	192.168.2.7	0x264	Name error (3)	smtp.muench-hahn.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.645704031 CEST	1.1.1.1	192.168.2.7	0x781c	Name error (3)	smtp.umoncton.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.757878065 CEST	1.1.1.1	192.168.2.7	0x50b	No error (0)	out.dogrelation.com		185.53.179.171	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.810507059 CEST	1.1.1.1	192.168.2.7	0x6420	Name error (3)	secure.yamouni.id.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.865817070 CEST	1.1.1.1	192.168.2.7	0xe4d5	No error (0)	fake.uber.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.954993963 CEST	1.1.1.1	192.168.2.7	0xa7e7	No error (0)	secure.skynet.us		209.17.116.165	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.988655090 CEST	1.1.1.1	192.168.2.7	0x7e9	Name error (3)	mail.sportlounge.info	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:08.991163015 CEST	1.1.1.1	192.168.2.7	0x736f	No error (0)	mail.topsconsultants.com		148.66.138.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.027496099 CEST	1.1.1.1	192.168.2.7	0x459d	No error (0)	multistateinsurance.com		108.157.188.59	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.027496099 CEST	1.1.1.1	192.168.2.7	0x459d	No error (0)	multistateinsurance.com		108.157.188.56	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.027496099 CEST	1.1.1.1	192.168.2.7	0x459d	No error (0)	multistateinsurance.com		108.157.188.52	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.027496099 CEST	1.1.1.1	192.168.2.7	0x459d	No error (0)	multistateinsurance.com		108.157.188.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.119092941 CEST	1.1.1.1	192.168.2.7	0xc36b	Name error (3)	smtp.hargreavesphotography.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.122006893 CEST	1.1.1.1	192.168.2.7	0xff7f	Name error (3)	smtp.wessel-3d.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.122786999 CEST	1.1.1.1	192.168.2.7	0x300f	No error (0)	mail.tigress.com		85.199.154.53	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.150803089 CEST	1.1.1.1	192.168.2.7	0x82fd	Name error (3)	mail.ofenschulte.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.198946953 CEST	1.1.1.1	192.168.2.7	0x3df	No error (0)	grupogoldlinks.com.br		162.214.69.45	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.237185001 CEST	1.1.1.1	192.168.2.7	0x7441	Name error (3)	securesmtp.e-structures.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.264961958 CEST	1.1.1.1	192.168.2.7	0x1307	No error (0)	mail.raytek.co.uk		85.233.160.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.449126005 CEST	1.1.1.1	192.168.2.7	0x59a	No error (0)	securesmtp.byggledarna.com		46.30.213.160	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.545129061 CEST	1.1.1.1	192.168.2.7	0xe322	Name error (3)	secure.ifollowing.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.580053091 CEST	1.1.1.1	192.168.2.7	0x8c95	No error (0)	pergolaland.com.au		103.242.49.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.580080032 CEST	1.1.1.1	192.168.2.7	0x8c95	No error (0)	pergolaland.com.au		103.242.49.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.590248108 CEST	1.1.1.1	192.168.2.7	0xfb9f	No error (0)	mail.vanguardpartnership.com	ghs.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:09.590248108 CEST	1.1.1.1	192.168.2.7	0xfb9f	No error (0)	ghs.google.com		216.58.206.83	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.599427938 CEST	1.1.1.1	192.168.2.7	0x2e6b	No error (0)	mx0b-0025eb03.pphosted.com		148.163.153.35	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.605895996 CEST	1.1.1.1	192.168.2.7	0x29a	No error (0)	sussexpartnership.nhs.uk		45.157.40.214	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.678719044 CEST	1.1.1.1	192.168.2.7	0xedae	No error (0)	romanus.it		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.722429991 CEST	1.1.1.1	192.168.2.7	0xf28a	No error (0)	europosteferrandina.it		62.149.128.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.722429991 CEST	1.1.1.1	192.168.2.7	0xf28a	No error (0)	europosteferrandina.it		62.149.128.157	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.722429991 CEST	1.1.1.1	192.168.2.7	0xf28a	No error (0)	europosteferrandina.it		62.149.128.160	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.722429991 CEST	1.1.1.1	192.168.2.7	0xf28a	No error (0)	europosteferrandina.it		62.149.128.151	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.722429991 CEST	1.1.1.1	192.168.2.7	0xf28a	No error (0)	europosteferrandina.it		62.149.128.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.722429991 CEST	1.1.1.1	192.168.2.7	0xf28a	No error (0)	europosteferrandina.it		62.149.128.166	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.868316889 CEST	1.1.1.1	192.168.2.7	0x645f	Name error (3)	out.potschadel.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.874587059 CEST	1.1.1.1	192.168.2.7	0x53ce	Name error (3)	smtp.killfreetimes.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.879530907 CEST	1.1.1.1	192.168.2.7	0x54fc	Name error (3)	smtp.eastc365.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:09.977500916 CEST	1.1.1.1	192.168.2.7	0xc4e6	Name error (3)	out.thomas-schoedl.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.058773994 CEST	1.1.1.1	192.168.2.7	0xbd59	No error (0)	smtp.thinktank.uk		35.243.228.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.095664024 CEST	1.1.1.1	192.168.2.7	0xb602	No error (0)	pfeiffer-koberstein-immobilien.de		81.169.196.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.097625971 CEST	1.1.1.1	192.168.2.7	0x112b	Name error (3)	out.mybce.catholic.ede	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.118731022 CEST	1.1.1.1	192.168.2.7	0x652b	Name error (3)	smtp.trako.arch.rwth-aachen.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.192672968 CEST	1.1.1.1	192.168.2.7	0x1def	Name error (3)	smtp.agate.plala.or.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.218586922 CEST	1.1.1.1	192.168.2.7	0x739d	No error (0)	mikestuart.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.218586922 CEST	1.1.1.1	192.168.2.7	0x739d	No error (0)	mikestuart.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.269088030 CEST	1.1.1.1	192.168.2.7	0x4ecd	No error (0)	smtp.mgm-trading.com		66.96.160.129	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.281555891 CEST	1.1.1.1	192.168.2.7	0xfcb3	Name error (3)	out.displayd.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.334343910 CEST	1.1.1.1	192.168.2.7	0x2e25	Name error (3)	out.super-bijin.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.404603958 CEST	1.1.1.1	192.168.2.7	0x602a	No error (0)	out.iversen.be		77.111.240.49	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699043989 CEST	1.1.1.1	192.168.2.7	0x104a	No error (0)	mx2.ua.fm		185.187.81.214	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699135065 CEST	1.1.1.1	192.168.2.7	0xbc00	Name error (3)	smtp.bridgoconstructiongroup.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699234009 CEST	1.1.1.1	192.168.2.7	0x3834	No error (0)	rg-moe-gov-sa.mail.protection.outlook.com		52.101.68.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699234009 CEST	1.1.1.1	192.168.2.7	0x3834	No error (0)	rg-moe-gov-sa.mail.protection.outlook.com		52.101.68.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699234009 CEST	1.1.1.1	192.168.2.7	0x3834	No error (0)	rg-moe-gov-sa.mail.protection.outlook.com		52.101.73.8	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699234009 CEST	1.1.1.1	192.168.2.7	0x3834	No error (0)	rg-moe-gov-sa.mail.protection.outlook.com		52.101.73.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699304104 CEST	1.1.1.1	192.168.2.7	0xbb4d	No error (0)	takeuchi-const.co.jp		202.74.17.97	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699498892 CEST	1.1.1.1	192.168.2.7	0x2cbd	Server failure (2)	out.bpkpenabur.sch.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699666023 CEST	1.1.1.1	192.168.2.7	0xd669	No error (0)	mail.ciadotreinamento.com.br	pop.ciadotreinamento.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699666023 CEST	1.1.1.1	192.168.2.7	0xd669	No error (0)	pop.ciadotreinamento.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699666023 CEST	1.1.1.1	192.168.2.7	0xd669	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.699676037 CEST	1.1.1.1	192.168.2.7	0x85d8	No error (0)	birdville.k12.tx.us		52.206.191.232	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.702693939 CEST	1.1.1.1	192.168.2.7	0xbb4d	No error (0)	takeuchi-const.co.jp		202.74.17.97	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.712584019 CEST	1.1.1.1	192.168.2.7	0x51fc	No error (0)	mx2.ovh.net		87.98.132.45	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.743597984 CEST	1.1.1.1	192.168.2.7	0x6cc	No error (0)	smtp.bggd.de		89.200.170.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.873855114 CEST	1.1.1.1	192.168.2.7	0x2478	No error (0)	ntlp.org.uk		149.255.63.186	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.904798031 CEST	1.1.1.1	192.168.2.7	0xc6d6	Name error (3)	smtp.highservers.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.912801027 CEST	1.1.1.1	192.168.2.7	0x4d3	No error (0)	securesmtp.clear-line.co.uk		46.30.213.41	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.917475939 CEST	1.1.1.1	192.168.2.7	0xcaa2	No error (0)	spareservice.gr		62.1.212.34	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.933501959 CEST	1.1.1.1	192.168.2.7	0x4242	No error (0)	mx.fkksol.com		104.131.176.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.970295906 CEST	1.1.1.1	192.168.2.7	0xfbba	Name error (3)	email.tst	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:10.975904942 CEST	1.1.1.1	192.168.2.7	0xabb8	No error (0)	mail.girauds.co.uk		92.204.223.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.004434109 CEST	1.1.1.1	192.168.2.7	0x6b53	Name error (3)	mail.expertasset.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.004936934 CEST	1.1.1.1	192.168.2.7	0x51a8	No error (0)	mail.bus.nl		185.239.61.100	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.012913942 CEST	1.1.1.1	192.168.2.7	0x6856	No error (0)	smtp.m-pe.tv	m-pe.tv		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:11.012913942 CEST	1.1.1.1	192.168.2.7	0x6856	No error (0)	m-pe.tv		202.144.225.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.022893906 CEST	1.1.1.1	192.168.2.7	0x8d0e	No error (0)	ricco.com.br		108.179.241.240	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.067086935 CEST	1.1.1.1	192.168.2.7	0x10	Name error (3)	mail.before.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.090985060 CEST	1.1.1.1	192.168.2.7	0x1fd3	Name error (3)	secure.ct.tonitza	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.097866058 CEST	1.1.1.1	192.168.2.7	0xc152	No error (0)	marinette.wi.us		207.38.73.176	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.204565048 CEST	1.1.1.1	192.168.2.7	0xd8d9	Name error (3)	smtp.365assist.my	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.204963923 CEST	1.1.1.1	192.168.2.7	0x6831	Name error (3)	smtp.carmel.lib.in.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.238451004 CEST	1.1.1.1	192.168.2.7	0x8d78	No error (0)	smtp.imaginet.co.za		41.78.29.16	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.357109070 CEST	1.1.1.1	192.168.2.7	0x6d15	Name error (3)	smtp.mmwcivil.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.382412910 CEST	1.1.1.1	192.168.2.7	0x9df	No error (0)	coninnovar.com.mx		185.230.63.186	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.382412910 CEST	1.1.1.1	192.168.2.7	0x9df	No error (0)	coninnovar.com.mx		185.230.63.107	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.382412910 CEST	1.1.1.1	192.168.2.7	0x9df	No error (0)	coninnovar.com.mx		185.230.63.171	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.461396933 CEST	1.1.1.1	192.168.2.7	0x289f	No error (0)	bluebasis.de		195.201.162.196	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.463599920 CEST	1.1.1.1	192.168.2.7	0x2d23	Name error (3)	mail.fkogjg.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.497608900 CEST	1.1.1.1	192.168.2.7	0xf84	No error (0)	limocars.pl		188.128.255.251	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.582462072 CEST	1.1.1.1	192.168.2.7	0xf8df	No error (0)	danielsreservices.com		160.153.0.87	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.583965063 CEST	1.1.1.1	192.168.2.7	0x99ee	No error (0)	berger-kamine.de		217.160.0.219	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.590643883 CEST	1.1.1.1	192.168.2.7	0x75b2	Name error (3)	mail.space282.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.695998907 CEST	1.1.1.1	192.168.2.7	0x2437	Server failure (2)	mail.riverwood.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.712100983 CEST	1.1.1.1	192.168.2.7	0x702	Name error (3)	mail.workcover.vic.gov.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.716675043 CEST	1.1.1.1	192.168.2.7	0xce58	Name error (3)	out.jerichoapps.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.760700941 CEST	1.1.1.1	192.168.2.7	0x2d0e	Name error (3)	out.tke.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.769977093 CEST	1.1.1.1	192.168.2.7	0x8fa3	Name error (3)	mail.catcha.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.960654020 CEST	1.1.1.1	192.168.2.7	0xc175	Name error (3)	secure.lemur.demon.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.969808102 CEST	1.1.1.1	192.168.2.7	0xbe75	Name error (3)	mail.alvicreativemarketinghub.co.ke	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:11.975464106 CEST	1.1.1.1	192.168.2.7	0xcedb	No error (0)	alternativeheat.co.uk		85.92.73.67	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.077609062 CEST	1.1.1.1	192.168.2.7	0x5a2	Name error (3)	out.dieberatungsakademie.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.088109970 CEST	1.1.1.1	192.168.2.7	0xbfa8	No error (0)	mail.bluepowertechnology.com	ghs.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:12.088109970 CEST	1.1.1.1	192.168.2.7	0xbfa8	No error (0)	ghs.google.com		142.250.186.115	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.119988918 CEST	1.1.1.1	192.168.2.7	0xc65b	No error (0)	smtp.fin-echiquier.fr	webredir.vip.gandi.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:12.119988918 CEST	1.1.1.1	192.168.2.7	0xc65b	No error (0)	webredir.vip.gandi.net		217.70.184.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.166038036 CEST	1.1.1.1	192.168.2.7	0x9cf9	No error (0)	smtp.centurylink.net	mail.centurylink.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:12.166038036 CEST	1.1.1.1	192.168.2.7	0x9cf9	No error (0)	mail.centurylink.net	lumen.pangia.biz		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:12.166038036 CEST	1.1.1.1	192.168.2.7	0x9cf9	No error (0)	lumen.pangia.biz		209.67.129.100	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.224272013 CEST	1.1.1.1	192.168.2.7	0x7993	Name error (3)	smtp.pakn.hyogo-c.ed.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.224313974 CEST	1.1.1.1	192.168.2.7	0x7993	Name error (3)	smtp.pakn.hyogo-c.ed.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.348438025 CEST	1.1.1.1	192.168.2.7	0xfc82	No error (0)	vit.fr		109.234.164.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.369714022 CEST	1.1.1.1	192.168.2.7	0x207e	No error (0)	secure.casablanca.com		34.206.39.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.376949072 CEST	1.1.1.1	192.168.2.7	0x65f9	No error (0)	smtp.swissonline.ch	smtp.hispeed.ch		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:12.376949072 CEST	1.1.1.1	192.168.2.7	0x65f9	No error (0)	smtp.hispeed.ch	smtp-hispeed-ch.cname.unified.services		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:12.376949072 CEST	1.1.1.1	192.168.2.7	0x65f9	No error (0)	smtp-hispeed-ch.cname.unified.services		94.169.2.19	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.440320969 CEST	1.1.1.1	192.168.2.7	0x8a63	Name error (3)	securesmtp.divaportal.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.464199066 CEST	1.1.1.1	192.168.2.7	0x32a	No error (0)	recruitingsolutionsonline.com		35.212.102.91	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.518779039 CEST	1.1.1.1	192.168.2.7	0xa090	No error (0)	kbn.ac.th		119.59.120.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.560477018 CEST	1.1.1.1	192.168.2.7	0x18ac	No error (0)	d154910b.ess.barracudanetworks.COM		209.222.82.252	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.560477018 CEST	1.1.1.1	192.168.2.7	0x18ac	No error (0)	d154910b.ess.barracudanetworks.COM		209.222.82.253	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.560477018 CEST	1.1.1.1	192.168.2.7	0x18ac	No error (0)	d154910b.ess.barracudanetworks.COM		209.222.82.255	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.574641943 CEST	1.1.1.1	192.168.2.7	0xe8e1	Name error (3)	smtp.malvasul.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.651705980 CEST	1.1.1.1	192.168.2.7	0xb891	Name error (3)	securesmtp.datasinc.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.702765942 CEST	1.1.1.1	192.168.2.7	0x92d	Name error (3)	out.kolort.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.820784092 CEST	1.1.1.1	192.168.2.7	0x41bb	Name error (3)	out.languageinspired.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.822416067 CEST	1.1.1.1	192.168.2.7	0x27ce	Name error (3)	smtp.clickthai.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.932267904 CEST	1.1.1.1	192.168.2.7	0x52c	No error (0)	mx1.agenturserver.de		185.15.192.56	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.946784019 CEST	1.1.1.1	192.168.2.7	0xc7e2	No error (0)	marylandsigndesign.com		107.180.9.193	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:12.964901924 CEST	1.1.1.1	192.168.2.7	0xe80	Name error (3)	itelefonica.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.005300999 CEST	1.1.1.1	192.168.2.7	0xb95	Name error (3)	securesmtp.luluimmobiliare.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.026772976 CEST	1.1.1.1	192.168.2.7	0xf2f1	No error (0)	sympatico.ca		199.85.66.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.042231083 CEST	1.1.1.1	192.168.2.7	0x79c4	Name error (3)	agtes-nl.mail.protection.outlook.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.049190044 CEST	1.1.1.1	192.168.2.7	0x9160	No error (0)	mail.expertcontabil.com.br	emailssl-vip.kinghost.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:13.049190044 CEST	1.1.1.1	192.168.2.7	0x9160	No error (0)	emailssl-vip.kinghost.net		191.6.216.63	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.049190044 CEST	1.1.1.1	192.168.2.7	0x9160	No error (0)	emailssl-vip.kinghost.net		191.6.216.83	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.059459925 CEST	1.1.1.1	192.168.2.7	0x7be9	Name error (3)	secure.jed.btc.com.sa	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.145476103 CEST	1.1.1.1	192.168.2.7	0x4a05	Name error (3)	smtp.mscdirect.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	mail.infologygroup.com	pop.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.secureserver.net	pop.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.vox.secureserver.net	pop.us-phx.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.117	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.97	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.240	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.246	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.247	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.206852913 CEST	1.1.1.1	192.168.2.7	0xf347	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.210246086 CEST	1.1.1.1	192.168.2.7	0xe2f6	No error (0)	smtp.shaw.ca	shawmail.glb.shawcable.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:13.210246086 CEST	1.1.1.1	192.168.2.7	0xe2f6	No error (0)	shawmail.glb.shawcable.net		64.59.136.142	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.210246086 CEST	1.1.1.1	192.168.2.7	0xe2f6	No error (0)	shawmail.glb.shawcable.net		64.59.128.135	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.210855961 CEST	1.1.1.1	192.168.2.7	0x3439	Name error (3)	securesmtp.beautyandslim.hu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.223731041 CEST	1.1.1.1	192.168.2.7	0xc3dd	Server failure (2)	secure.wellant.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.245189905 CEST	1.1.1.1	192.168.2.7	0x7fc2	No error (0)	mx.gcdetectivefree.com		104.131.176.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.293693066 CEST	1.1.1.1	192.168.2.7	0x181f	Name error (3)	darrenellett.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.318187952 CEST	1.1.1.1	192.168.2.7	0x7fff	Name error (3)	secure.callofdead.de.vu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.329091072 CEST	1.1.1.1	192.168.2.7	0xe4f	Name error (3)	securesmtp.bmwnet.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.355758905 CEST	1.1.1.1	192.168.2.7	0x17a4	No error (0)	tiscalinet.it		213.205.32.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.358692884 CEST	1.1.1.1	192.168.2.7	0x9e58	Name error (3)	out.ynu.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.358774900 CEST	1.1.1.1	192.168.2.7	0x9e58	Name error (3)	out.ynu.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.367779970 CEST	1.1.1.1	192.168.2.7	0xc9fb	No error (0)	smtp.webail.de		103.224.182.245	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.421310902 CEST	1.1.1.1	192.168.2.7	0xfa15	No error (0)	yaho.com		76.223.84.192	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.421310902 CEST	1.1.1.1	192.168.2.7	0xfa15	No error (0)	yaho.com		13.248.158.7	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.570251942 CEST	1.1.1.1	192.168.2.7	0xbd44	No error (0)	grocommunity.org		74.208.236.128	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.635454893 CEST	1.1.1.1	192.168.2.7	0x4413	No error (0)	atadadeamorexpress.com.ar		181.88.192.179	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.666542053 CEST	1.1.1.1	192.168.2.7	0x7ef4	No error (0)	curanow.com		72.52.192.241	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.676470041 CEST	1.1.1.1	192.168.2.7	0x14a6	No error (0)	mail.arug.de		188.40.28.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.688167095 CEST	1.1.1.1	192.168.2.7	0x3d36	Name error (3)	secure.navitoil.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.717427015 CEST	1.1.1.1	192.168.2.7	0x9bf1	Name error (3)	smtp.riogd.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.792574883 CEST	1.1.1.1	192.168.2.7	0x1159	Name error (3)	promokings.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.822635889 CEST	1.1.1.1	192.168.2.7	0xf169	Name error (3)	mail.trunjoyo.ac.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.887751102 CEST	1.1.1.1	192.168.2.7	0x9a4	No error (0)	checkersfs.co.za		52.218.101.196	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.887751102 CEST	1.1.1.1	192.168.2.7	0x9a4	No error (0)	checkersfs.co.za		52.218.1.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.887751102 CEST	1.1.1.1	192.168.2.7	0x9a4	No error (0)	checkersfs.co.za		52.92.2.244	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.887751102 CEST	1.1.1.1	192.168.2.7	0x9a4	No error (0)	checkersfs.co.za		52.218.90.164	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.887751102 CEST	1.1.1.1	192.168.2.7	0x9a4	No error (0)	checkersfs.co.za		52.92.19.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.887751102 CEST	1.1.1.1	192.168.2.7	0x9a4	No error (0)	checkersfs.co.za		52.218.105.84	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.887751102 CEST	1.1.1.1	192.168.2.7	0x9a4	No error (0)	checkersfs.co.za		52.218.37.77	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.887751102 CEST	1.1.1.1	192.168.2.7	0x9a4	No error (0)	checkersfs.co.za		52.218.56.52	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.909157991 CEST	1.1.1.1	192.168.2.7	0x1f30	No error (0)	fges.com.br		186.202.149.252	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:13.927580118 CEST	1.1.1.1	192.168.2.7	0xb63f	Name error (3)	destiny-production.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.027209044 CEST	1.1.1.1	192.168.2.7	0x3675	Name error (3)	smtp.vouk.ml	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.051568031 CEST	1.1.1.1	192.168.2.7	0xf62c	Name error (3)	secure.intercup.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.056852102 CEST	1.1.1.1	192.168.2.7	0x33f7	Name error (3)	secure.ophrdc.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.068192005 CEST	1.1.1.1	192.168.2.7	0x399b	Name error (3)	securesmtp.uphaminc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.172194958 CEST	1.1.1.1	192.168.2.7	0x53b6	No error (0)	smtp.eerstenatuur.nl		85.10.159.111	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.177757978 CEST	1.1.1.1	192.168.2.7	0x7e5f	Name error (3)	securesmtp.pagvip.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.184339046 CEST	1.1.1.1	192.168.2.7	0xb00e	No error (0)	telkomsa.net		105.224.1.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.188656092 CEST	1.1.1.1	192.168.2.7	0x6aef	Name error (3)	secure.agilesphere.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.270831108 CEST	1.1.1.1	192.168.2.7	0xb77e	Name error (3)	out.emeritus.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.274899960 CEST	1.1.1.1	192.168.2.7	0x262	Name error (3)	securesmtp.londonderryapps.og	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.283982038 CEST	1.1.1.1	192.168.2.7	0x3c8d	Name error (3)	secure.schuettguthandel.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.420392990 CEST	1.1.1.1	192.168.2.7	0x3a2e	No error (0)	smtp.tic.ch		194.191.24.193	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.477644920 CEST	1.1.1.1	192.168.2.7	0xb0a7	No error (0)	securesmtp.lifestyleclinic.com.au		103.224.182.246	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.520664930 CEST	1.1.1.1	192.168.2.7	0x7c7a	Name error (3)	smtp.ah-shoulder.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.551367044 CEST	1.1.1.1	192.168.2.7	0xd2f2	Name error (3)	smtp.omestad.no	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.818496943 CEST	1.1.1.1	192.168.2.7	0x8688	No error (0)	secure.autostorm.de		64.190.63.222	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.818897009 CEST	1.1.1.1	192.168.2.7	0x5789	Server failure (2)	secure.ccl.co.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.832838058 CEST	1.1.1.1	192.168.2.7	0x6e0d	Name error (3)	secure.9f2f44fac5.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.849587917 CEST	1.1.1.1	192.168.2.7	0xd592	No error (0)	stuewer-de.mail.protection.outlook.com		52.101.68.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.849587917 CEST	1.1.1.1	192.168.2.7	0xd592	No error (0)	stuewer-de.mail.protection.outlook.com		52.101.73.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.849587917 CEST	1.1.1.1	192.168.2.7	0xd592	No error (0)	stuewer-de.mail.protection.outlook.com		52.101.68.32	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.849587917 CEST	1.1.1.1	192.168.2.7	0xd592	No error (0)	stuewer-de.mail.protection.outlook.com		52.101.73.19	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.857929945 CEST	1.1.1.1	192.168.2.7	0x44a3	Name error (3)	secure.sjb-liege.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.861917973 CEST	1.1.1.1	192.168.2.7	0xd9ce	No error (0)	albionsystems.co.uk		62.233.121.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.885484934 CEST	1.1.1.1	192.168.2.7	0x1346	Name error (3)	out.aidasrl.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.886554003 CEST	1.1.1.1	192.168.2.7	0xdfa4	No error (0)	temix.it		195.110.124.188	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:14.946593046 CEST	1.1.1.1	192.168.2.7	0x92bf	No error (0)	teylingen-college.nl		94.237.125.89	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.059185982 CEST	1.1.1.1	192.168.2.7	0xb57	No error (0)	br.jarvis2030.com.br		177.154.191.212	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.106838942 CEST	1.1.1.1	192.168.2.7	0x6a97	Name error (3)	mail.vestbykommune.no	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.122941017 CEST	1.1.1.1	192.168.2.7	0xcc84	Name error (3)	mail.beertech.ind.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.146784067 CEST	1.1.1.1	192.168.2.7	0x4689	Server failure (2)	smtp.unimedvaledoaco.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.147488117 CEST	1.1.1.1	192.168.2.7	0x4689	Server failure (2)	smtp.unimedvaledoaco.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.147543907 CEST	1.1.1.1	192.168.2.7	0x4689	Server failure (2)	smtp.unimedvaledoaco.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.147574902 CEST	1.1.1.1	192.168.2.7	0x4689	Server failure (2)	smtp.unimedvaledoaco.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.165354013 CEST	1.1.1.1	192.168.2.7	0xc2e7	Name error (3)	out.taylorcountyschools.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.169706106 CEST	1.1.1.1	192.168.2.7	0xca7a	No error (0)	hi-precision.com.ph		23.236.62.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.169756889 CEST	1.1.1.1	192.168.2.7	0xca7a	No error (0)	hi-precision.com.ph		23.236.62.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.171473980 CEST	1.1.1.1	192.168.2.7	0x4eb0	No error (0)	taxkey.in		68.178.145.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.192058086 CEST	1.1.1.1	192.168.2.7	0xb419	No error (0)	mail.ametuniv.ac.in	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:15.192058086 CEST	1.1.1.1	192.168.2.7	0xb419	No error (0)	ghs.googlehosted.com		142.250.185.243	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.292893887 CEST	1.1.1.1	192.168.2.7	0x535	Name error (3)	mail.wamanager.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.453699112 CEST	1.1.1.1	192.168.2.7	0x6682	Name error (3)	out.eastc365.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.460036993 CEST	1.1.1.1	192.168.2.7	0xd1ce	Name error (3)	smtp.stu.jefferson.kyschools.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.498233080 CEST	1.1.1.1	192.168.2.7	0x6415	No error (0)	dgls.it		31.11.35.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.506174088 CEST	1.1.1.1	192.168.2.7	0x79d6	Name error (3)	mail.abacho.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.536679029 CEST	1.1.1.1	192.168.2.7	0xb59a	No error (0)	mx.a.locaweb.com.br		186.202.4.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.543075085 CEST	1.1.1.1	192.168.2.7	0xf484	Name error (3)	mail.debreteuil.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.544127941 CEST	1.1.1.1	192.168.2.7	0x9814	No error (0)	mx.ertemaik.com		104.131.176.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.653619051 CEST	1.1.1.1	192.168.2.7	0x44ad	No error (0)	mx1.ingep.com		200.58.122.206	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.795387030 CEST	1.1.1.1	192.168.2.7	0x8a85	No error (0)	securesmtp.ejpaxton.com		77.111.240.122	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.812520027 CEST	1.1.1.1	192.168.2.7	0xafe6	No error (0)	out.karakus.de		216.40.34.37	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.832487106 CEST	1.1.1.1	192.168.2.7	0x4554	No error (0)	mixed.co.th		27.254.85.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.832514048 CEST	1.1.1.1	192.168.2.7	0x4554	No error (0)	mixed.co.th		27.254.85.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.839394093 CEST	1.1.1.1	192.168.2.7	0x3db1	No error (0)	friolog.it		195.110.124.188	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.898962975 CEST	1.1.1.1	192.168.2.7	0x5ca6	No error (0)	smtp.a1.net		80.75.42.226	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.900232077 CEST	1.1.1.1	192.168.2.7	0x4ab9	No error (0)	mx2.mail.ovh.net		87.98.160.167	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910094023 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.41.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910094023 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.9.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910094023 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910094023 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.194.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910094023 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.8.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910094023 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.40.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910094023 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910135984 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.41.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910135984 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.9.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910135984 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910135984 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.194.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910135984 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.8.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910135984 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.40.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.910135984 CEST	1.1.1.1	192.168.2.7	0xea40	No error (0)	cdhu-sp-gov-br.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.912494898 CEST	1.1.1.1	192.168.2.7	0xa2be	Name error (3)	smtp.friendzzzz.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.934396982 CEST	1.1.1.1	192.168.2.7	0x2a4a	Name error (3)	securesmtp.watermaker.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.969660044 CEST	1.1.1.1	192.168.2.7	0x689a	No error (0)	smtp.hi-ho.ne.jp	mbox.mose-mail.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:15.969660044 CEST	1.1.1.1	192.168.2.7	0x689a	No error (0)	mbox.mose-mail.jp		210.130.202.4	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.969660044 CEST	1.1.1.1	192.168.2.7	0x689a	No error (0)	mbox.mose-mail.jp		210.130.202.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.969671965 CEST	1.1.1.1	192.168.2.7	0x689a	No error (0)	smtp.hi-ho.ne.jp	mbox.mose-mail.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:15.969671965 CEST	1.1.1.1	192.168.2.7	0x689a	No error (0)	mbox.mose-mail.jp		210.130.202.4	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:15.969671965 CEST	1.1.1.1	192.168.2.7	0x689a	No error (0)	mbox.mose-mail.jp		210.130.202.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.066725969 CEST	1.1.1.1	192.168.2.7	0x1f68	Name error (3)	smtp.groupamapj.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.071171045 CEST	1.1.1.1	192.168.2.7	0xd25d	No error (0)	acosystems.in		88.198.198.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.071171045 CEST	1.1.1.1	192.168.2.7	0xd25d	No error (0)	acosystems.in		108.61.75.246	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.071171045 CEST	1.1.1.1	192.168.2.7	0xd25d	No error (0)	acosystems.in		116.202.8.114	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.071171045 CEST	1.1.1.1	192.168.2.7	0xd25d	No error (0)	acosystems.in		209.250.240.95	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.097966909 CEST	1.1.1.1	192.168.2.7	0xa86e	Name error (3)	secure.netsite.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.165940046 CEST	1.1.1.1	192.168.2.7	0xb69	Name error (3)	securesmtp.dljialin.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.174499989 CEST	1.1.1.1	192.168.2.7	0x8d79	No error (0)	mx.generic-isp.com		142.93.237.125	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.185302973 CEST	1.1.1.1	192.168.2.7	0x7c4d	No error (0)	walla.com		143.204.98.119	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.185302973 CEST	1.1.1.1	192.168.2.7	0x7c4d	No error (0)	walla.com		143.204.98.45	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.185302973 CEST	1.1.1.1	192.168.2.7	0x7c4d	No error (0)	walla.com		143.204.98.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.185302973 CEST	1.1.1.1	192.168.2.7	0x7c4d	No error (0)	walla.com		143.204.98.111	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.185909986 CEST	1.1.1.1	192.168.2.7	0x67fb	Name error (3)	mail.bme-dannehl.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.303874969 CEST	1.1.1.1	192.168.2.7	0x23cb	No error (0)	mail.tvliberdadeal.com.br		192.185.177.248	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.337517023 CEST	1.1.1.1	192.168.2.7	0x56e0	Name error (3)	out.kult-medien.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.353065968 CEST	1.1.1.1	192.168.2.7	0x486d	Name error (3)	secure.cemcs.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.369771004 CEST	1.1.1.1	192.168.2.7	0x979e	Name error (3)	mail.gate6.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.441844940 CEST	1.1.1.1	192.168.2.7	0x2abd	Name error (3)	secure.trane.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.441863060 CEST	1.1.1.1	192.168.2.7	0x2abd	Name error (3)	secure.trane.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.499546051 CEST	1.1.1.1	192.168.2.7	0x7689	No error (0)	bizavmta1.netvigator.com		218.102.53.178	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.499546051 CEST	1.1.1.1	192.168.2.7	0x7689	No error (0)	bizavmta1.netvigator.com		218.102.53.181	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.499546051 CEST	1.1.1.1	192.168.2.7	0x7689	No error (0)	bizavmta1.netvigator.com		218.102.23.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.499546051 CEST	1.1.1.1	192.168.2.7	0x7689	No error (0)	bizavmta1.netvigator.com		218.102.23.37	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.499546051 CEST	1.1.1.1	192.168.2.7	0x7689	No error (0)	bizavmta1.netvigator.com		218.102.23.54	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.499546051 CEST	1.1.1.1	192.168.2.7	0x7689	No error (0)	bizavmta1.netvigator.com		218.102.23.108	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.499546051 CEST	1.1.1.1	192.168.2.7	0x7689	No error (0)	bizavmta1.netvigator.com		218.102.53.176	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.499546051 CEST	1.1.1.1	192.168.2.7	0x7689	No error (0)	bizavmta1.netvigator.com		218.102.53.177	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.509826899 CEST	1.1.1.1	192.168.2.7	0x1ba7	Name error (3)	smtp.studioviterbo.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.587225914 CEST	1.1.1.1	192.168.2.7	0x7533	No error (0)	humangest.ro		89.42.218.128	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.590697050 CEST	1.1.1.1	192.168.2.7	0x983f	Name error (3)	secure.angyy.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.602695942 CEST	1.1.1.1	192.168.2.7	0x5662	No error (0)	theparlournola-com.mail.protection.outlook.com		52.101.10.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.602695942 CEST	1.1.1.1	192.168.2.7	0x5662	No error (0)	theparlournola-com.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.602695942 CEST	1.1.1.1	192.168.2.7	0x5662	No error (0)	theparlournola-com.mail.protection.outlook.com		52.101.9.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.602695942 CEST	1.1.1.1	192.168.2.7	0x5662	No error (0)	theparlournola-com.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.602695942 CEST	1.1.1.1	192.168.2.7	0x5662	No error (0)	theparlournola-com.mail.protection.outlook.com		52.101.10.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.602695942 CEST	1.1.1.1	192.168.2.7	0x5662	No error (0)	theparlournola-com.mail.protection.outlook.com		52.101.8.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.602695942 CEST	1.1.1.1	192.168.2.7	0x5662	No error (0)	theparlournola-com.mail.protection.outlook.com		52.101.9.17	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.630594015 CEST	1.1.1.1	192.168.2.7	0x70d5	Name error (3)	mail.elcor.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.648654938 CEST	1.1.1.1	192.168.2.7	0xb778	No error (0)	ctis.com.br		200.99.40.39	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.686745882 CEST	1.1.1.1	192.168.2.7	0x9b77	No error (0)	securesmtp.oktopusgroup.com	cpanel332.turbify.biz		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:16.686745882 CEST	1.1.1.1	192.168.2.7	0x9b77	No error (0)	cpanel332.turbify.biz		34.206.130.4	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.818502903 CEST	1.1.1.1	192.168.2.7	0x7c3a	No error (0)	smtp.godtfredlarsen.com		46.30.215.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.818598986 CEST	1.1.1.1	192.168.2.7	0x7c3a	No error (0)	smtp.godtfredlarsen.com		46.30.215.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.834443092 CEST	1.1.1.1	192.168.2.7	0x5f52	Name error (3)	securesmtp.consultday.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.869887114 CEST	1.1.1.1	192.168.2.7	0xd0ae	No error (0)	mail-gateway02.imaginet.co.za		41.78.29.110	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.874269962 CEST	1.1.1.1	192.168.2.7	0xb1f5	No error (0)	justmysafety.com		199.36.158.100	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.888134003 CEST	1.1.1.1	192.168.2.7	0xb733	Name error (3)	out.grandschools.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.944593906 CEST	1.1.1.1	192.168.2.7	0xfd72	Name error (3)	mail.medantravel.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.964732885 CEST	1.1.1.1	192.168.2.7	0x539d	Name error (3)	smtp.778e2180c2.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.964884043 CEST	1.1.1.1	192.168.2.7	0x92d	No error (0)	ownme.de		92.205.160.241	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:16.976362944 CEST	1.1.1.1	192.168.2.7	0xd2c	No error (0)	pec.it		62.149.188.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.017555952 CEST	1.1.1.1	192.168.2.7	0x171f	No error (0)	out.jmi.cz		185.50.230.100	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.023006916 CEST	1.1.1.1	192.168.2.7	0x75b6	Name error (3)	out.erdemirmaden.com.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.024525881 CEST	1.1.1.1	192.168.2.7	0x9fa5	Name error (3)	mail.informek.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.050297976 CEST	1.1.1.1	192.168.2.7	0xb414	Name error (3)	testwww.commandersofevony.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.120306015 CEST	1.1.1.1	192.168.2.7	0x215	No error (0)	wallinses.se		46.30.213.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.219600916 CEST	1.1.1.1	192.168.2.7	0x4819	Name error (3)	out.fit-kitchens.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.236221075 CEST	1.1.1.1	192.168.2.7	0x89d6	No error (0)	lugten.nl		81.169.145.149	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.341756105 CEST	1.1.1.1	192.168.2.7	0x9601	Name error (3)	firstchoicecreditservice.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.344542980 CEST	1.1.1.1	192.168.2.7	0x73e9	Name error (3)	smtp.radiounderdog.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.361085892 CEST	1.1.1.1	192.168.2.7	0x71fb	No error (0)	education.nsw.gov.au		54.206.86.115	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.361085892 CEST	1.1.1.1	192.168.2.7	0x71fb	No error (0)	education.nsw.gov.au		54.79.230.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.376164913 CEST	1.1.1.1	192.168.2.7	0xa627	Name error (3)	mail.imansystem.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.471719027 CEST	1.1.1.1	192.168.2.7	0x61ec	Name error (3)	ioc.uka.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.473690033 CEST	1.1.1.1	192.168.2.7	0x3c65	Name error (3)	smtp.zyndopa.info	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.539163113 CEST	1.1.1.1	192.168.2.7	0x5d99	No error (0)	smtp.icocscuole.it	mail.icocscuole.it		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:17.539163113 CEST	1.1.1.1	192.168.2.7	0x5d99	No error (0)	mail.icocscuole.it		62.149.201.94	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.621371984 CEST	1.1.1.1	192.168.2.7	0x4f24	Name error (3)	out.itworks2000.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.625694990 CEST	1.1.1.1	192.168.2.7	0xc521	Name error (3)	mail.e4.kepco.co.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.717003107 CEST	1.1.1.1	192.168.2.7	0x2c78	No error (0)	procanenergy.com		76.223.105.230	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.717003107 CEST	1.1.1.1	192.168.2.7	0x2c78	No error (0)	procanenergy.com		13.248.243.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.720211983 CEST	1.1.1.1	192.168.2.7	0x3bad	No error (0)	sinclairengineering.com		107.180.113.155	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.799072981 CEST	1.1.1.1	192.168.2.7	0xeff5	Name error (3)	smtp.mca.ro	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.835726976 CEST	1.1.1.1	192.168.2.7	0x150d	Name error (3)	secure.insdecaldes.cat	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.879251957 CEST	1.1.1.1	192.168.2.7	0xd156	Name error (3)	smtp.asato.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.906780958 CEST	1.1.1.1	192.168.2.7	0x4148	Name error (3)	securesmtp.inpar.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.952666044 CEST	1.1.1.1	192.168.2.7	0x718e	Name error (3)	out.staginat.dk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.972100019 CEST	1.1.1.1	192.168.2.7	0xefc2	Name error (3)	mail.dhollnack.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.974023104 CEST	1.1.1.1	192.168.2.7	0x7999	Name error (3)	securesmtp.elektrumcorp.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:17.985874891 CEST	1.1.1.1	192.168.2.7	0xebb3	No error (0)	out.magnasys.net		154.219.188.75	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.023812056 CEST	1.1.1.1	192.168.2.7	0x118d	Name error (3)	mail.ahg-gmbh.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.040196896 CEST	1.1.1.1	192.168.2.7	0xd46f	No error (0)	securesmtp.insomit.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:18.040196896 CEST	1.1.1.1	192.168.2.7	0xd46f	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:18.040196896 CEST	1.1.1.1	192.168.2.7	0xd46f	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.040196896 CEST	1.1.1.1	192.168.2.7	0xd46f	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.084430933 CEST	1.1.1.1	192.168.2.7	0xbba9	No error (0)	mail.qatar.net.qa		78.100.10.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.086464882 CEST	1.1.1.1	192.168.2.7	0xc015	Name error (3)	ad10f49fc0.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.225745916 CEST	1.1.1.1	192.168.2.7	0x1452	No error (0)	mail.apart-architecten.be		104.21.29.168	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.225745916 CEST	1.1.1.1	192.168.2.7	0x1452	No error (0)	mail.apart-architecten.be		172.67.149.136	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.226469994 CEST	1.1.1.1	192.168.2.7	0x6ddf	Name error (3)	out.mail1.dm24.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.290877104 CEST	1.1.1.1	192.168.2.7	0x5faa	Name error (3)	smtp.winner10.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.301389933 CEST	1.1.1.1	192.168.2.7	0x26a9	No error (0)	mail.rcn.com		129.213.13.252	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.447571039 CEST	1.1.1.1	192.168.2.7	0x1fe1	No error (0)	maasdriel.nl		87.233.198.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.458293915 CEST	1.1.1.1	192.168.2.7	0xb4d1	Name error (3)	mail.com.totaltexto.bancamovil	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.480279922 CEST	1.1.1.1	192.168.2.7	0x308c	Name error (3)	smtp.boehnkepartner.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.513915062 CEST	1.1.1.1	192.168.2.7	0xb49f	No error (0)	smtp3.einzelnet.com		213.27.225.102	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.517612934 CEST	1.1.1.1	192.168.2.7	0xa11f	Name error (3)	securesmtp.auseg.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.577943087 CEST	1.1.1.1	192.168.2.7	0x8d67	Name error (3)	secure.kolinapremier.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.597692013 CEST	1.1.1.1	192.168.2.7	0xd41	No error (0)	mail.thbservices.co.uk		46.30.215.32	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.612657070 CEST	1.1.1.1	192.168.2.7	0x2297	No error (0)	out.angalahotels.it		185.53.177.53	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.703294039 CEST	1.1.1.1	192.168.2.7	0xbee3	Name error (3)	smtp.dice.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.721390963 CEST	1.1.1.1	192.168.2.7	0x4d0e	No error (0)	mail.gci.net	email.gci.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:18.721390963 CEST	1.1.1.1	192.168.2.7	0x4d0e	No error (0)	email.gci.syn-alias.com		129.80.43.150	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.764189959 CEST	1.1.1.1	192.168.2.7	0xbb21	Name error (3)	secure.eurogroupconsulting.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.829682112 CEST	1.1.1.1	192.168.2.7	0xbcff	No error (0)	haystack.co.uk		87.247.241.226	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.843676090 CEST	1.1.1.1	192.168.2.7	0x2fe5	No error (0)	daee-sp-gov-br.mail.protection.outlook.com		52.101.194.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.843676090 CEST	1.1.1.1	192.168.2.7	0x2fe5	No error (0)	daee-sp-gov-br.mail.protection.outlook.com		52.101.40.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.843676090 CEST	1.1.1.1	192.168.2.7	0x2fe5	No error (0)	daee-sp-gov-br.mail.protection.outlook.com		52.101.8.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.843676090 CEST	1.1.1.1	192.168.2.7	0x2fe5	No error (0)	daee-sp-gov-br.mail.protection.outlook.com		52.101.41.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.843676090 CEST	1.1.1.1	192.168.2.7	0x2fe5	No error (0)	daee-sp-gov-br.mail.protection.outlook.com		52.101.8.51	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.843676090 CEST	1.1.1.1	192.168.2.7	0x2fe5	No error (0)	daee-sp-gov-br.mail.protection.outlook.com		52.101.11.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.843676090 CEST	1.1.1.1	192.168.2.7	0x2fe5	No error (0)	daee-sp-gov-br.mail.protection.outlook.com		52.101.11.7	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.848716021 CEST	1.1.1.1	192.168.2.7	0xe1c9	Name error (3)	secure.ee.iitism.ac.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.958399057 CEST	1.1.1.1	192.168.2.7	0x1741	No error (0)	mx02.htp-tel.de		81.14.243.107	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.960983992 CEST	1.1.1.1	192.168.2.7	0x3c4e	Name error (3)	mail.bleakmusic.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.980624914 CEST	1.1.1.1	192.168.2.7	0x2144	Name error (3)	secure.mairie-forbach.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:18.992055893 CEST	1.1.1.1	192.168.2.7	0x6251	Name error (3)	out.ot-meursault.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.119427919 CEST	1.1.1.1	192.168.2.7	0xb70b	Name error (3)	mail.before.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.200433016 CEST	1.1.1.1	192.168.2.7	0xb3cb	Name error (3)	securesmtp.salonidis.gr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.215498924 CEST	1.1.1.1	192.168.2.7	0x2830	No error (0)	luchtjeswinkel.nl		142.132.181.81	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.322285891 CEST	1.1.1.1	192.168.2.7	0x7e08	Name error (3)	out.shorelineambulance.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.336203098 CEST	1.1.1.1	192.168.2.7	0xd2	No error (0)	mail.lky.de		188.94.248.67	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.336821079 CEST	1.1.1.1	192.168.2.7	0xeb03	Name error (3)	securesmtp.linguserve.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.385766983 CEST	1.1.1.1	192.168.2.7	0x1	Server failure (2)	mail.creatiefmetpsp.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.439793110 CEST	1.1.1.1	192.168.2.7	0xc6ca	No error (0)	smtp-01.tld.t-online.de		194.25.134.76	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.502834082 CEST	1.1.1.1	192.168.2.7	0x4452	No error (0)	spacestudios.org.uk		194.110.243.201	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.522794008 CEST	1.1.1.1	192.168.2.7	0x6312	No error (0)	m4.kcn.ne.jp		61.86.4.17	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.525156021 CEST	1.1.1.1	192.168.2.7	0x74dc	No error (0)	lasd.us		162.159.136.49	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.525156021 CEST	1.1.1.1	192.168.2.7	0x74dc	No error (0)	lasd.us		162.159.135.49	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.634607077 CEST	1.1.1.1	192.168.2.7	0xaa63	No error (0)	secure.screen-lasse.com		194.206.126.204	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.691142082 CEST	1.1.1.1	192.168.2.7	0x1bb5	No error (0)	alver.biz		74.208.236.149	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.691556931 CEST	1.1.1.1	192.168.2.7	0x5789	No error (0)	secure.estadao.com.br		200.196.192.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.735265970 CEST	1.1.1.1	192.168.2.7	0x1b6c	No error (0)	smtp.polifiltro.com.br	pop.polifiltro.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:19.735265970 CEST	1.1.1.1	192.168.2.7	0x1b6c	No error (0)	pop.polifiltro.com.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:19.735265970 CEST	1.1.1.1	192.168.2.7	0x1b6c	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.745568991 CEST	1.1.1.1	192.168.2.7	0xdcfe	No error (0)	smtp.cocararaquara.com.br	smtp.uhserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:19.745568991 CEST	1.1.1.1	192.168.2.7	0xdcfe	No error (0)	smtp.uhserver.com		200.147.36.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.746042967 CEST	1.1.1.1	192.168.2.7	0xdcfe	No error (0)	smtp.cocararaquara.com.br	smtp.uhserver.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:19.746042967 CEST	1.1.1.1	192.168.2.7	0xdcfe	No error (0)	smtp.uhserver.com		200.147.36.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.749619007 CEST	1.1.1.1	192.168.2.7	0x2596	Name error (3)	secure.mato.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.752703905 CEST	1.1.1.1	192.168.2.7	0xcf06	Name error (3)	smtp.aspexpos.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.832700968 CEST	1.1.1.1	192.168.2.7	0xff38	Name error (3)	secure.iadc.com.cn	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.840523958 CEST	1.1.1.1	192.168.2.7	0x48b5	Name error (3)	out.fewrfwe.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.865411043 CEST	1.1.1.1	192.168.2.7	0x5e6d	No error (0)	pobox.sk		188.114.96.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.865411043 CEST	1.1.1.1	192.168.2.7	0x5e6d	No error (0)	pobox.sk		188.114.97.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.882704020 CEST	1.1.1.1	192.168.2.7	0x14bc	Name error (3)	secure.hancertelekom.com.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.941277981 CEST	1.1.1.1	192.168.2.7	0xb2b7	Name error (3)	securesmtp.studioferrari.re.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:19.964927912 CEST	1.1.1.1	192.168.2.7	0x4517	Name error (3)	wamlogistik.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.070622921 CEST	1.1.1.1	192.168.2.7	0xee82	Name error (3)	secure.ffmaniax.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.108164072 CEST	1.1.1.1	192.168.2.7	0x4a11	Name error (3)	smtp.birdwoodfilms.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.112685919 CEST	1.1.1.1	192.168.2.7	0x4530	Name error (3)	mail.grupoats.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.197540998 CEST	1.1.1.1	192.168.2.7	0x2d6f	Name error (3)	smtp.hessengarge.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.199476957 CEST	1.1.1.1	192.168.2.7	0x9773	Name error (3)	out.ocean-tel.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.275808096 CEST	1.1.1.1	192.168.2.7	0x9c81	No error (0)	sancharnet.in		61.0.0.70	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.288609982 CEST	1.1.1.1	192.168.2.7	0x92a8	Name error (3)	securesmtp.prof.facape.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.320693016 CEST	1.1.1.1	192.168.2.7	0xb68c	Name error (3)	securesmtp.cm-lagos.pt	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.334388018 CEST	1.1.1.1	192.168.2.7	0x17b	Name error (3)	smtp.ows.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.341828108 CEST	1.1.1.1	192.168.2.7	0xe165	No error (0)	exchange.imagine.de		87.79.71.75	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.580693007 CEST	1.1.1.1	192.168.2.7	0x4196	Name error (3)	smtp.ryansignage.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.581085920 CEST	1.1.1.1	192.168.2.7	0x263f	Name error (3)	securesmtp.circusbar.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.584176064 CEST	1.1.1.1	192.168.2.7	0x263f	Name error (3)	securesmtp.circusbar.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.603884935 CEST	1.1.1.1	192.168.2.7	0x7188	No error (0)	mx1.telecable.es		94.100.132.8	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.614207029 CEST	1.1.1.1	192.168.2.7	0x40e	Name error (3)	smtp.martinelauwers.be	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.615487099 CEST	1.1.1.1	192.168.2.7	0xda91	Name error (3)	mail.5thnq1.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.618788958 CEST	1.1.1.1	192.168.2.7	0x76b5	Name error (3)	smtp.metaarch.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.628731012 CEST	1.1.1.1	192.168.2.7	0x136c	Name error (3)	sdt.uni-eszterhazy.hu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.720443964 CEST	1.1.1.1	192.168.2.7	0x2537	Name error (3)	diplodigital.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.738173008 CEST	1.1.1.1	192.168.2.7	0xd3c7	Name error (3)	smtp.statusracingteam.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.743645906 CEST	1.1.1.1	192.168.2.7	0xffd2	Name error (3)	securesmtp.powerdrives.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.834881067 CEST	1.1.1.1	192.168.2.7	0xc802	Name error (3)	secure.gmaihl.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.866751909 CEST	1.1.1.1	192.168.2.7	0xafca	Server failure (2)	mail.creatiefmetpsp.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.874876976 CEST	1.1.1.1	192.168.2.7	0xc969	Name error (3)	securesmtp.tacom.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.967422962 CEST	1.1.1.1	192.168.2.7	0x2e58	Name error (3)	mesan.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.969530106 CEST	1.1.1.1	192.168.2.7	0xf606	Name error (3)	itelefonica.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.970205069 CEST	1.1.1.1	192.168.2.7	0xeab4	Name error (3)	secure.micro.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:20.979763985 CEST	1.1.1.1	192.168.2.7	0xb017	Name error (3)	securesmtp.micronla.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.051677942 CEST	1.1.1.1	192.168.2.7	0xb352	Name error (3)	smtp.crownpoly.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.091263056 CEST	1.1.1.1	192.168.2.7	0x28fc	No error (0)	advantech.com.tw		13.75.34.175	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.096465111 CEST	1.1.1.1	192.168.2.7	0x8f4d	Name error (3)	adrenacom.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.116525888 CEST	1.1.1.1	192.168.2.7	0xb633	Name error (3)	secure.acrelec.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.151529074 CEST	1.1.1.1	192.168.2.7	0xa7e1	Name error (3)	smtp.eesinc.cc	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.231334925 CEST	1.1.1.1	192.168.2.7	0x9889	Name error (3)	securesmtp.rd.bbc.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.255054951 CEST	1.1.1.1	192.168.2.7	0x7a43	No error (0)	izihub.com		217.160.0.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.316358089 CEST	1.1.1.1	192.168.2.7	0xcf87	No error (0)	mail.iowatelecom.net	mail.iowatelecom.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:21.316358089 CEST	1.1.1.1	192.168.2.7	0xcf87	No error (0)	mail.iowatelecom.syn-alias.com		129.153.232.136	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.342914104 CEST	1.1.1.1	192.168.2.7	0xf974	No error (0)	smtp.brianamanning.com	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:21.342914104 CEST	1.1.1.1	192.168.2.7	0xf974	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.387769938 CEST	1.1.1.1	192.168.2.7	0xd1bd	No error (0)	mx.adephia.net		167.172.23.243	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.388986111 CEST	1.1.1.1	192.168.2.7	0x2960	No error (0)	out.foxcreeksolutions.com		108.163.224.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.428257942 CEST	1.1.1.1	192.168.2.7	0xf097	No error (0)	smlys.no		194.63.248.52	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.500611067 CEST	1.1.1.1	192.168.2.7	0xda3c	No error (0)	out.wpcreno.com		208.91.197.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.543847084 CEST	1.1.1.1	192.168.2.7	0xed62	No error (0)	out.multservices.srv.br		192.185.93.75	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.564987898 CEST	1.1.1.1	192.168.2.7	0x1fcc	Name error (3)	secure.inovasuporte.xsp.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.588285923 CEST	1.1.1.1	192.168.2.7	0xe350	Name error (3)	smtp.energis.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.591746092 CEST	1.1.1.1	192.168.2.7	0xc136	Name error (3)	secure.fgkfkdg.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.601010084 CEST	1.1.1.1	192.168.2.7	0x81fd	No error (0)	mynet.com		212.101.122.34	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.609860897 CEST	1.1.1.1	192.168.2.7	0xc8a1	No error (0)	smtp.manuel-theis.de		87.118.110.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.614965916 CEST	1.1.1.1	192.168.2.7	0x3991	No error (0)	dlbo.fr		217.70.184.38	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.622299910 CEST	1.1.1.1	192.168.2.7	0x9338	Name error (3)	smtp.yaohing.com.tw	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.622349977 CEST	1.1.1.1	192.168.2.7	0x9338	Name error (3)	smtp.yaohing.com.tw	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.628876925 CEST	1.1.1.1	192.168.2.7	0xcb67	No error (0)	com4.com.br		189.90.130.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.643954039 CEST	1.1.1.1	192.168.2.7	0xbb0c	No error (0)	korbitec.com		80.88.0.150	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.721199989 CEST	1.1.1.1	192.168.2.7	0x4533	Name error (3)	securesmtp.eneco.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.729206085 CEST	1.1.1.1	192.168.2.7	0x182f	No error (0)	secure.globalnet.hr		212.91.113.134	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.754211903 CEST	1.1.1.1	192.168.2.7	0x2bb7	No error (0)	candc.co.il		35.214.183.197	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.755000114 CEST	1.1.1.1	192.168.2.7	0xafae	No error (0)	bunnysoftware.pl		167.235.144.121	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.766428947 CEST	1.1.1.1	192.168.2.7	0x2b13	No error (0)	ayou.info		101.43.39.47	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.809333086 CEST	1.1.1.1	192.168.2.7	0x1ab6	No error (0)	student.isd2899.k12.mn.us		24.56.168.168	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.839452028 CEST	1.1.1.1	192.168.2.7	0xac66	Name error (3)	mail.joneslawfirmwi.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.861304045 CEST	1.1.1.1	192.168.2.7	0x26ac	Name error (3)	smtp.studio66group.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.876177073 CEST	1.1.1.1	192.168.2.7	0x3310	Name error (3)	smtp.eliotanthea.plus.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:21.964061975 CEST	1.1.1.1	192.168.2.7	0xe3df	Name error (3)	out.comune.valmorea.co.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.068443060 CEST	1.1.1.1	192.168.2.7	0xf3cf	Name error (3)	secure.dominioinfo.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.106662989 CEST	1.1.1.1	192.168.2.7	0x4278	Name error (3)	worien.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.145761967 CEST	1.1.1.1	192.168.2.7	0x561c	Name error (3)	zdfpost.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.158592939 CEST	1.1.1.1	192.168.2.7	0xb312	Name error (3)	secure.pmolatam.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.179673910 CEST	1.1.1.1	192.168.2.7	0xf6cc	No error (0)	premiumpassport.com		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.248804092 CEST	1.1.1.1	192.168.2.7	0xa1ad	Name error (3)	securesmtp.tobiaszander.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.370867968 CEST	1.1.1.1	192.168.2.7	0xa2ea	Name error (3)	mail.littleredrooster.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.474421978 CEST	1.1.1.1	192.168.2.7	0x5f36	Name error (3)	securesmtp.grupomelo.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.482364893 CEST	1.1.1.1	192.168.2.7	0x4ca6	No error (0)	smtp.polbath.co.uk		92.205.227.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.495698929 CEST	1.1.1.1	192.168.2.7	0x57d2	Name error (3)	secure.okg.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.551211119 CEST	1.1.1.1	192.168.2.7	0x7ac9	No error (0)	smtp.nadiarealestate.com	cpanel127.turbify.biz		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:22.551211119 CEST	1.1.1.1	192.168.2.7	0x7ac9	No error (0)	cpanel127.turbify.biz		107.20.234.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.600464106 CEST	1.1.1.1	192.168.2.7	0xd351	No error (0)	ALT3.ASPMX.L.GOOGLE.COM		142.250.150.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.612147093 CEST	1.1.1.1	192.168.2.7	0x779	Name error (3)	secure.vigilfuoco.bologna.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.618642092 CEST	1.1.1.1	192.168.2.7	0x76af	No error (0)	virtualys.de		116.202.21.121	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:22.857685089 CEST	1.1.1.1	192.168.2.7	0xf785	Name error (3)	securesmtp.creativebrain.co.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.031646967 CEST	1.1.1.1	192.168.2.7	0x1f42	No error (0)	smtp.groupe-cachera.fr	mail.groupe-cachera.fr		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:23.031646967 CEST	1.1.1.1	192.168.2.7	0x1f42	No error (0)	mail.groupe-cachera.fr		193.203.239.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.071652889 CEST	1.1.1.1	192.168.2.7	0x35b0	No error (0)	smtp.clealco.com.br	smtp-cluster.idc2.mandic.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:23.071652889 CEST	1.1.1.1	192.168.2.7	0x35b0	No error (0)	smtp-cluster.idc2.mandic.com.br		177.70.110.120	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.073945999 CEST	1.1.1.1	192.168.2.7	0x6c7f	No error (0)	nesul.com.br		107.161.183.247	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.098803043 CEST	1.1.1.1	192.168.2.7	0x3ba1	No error (0)	mx001.netsol.xion.oxcs.net		135.148.130.75	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.105230093 CEST	1.1.1.1	192.168.2.7	0xd1fe	Name error (3)	securesmtp.fschierle.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.108839989 CEST	1.1.1.1	192.168.2.7	0x20da	Name error (3)	smtp.appleholic.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.160434961 CEST	1.1.1.1	192.168.2.7	0xa9ad	No error (0)	csc-mail-pop-02.certto.com.br		186.251.148.53	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.206168890 CEST	1.1.1.1	192.168.2.7	0x2b0c	Name error (3)	secure.imaisdigital.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.276913881 CEST	1.1.1.1	192.168.2.7	0xe57d	Name error (3)	securesmtp.carmelacarnes.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.371201992 CEST	1.1.1.1	192.168.2.7	0xb5bb	Name error (3)	secure.maxberryconsulting.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.383657932 CEST	1.1.1.1	192.168.2.7	0xc3f7	Name error (3)	mail.ollydayy.site	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.430300951 CEST	1.1.1.1	192.168.2.7	0x8a6c	Name error (3)	smtp.pc.707.to	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.465050936 CEST	1.1.1.1	192.168.2.7	0xd93f	Name error (3)	out.ltd-edition.ch	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.520973921 CEST	1.1.1.1	192.168.2.7	0x344	Name error (3)	secure.reckkommunikation.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.565237999 CEST	1.1.1.1	192.168.2.7	0xc1b2	No error (0)	mail.elegantproperties.co.ke		69.89.22.205	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.591397047 CEST	1.1.1.1	192.168.2.7	0x37ae	No error (0)	mail.scarlet.be		193.74.71.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.596462965 CEST	1.1.1.1	192.168.2.7	0x364	No error (0)	themedialab.co.uk		92.205.7.84	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.653194904 CEST	1.1.1.1	192.168.2.7	0xa837	Name error (3)	out.alunos.estacio.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.712359905 CEST	1.1.1.1	192.168.2.7	0x1c50	No error (0)	mx1.hostinger.com.br		172.65.182.103	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.719979048 CEST	1.1.1.1	192.168.2.7	0xed47	No error (0)	smtp.somissound.com	smtp.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:23.719979048 CEST	1.1.1.1	192.168.2.7	0xed47	No error (0)	smtp.secureserver.net		92.204.80.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.851718903 CEST	1.1.1.1	192.168.2.7	0xab6c	Name error (3)	smtp.mv-hallstadt.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.968595982 CEST	1.1.1.1	192.168.2.7	0x4a61	No error (0)	d238560.a.ess.uk.barracudanetworks.com		18.133.136.187	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.968595982 CEST	1.1.1.1	192.168.2.7	0x4a61	No error (0)	d238560.a.ess.uk.barracudanetworks.com		18.133.136.186	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.968595982 CEST	1.1.1.1	192.168.2.7	0x4a61	No error (0)	d238560.a.ess.uk.barracudanetworks.com		18.133.136.188	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:23.986475945 CEST	1.1.1.1	192.168.2.7	0x2da8	No error (0)	mail.optica-optima.com		185.127.128.220	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.092299938 CEST	1.1.1.1	192.168.2.7	0x8fef	Name error (3)	securesmtp.vws.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.115103960 CEST	1.1.1.1	192.168.2.7	0xd57f	No error (0)	securesmtp.thesweetlifeonline.com		74.220.199.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.218333960 CEST	1.1.1.1	192.168.2.7	0x8ddf	No error (0)	trinityruston.org		192.250.237.72	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.222922087 CEST	1.1.1.1	192.168.2.7	0x4916	No error (0)	secure.zoom-a.com		47.254.214.182	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.233906031 CEST	1.1.1.1	192.168.2.7	0x2e8e	Name error (3)	out.infokap.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.340024948 CEST	1.1.1.1	192.168.2.7	0xfcbe	Server failure (2)	secure.bctbenefits.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.397092104 CEST	1.1.1.1	192.168.2.7	0xb50e	No error (0)	securesmtp.familjenedvardsson.com		77.111.240.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.676459074 CEST	1.1.1.1	192.168.2.7	0x8c56	No error (0)	mail.gomun.co.kr		211.218.127.30	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.676469088 CEST	1.1.1.1	192.168.2.7	0x8c56	No error (0)	mail.gomun.co.kr		211.218.127.30	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.691968918 CEST	1.1.1.1	192.168.2.7	0xd229	Name error (3)	securesmtp.tunisia-tunisia.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.700059891 CEST	1.1.1.1	192.168.2.7	0xa557	Name error (3)	mail.dsgsdgsdfg.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.721865892 CEST	1.1.1.1	192.168.2.7	0xd0af	Name error (3)	smtp.minhtam.tv	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.727818966 CEST	1.1.1.1	192.168.2.7	0xb04a	No error (0)	aerotec-argentina.com.ar		82.223.217.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.739922047 CEST	1.1.1.1	192.168.2.7	0x6aa0	No error (0)	stjamesexeter.co.uk		54.194.24.28	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.769283056 CEST	1.1.1.1	192.168.2.7	0xa402	Name error (3)	smtp.jybh.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.779839039 CEST	1.1.1.1	192.168.2.7	0x9f22	Name error (3)	out.unindustria.rovigo.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.784617901 CEST	1.1.1.1	192.168.2.7	0xf35a	Name error (3)	secure.roncarey.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.831299067 CEST	1.1.1.1	192.168.2.7	0xccf2	Server failure (2)	securesmtp.prodspublicidad.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.988873959 CEST	1.1.1.1	192.168.2.7	0x1793	No error (0)	novologistics.com.mx		65.99.205.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:24.997524977 CEST	1.1.1.1	192.168.2.7	0x9dc9	Name error (3)	securesmtp.kcazt.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.087367058 CEST	1.1.1.1	192.168.2.7	0x752f	Name error (3)	secure.netsite.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.102485895 CEST	1.1.1.1	192.168.2.7	0x63d1	No error (0)	hzmx01.mxmail.netease.com		52.223.4.149	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.102485895 CEST	1.1.1.1	192.168.2.7	0x63d1	No error (0)	hzmx01.mxmail.netease.com		35.71.156.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.104656935 CEST	1.1.1.1	192.168.2.7	0x8d5c	Name error (3)	smtp.employeebuddy.co.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.111356020 CEST	1.1.1.1	192.168.2.7	0x51d8	No error (0)	doutorempresas.com.br		186.209.113.136	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.115789890 CEST	1.1.1.1	192.168.2.7	0x4ca0	Server failure (2)	smtp.cirumed.med.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.115840912 CEST	1.1.1.1	192.168.2.7	0x4ca0	Server failure (2)	smtp.cirumed.med.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.115875006 CEST	1.1.1.1	192.168.2.7	0x4ca0	Server failure (2)	smtp.cirumed.med.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.115902901 CEST	1.1.1.1	192.168.2.7	0x4ca0	Server failure (2)	smtp.cirumed.med.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.143874884 CEST	1.1.1.1	192.168.2.7	0xf05	No error (0)	bigpond.net.au		139.134.5.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.225588083 CEST	1.1.1.1	192.168.2.7	0xdca2	Name error (3)	out.shz.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.236216068 CEST	1.1.1.1	192.168.2.7	0x4263	Name error (3)	securesmtp.sikor.co.il	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.245896101 CEST	1.1.1.1	192.168.2.7	0x1f37	Name error (3)	securesmtp.informationtechnologyservices.com.pk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.296308041 CEST	1.1.1.1	192.168.2.7	0xe7b5	No error (0)	secure.mojag.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:25.296308041 CEST	1.1.1.1	192.168.2.7	0xe7b5	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:25.296308041 CEST	1.1.1.1	192.168.2.7	0xe7b5	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.296308041 CEST	1.1.1.1	192.168.2.7	0xe7b5	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.374886036 CEST	1.1.1.1	192.168.2.7	0xec34	Name error (3)	securesmtp.lang.ox.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.389328003 CEST	1.1.1.1	192.168.2.7	0xa453	Name error (3)	out.i-a-i.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.454876900 CEST	1.1.1.1	192.168.2.7	0x251a	No error (0)	yaoo.com		76.223.84.192	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.454876900 CEST	1.1.1.1	192.168.2.7	0x251a	No error (0)	yaoo.com		13.248.158.7	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.504226923 CEST	1.1.1.1	192.168.2.7	0xcef7	No error (0)	mail.bg		193.201.172.98	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.532927036 CEST	1.1.1.1	192.168.2.7	0xd549	No error (0)	mail.emalahleni.gov.za		165.165.147.158	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.601260900 CEST	1.1.1.1	192.168.2.7	0x57e8	Name error (3)	airmail.az	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.602557898 CEST	1.1.1.1	192.168.2.7	0x750c	Name error (3)	smtp.uasinc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.604491949 CEST	1.1.1.1	192.168.2.7	0xd4e6	Name error (3)	securesmtp.sng-edu.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.611968994 CEST	1.1.1.1	192.168.2.7	0x3107	No error (0)	mail.sajco.ac.tz	sajco.ac.tz		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:25.611968994 CEST	1.1.1.1	192.168.2.7	0x3107	No error (0)	sajco.ac.tz		67.212.189.210	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.620997906 CEST	1.1.1.1	192.168.2.7	0xf45b	No error (0)	myalappraiser.com		3.33.130.190	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.620997906 CEST	1.1.1.1	192.168.2.7	0xf45b	No error (0)	myalappraiser.com		15.197.148.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.679341078 CEST	1.1.1.1	192.168.2.7	0xa01f	Name error (3)	out.dongnae.ms.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.698256016 CEST	1.1.1.1	192.168.2.7	0x22c0	Name error (3)	smtp.southern.k12.oh.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.718154907 CEST	1.1.1.1	192.168.2.7	0x629c	Name error (3)	securesmtp.uberliss.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.750576019 CEST	1.1.1.1	192.168.2.7	0xfad8	No error (0)	mail.joenieters.com		64.26.60.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.844131947 CEST	1.1.1.1	192.168.2.7	0x903c	Name error (3)	mail.fliegerundco.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.845115900 CEST	1.1.1.1	192.168.2.7	0x8f60	Name error (3)	beanztech.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.873523951 CEST	1.1.1.1	192.168.2.7	0x7652	No error (0)	pispl.in		65.0.142.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.912414074 CEST	1.1.1.1	192.168.2.7	0xffa6	No error (0)	mail.bonettoimmobiliare.it		62.149.128.166	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.912414074 CEST	1.1.1.1	192.168.2.7	0xffa6	No error (0)	mail.bonettoimmobiliare.it		62.149.128.160	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.912414074 CEST	1.1.1.1	192.168.2.7	0xffa6	No error (0)	mail.bonettoimmobiliare.it		62.149.128.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.912414074 CEST	1.1.1.1	192.168.2.7	0xffa6	No error (0)	mail.bonettoimmobiliare.it		62.149.128.157	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.912414074 CEST	1.1.1.1	192.168.2.7	0xffa6	No error (0)	mail.bonettoimmobiliare.it		62.149.128.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.912414074 CEST	1.1.1.1	192.168.2.7	0xffa6	No error (0)	mail.bonettoimmobiliare.it		62.149.128.151	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.912414074 CEST	1.1.1.1	192.168.2.7	0xffa6	No error (0)	mail.bonettoimmobiliare.it		62.149.128.74	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.971736908 CEST	1.1.1.1	192.168.2.7	0xe63a	Name error (3)	mail.dhollnack.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:25.997689962 CEST	1.1.1.1	192.168.2.7	0x73ed	Name error (3)	mail.storepraticidade.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.026797056 CEST	1.1.1.1	192.168.2.7	0xda6	Name error (3)	securesmtp.skybrasilia.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.030148029 CEST	1.1.1.1	192.168.2.7	0x10e6	No error (0)	secure.nadinesfolly.com		206.188.193.85	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.214569092 CEST	1.1.1.1	192.168.2.7	0xe2af	Name error (3)	out.fountainheadschool.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.259375095 CEST	1.1.1.1	192.168.2.7	0x7752	No error (0)	smtp.century21egerie.com	ssl0.ovh.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:26.259375095 CEST	1.1.1.1	192.168.2.7	0x7752	No error (0)	ssl0.ovh.net		193.70.18.144	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.260871887 CEST	1.1.1.1	192.168.2.7	0xacb4	Name error (3)	securesmtp.majcherczyk.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.337002993 CEST	1.1.1.1	192.168.2.7	0x893f	Name error (3)	secure.makmurmeta.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.391609907 CEST	1.1.1.1	192.168.2.7	0xda0	No error (0)	orpheus.net.au		23.227.38.65	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.425617933 CEST	1.1.1.1	192.168.2.7	0x68d5	Server failure (2)	smtp.elthammarket.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.425635099 CEST	1.1.1.1	192.168.2.7	0x68d5	Server failure (2)	smtp.elthammarket.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.425672054 CEST	1.1.1.1	192.168.2.7	0x68d5	Server failure (2)	smtp.elthammarket.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.451204062 CEST	1.1.1.1	192.168.2.7	0x38c4	Name error (3)	lichtstark.media	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.497066021 CEST	1.1.1.1	192.168.2.7	0xb03	Name error (3)	smtp.pro-cad.si	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.577235937 CEST	1.1.1.1	192.168.2.7	0xf70b	Name error (3)	aiona.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.577639103 CEST	1.1.1.1	192.168.2.7	0x8bb2	Name error (3)	out.artdefekts.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.618334055 CEST	1.1.1.1	192.168.2.7	0xaa73	No error (0)	talismaconstrutora.com.br		198.136.59.234	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.755927086 CEST	1.1.1.1	192.168.2.7	0x8b71	Name error (3)	out.pop.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.765605927 CEST	1.1.1.1	192.168.2.7	0x1e9b	Name error (3)	secure.tarunabakti.sch.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.777997971 CEST	1.1.1.1	192.168.2.7	0x5223	Name error (3)	securesmtp.botanique.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.809901953 CEST	1.1.1.1	192.168.2.7	0x9c23	No error (0)	rekmar.com.tr		185.123.54.204	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.963335991 CEST	1.1.1.1	192.168.2.7	0x925e	No error (0)	out.conneryconsultingllc.com		205.178.189.131	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:26.969099998 CEST	1.1.1.1	192.168.2.7	0xad9b	No error (0)	wbminternational.com		137.184.176.124	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.033432007 CEST	1.1.1.1	192.168.2.7	0xf80f	No error (0)	securesmtp.abbot-travel.co.uk		185.151.30.148	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.066729069 CEST	1.1.1.1	192.168.2.7	0x78cf	Name error (3)	smtp.xstreamdesign.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.216936111 CEST	1.1.1.1	192.168.2.7	0xece	No error (0)	christoph-wettstein.de		46.4.157.163	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.217722893 CEST	1.1.1.1	192.168.2.7	0xd13e	No error (0)	fsus.de		178.250.12.17	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.240048885 CEST	1.1.1.1	192.168.2.7	0xbf43	No error (0)	mail.passaura.com.br		177.69.12.129	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.311976910 CEST	1.1.1.1	192.168.2.7	0x9c8b	No error (0)	mail.b-io.co		142.93.226.250	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.311976910 CEST	1.1.1.1	192.168.2.7	0x9c8b	No error (0)	mail.b-io.co		65.109.162.19	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.336834908 CEST	1.1.1.1	192.168.2.7	0x1254	Name error (3)	alt1.aspmx1.google.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.347826958 CEST	1.1.1.1	192.168.2.7	0x9d84	Name error (3)	out.opentradeoficial.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.461743116 CEST	1.1.1.1	192.168.2.7	0xe14f	No error (0)	mail.hplush.de		193.158.234.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.530016899 CEST	1.1.1.1	192.168.2.7	0xeacc	No error (0)	mail.adithyanews.co.in		162.214.80.103	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.535944939 CEST	1.1.1.1	192.168.2.7	0x3152	Name error (3)	secure.espinho.tc.mj.pt	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.584101915 CEST	1.1.1.1	192.168.2.7	0x4e2e	Name error (3)	smtp.creative-solutions.com.ua	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.729605913 CEST	1.1.1.1	192.168.2.7	0x8b91	Name error (3)	out.canfga.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.745819092 CEST	1.1.1.1	192.168.2.7	0xc037	Name error (3)	securesmtp.rku.ac.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.766406059 CEST	1.1.1.1	192.168.2.7	0x6486	Name error (3)	secure.lowegorzewo.pl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.805486917 CEST	1.1.1.1	192.168.2.7	0x6883	Name error (3)	securesmtp.ktb.co.th	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:27.964261055 CEST	1.1.1.1	192.168.2.7	0x9ac0	Name error (3)	mail.amars.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.003520012 CEST	1.1.1.1	192.168.2.7	0x66df	No error (0)	out.snapportraits.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:28.003520012 CEST	1.1.1.1	192.168.2.7	0x66df	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:28.003520012 CEST	1.1.1.1	192.168.2.7	0x66df	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.003520012 CEST	1.1.1.1	192.168.2.7	0x66df	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.022844076 CEST	1.1.1.1	192.168.2.7	0x194	Name error (3)	out.crcpa.org.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.075315952 CEST	1.1.1.1	192.168.2.7	0xa86c	Name error (3)	secure.summit.solar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.211935043 CEST	1.1.1.1	192.168.2.7	0xdd	Name error (3)	1dcb3afbef.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.250247002 CEST	1.1.1.1	192.168.2.7	0xbbdb	Server failure (2)	mail.flutlichtspiel.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.302428007 CEST	1.1.1.1	192.168.2.7	0x1fd6	No error (0)	adistec.com		64.190.27.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.325649977 CEST	1.1.1.1	192.168.2.7	0x4dee	Name error (3)	secure.arcticcatinc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.338416100 CEST	1.1.1.1	192.168.2.7	0x83f2	Name error (3)	secure.e-ding.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.453367949 CEST	1.1.1.1	192.168.2.7	0xa4ff	No error (0)	lastmx.spamexperts.net		38.111.198.185	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.453367949 CEST	1.1.1.1	192.168.2.7	0xa4ff	No error (0)	lastmx.spamexperts.net		38.89.254.156	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.453367949 CEST	1.1.1.1	192.168.2.7	0xa4ff	No error (0)	lastmx.spamexperts.net		149.13.75.27	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.453367949 CEST	1.1.1.1	192.168.2.7	0xa4ff	No error (0)	lastmx.spamexperts.net		154.59.104.23	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.476138115 CEST	1.1.1.1	192.168.2.7	0x9a4a	No error (0)	secure.tourismusportal.de		116.202.118.107	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.485856056 CEST	1.1.1.1	192.168.2.7	0x5241	Name error (3)	secure.nilopolis.rj.gov.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.491993904 CEST	1.1.1.1	192.168.2.7	0x44c6	Name error (3)	smtp.avihold.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.523391008 CEST	1.1.1.1	192.168.2.7	0x7381	No error (0)	logisticazonasur.com.ar		35.208.69.149	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.572518110 CEST	1.1.1.1	192.168.2.7	0x1150	Name error (3)	out.activistasconcorazon.com.co	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.703819036 CEST	1.1.1.1	192.168.2.7	0x4da1	No error (0)	smtp.ok.ac.kr	dog.ok.ac.kr		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:28.703819036 CEST	1.1.1.1	192.168.2.7	0x4da1	No error (0)	dog.ok.ac.kr		203.232.140.7	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.704204082 CEST	1.1.1.1	192.168.2.7	0x836e	Name error (3)	belinkedcr.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.710150957 CEST	1.1.1.1	192.168.2.7	0x8222	Server failure (2)	my.teletech.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.726219893 CEST	1.1.1.1	192.168.2.7	0xdf7a	No error (0)	secure.ppm-marburg.de		91.215.75.30	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.739808083 CEST	1.1.1.1	192.168.2.7	0xfb75	No error (0)	smtp.gerfaud.fr	smtp-fr.securemail.pro		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:28.739808083 CEST	1.1.1.1	192.168.2.7	0xfb75	No error (0)	smtp-fr.securemail.pro		81.88.58.196	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.767352104 CEST	1.1.1.1	192.168.2.7	0x6765	No error (0)	securesmtp.maryjane.com		34.206.39.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.778825045 CEST	1.1.1.1	192.168.2.7	0x5830	No error (0)	out.spyglassholdings.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:28.778825045 CEST	1.1.1.1	192.168.2.7	0x5830	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:28.778825045 CEST	1.1.1.1	192.168.2.7	0x5830	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.778825045 CEST	1.1.1.1	192.168.2.7	0x5830	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.942279100 CEST	1.1.1.1	192.168.2.7	0x6ff4	Name error (3)	securesmtp.medtroniccareers.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.942929983 CEST	1.1.1.1	192.168.2.7	0xc57a	Name error (3)	smtp.ebruerol.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.948084116 CEST	1.1.1.1	192.168.2.7	0x31af	Name error (3)	smtp.charlesrussell.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:28.998264074 CEST	1.1.1.1	192.168.2.7	0x4594	No error (0)	paulchantrey.co.uk	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:28.998264074 CEST	1.1.1.1	192.168.2.7	0x4594	No error (0)	77980.bodis.com		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.009089947 CEST	1.1.1.1	192.168.2.7	0xd872	No error (0)	ilegnidipinocchio.it		89.46.105.68	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.068065882 CEST	1.1.1.1	192.168.2.7	0x3d9d	No error (0)	out.buehler.us.com		45.56.79.23	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.084038973 CEST	1.1.1.1	192.168.2.7	0x76e9	No error (0)	ryandouglasgroup.com		34.174.115.117	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.091675043 CEST	1.1.1.1	192.168.2.7	0x636d	Name error (3)	secure.pul2e.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.091968060 CEST	1.1.1.1	192.168.2.7	0x34ea	Name error (3)	mail.aura.com.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.121687889 CEST	1.1.1.1	192.168.2.7	0xbdb5	Name error (3)	secure.wildmoser-wendelin.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.199882984 CEST	1.1.1.1	192.168.2.7	0x2959	Name error (3)	secure.cheeb.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.200747967 CEST	1.1.1.1	192.168.2.7	0x8aaf	No error (0)	cdtm.de		129.187.254.228	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.201735973 CEST	1.1.1.1	192.168.2.7	0xa609	Name error (3)	smtp.herbert1.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.310470104 CEST	1.1.1.1	192.168.2.7	0x489c	Name error (3)	smtp.hipercg.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.327296019 CEST	1.1.1.1	192.168.2.7	0x4617	No error (0)	secure.teurlincx.nl		142.132.181.81	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.334320068 CEST	1.1.1.1	192.168.2.7	0x7ef7	No error (0)	valto.ro		195.250.53.162	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.378688097 CEST	1.1.1.1	192.168.2.7	0x7c06	Name error (3)	smtp.8pmstudio.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.450423956 CEST	1.1.1.1	192.168.2.7	0xaf5f	No error (0)	mail.bateelcoffee.com		64.29.151.235	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.457549095 CEST	1.1.1.1	192.168.2.7	0x93b9	No error (0)	iav.ac.ma		51.38.37.55	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.483944893 CEST	1.1.1.1	192.168.2.7	0xda6a	Server failure (2)	out.pontianakkota.go.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.483974934 CEST	1.1.1.1	192.168.2.7	0xda6a	Server failure (2)	out.pontianakkota.go.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.484006882 CEST	1.1.1.1	192.168.2.7	0xda6a	Server failure (2)	out.pontianakkota.go.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.484469891 CEST	1.1.1.1	192.168.2.7	0xda6a	Server failure (2)	out.pontianakkota.go.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.559087992 CEST	1.1.1.1	192.168.2.7	0xf2df	Name error (3)	mail.abacho.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.564177990 CEST	1.1.1.1	192.168.2.7	0xb6cd	No error (0)	smtp.pcgamesupply.com		104.18.0.207	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.564177990 CEST	1.1.1.1	192.168.2.7	0xb6cd	No error (0)	smtp.pcgamesupply.com		104.18.1.207	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.812469006 CEST	1.1.1.1	192.168.2.7	0x579a	Name error (3)	out.kaehny.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.812519073 CEST	1.1.1.1	192.168.2.7	0x579a	Name error (3)	out.kaehny.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.816564083 CEST	1.1.1.1	192.168.2.7	0x579a	Name error (3)	out.kaehny.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.834384918 CEST	1.1.1.1	192.168.2.7	0x5da8	No error (0)	quotation.alhuda.com.pk		192.250.239.110	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.837718964 CEST	1.1.1.1	192.168.2.7	0x31e3	Name error (3)	secure.thegab.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.867702007 CEST	1.1.1.1	192.168.2.7	0xaec8	No error (0)	secure.williamdeferrers.essex.sch.uk		37.188.98.122	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.941664934 CEST	1.1.1.1	192.168.2.7	0x2ded	No error (0)	myethion.com		103.35.84.51	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:29.979868889 CEST	1.1.1.1	192.168.2.7	0xc5ba	No error (0)	vigolife.de		81.169.145.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.011095047 CEST	1.1.1.1	192.168.2.7	0x7537	No error (0)	out.jo2.no		46.30.215.212	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.240729094 CEST	1.1.1.1	192.168.2.7	0x965e	Name error (3)	out.giddis.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.241278887 CEST	1.1.1.1	192.168.2.7	0xf966	No error (0)	mail.athens.k12.wi.us		216.56.48.196	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.265276909 CEST	1.1.1.1	192.168.2.7	0x7f84	Name error (3)	out.unifood.biz	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.279561996 CEST	1.1.1.1	192.168.2.7	0x7ca2	Name error (3)	secure.fidelitywest.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.286696911 CEST	1.1.1.1	192.168.2.7	0xe834	No error (0)	out.bartvandenhoogen.eu		66.147.240.157	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.299002886 CEST	1.1.1.1	192.168.2.7	0xbe48	Name error (3)	out.muffelsuse.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.355972052 CEST	1.1.1.1	192.168.2.7	0xab10	Name error (3)	secure.musha.ro	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.357877970 CEST	1.1.1.1	192.168.2.7	0xe7ef	Name error (3)	out.azzurro-it.ch	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.379518986 CEST	1.1.1.1	192.168.2.7	0xa649	Name error (3)	secure.robertsonsfurniture.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.379817009 CEST	1.1.1.1	192.168.2.7	0x42af	Name error (3)	secure.students.southport.ac.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.381227970 CEST	1.1.1.1	192.168.2.7	0x7393	No error (0)	mail.grandriver.ca	adfs.grandriver.cfdnsfo.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:30.381227970 CEST	1.1.1.1	192.168.2.7	0x7393	No error (0)	adfs.grandriver.cfdnsfo.com		99.209.21.165	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.381526947 CEST	1.1.1.1	192.168.2.7	0x689b	Name error (3)	out.ajiclean.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.473100901 CEST	1.1.1.1	192.168.2.7	0x878a	No error (0)	bt.com		213.121.43.136	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.473100901 CEST	1.1.1.1	192.168.2.7	0x878a	No error (0)	bt.com		213.121.43.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.473100901 CEST	1.1.1.1	192.168.2.7	0x878a	No error (0)	bt.com		213.121.43.135	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.473100901 CEST	1.1.1.1	192.168.2.7	0x878a	No error (0)	bt.com		213.121.43.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.473100901 CEST	1.1.1.1	192.168.2.7	0x878a	No error (0)	bt.com		213.121.43.137	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.473100901 CEST	1.1.1.1	192.168.2.7	0x878a	No error (0)	bt.com		213.121.43.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.483900070 CEST	1.1.1.1	192.168.2.7	0xc7dd	Name error (3)	mail.allfinanz-center.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.509879112 CEST	1.1.1.1	192.168.2.7	0xf1d3	No error (0)	secure.tanox.com		185.53.178.54	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.603420019 CEST	1.1.1.1	192.168.2.7	0x974f	No error (0)	smtp.clinicanutrissoma.com.br	emailssl-vip.kinghost.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:30.603420019 CEST	1.1.1.1	192.168.2.7	0x974f	No error (0)	emailssl-vip.kinghost.net		191.6.216.83	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.603420019 CEST	1.1.1.1	192.168.2.7	0x974f	No error (0)	emailssl-vip.kinghost.net		191.6.216.63	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.641617060 CEST	1.1.1.1	192.168.2.7	0x97e4	Name error (3)	out.aminta.store	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.647646904 CEST	1.1.1.1	192.168.2.7	0xfde3	Name error (3)	securesmtp.gerhardgeyer.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.698453903 CEST	1.1.1.1	192.168.2.7	0xba32	No error (0)	mail.vfp.us	webmail02.register.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:30.698453903 CEST	1.1.1.1	192.168.2.7	0xba32	No error (0)	webmail02.register.com	webmail-oxcs.register.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:30.698453903 CEST	1.1.1.1	192.168.2.7	0xba32	No error (0)	webmail-oxcs.register.com	http.register.xion.oxcs.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:30.698453903 CEST	1.1.1.1	192.168.2.7	0xba32	No error (0)	http.register.xion.oxcs.net		23.81.68.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.724244118 CEST	1.1.1.1	192.168.2.7	0xb5e6	Name error (3)	planll.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.750420094 CEST	1.1.1.1	192.168.2.7	0xe060	Name error (3)	mail.brunogarcia.me	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.888324976 CEST	1.1.1.1	192.168.2.7	0x6b0f	Name error (3)	smtp.issf.sa	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.912071943 CEST	1.1.1.1	192.168.2.7	0x15b4	No error (0)	mail.forestrytas.com.au	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:30.912071943 CEST	1.1.1.1	192.168.2.7	0x15b4	No error (0)	ghs.googlehosted.com		216.58.206.51	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:30.970626116 CEST	1.1.1.1	192.168.2.7	0xd588	Server failure (2)	smtp.bomerangui.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.001332045 CEST	1.1.1.1	192.168.2.7	0xf56c	Name error (3)	securesmtp.glenloabbey.ie	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.011693001 CEST	1.1.1.1	192.168.2.7	0xf4db	Name error (3)	mail.smplan.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.065824032 CEST	1.1.1.1	192.168.2.7	0xd5c	No error (0)	out.proximaautomation.com		83.149.159.148	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.100719929 CEST	1.1.1.1	192.168.2.7	0xa466	No error (0)	meta.ua		104.22.65.144	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.100719929 CEST	1.1.1.1	192.168.2.7	0xa466	No error (0)	meta.ua		172.67.25.217	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.100719929 CEST	1.1.1.1	192.168.2.7	0xa466	No error (0)	meta.ua		104.22.64.144	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.101304054 CEST	1.1.1.1	192.168.2.7	0x883a	Name error (3)	stylelead.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.134546041 CEST	1.1.1.1	192.168.2.7	0x158a	No error (0)	ibt.co.il		192.116.146.33	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.147702932 CEST	1.1.1.1	192.168.2.7	0x1ba9	Name error (3)	smtp.man2kukar.sch.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.167948961 CEST	1.1.1.1	192.168.2.7	0xb383	No error (0)	mail.iiserkol.ac.in		14.139.220.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.195498943 CEST	1.1.1.1	192.168.2.7	0x95f	No error (0)	out.modasa.co.in	cpanel324.turbify.biz		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:31.195498943 CEST	1.1.1.1	192.168.2.7	0x95f	No error (0)	cpanel324.turbify.biz		54.211.87.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.218521118 CEST	1.1.1.1	192.168.2.7	0x831f	Name error (3)	mail.bhzdqb.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.246854067 CEST	1.1.1.1	192.168.2.7	0x9414	No error (0)	mail.asiaworkstraining.com		101.100.210.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.351753950 CEST	1.1.1.1	192.168.2.7	0xe366	Name error (3)	mail.are-c.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.359370947 CEST	1.1.1.1	192.168.2.7	0xf597	No error (0)	smtp.me.com	smtp.me.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:31.465497017 CEST	1.1.1.1	192.168.2.7	0x61cc	Name error (3)	kasdlaskd.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.492058992 CEST	1.1.1.1	192.168.2.7	0x2957	No error (0)	smtp.hollowcompany.com		96.27.204.82	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.592513084 CEST	1.1.1.1	192.168.2.7	0x63a4	Name error (3)	secure.maac.org.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.599956989 CEST	1.1.1.1	192.168.2.7	0xeb37	Name error (3)	smtp.sqltech.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.604079008 CEST	1.1.1.1	192.168.2.7	0x8354	Name error (3)	smtp.genesismotors.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.607461929 CEST	1.1.1.1	192.168.2.7	0xf55a	Name error (3)	out.gecommerce.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.677825928 CEST	1.1.1.1	192.168.2.7	0x8221	No error (0)	powerencry.com		162.210.196.166	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.761146069 CEST	1.1.1.1	192.168.2.7	0x7af9	No error (0)	secure.kingslandpolymers.co.uk		139.162.234.186	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.835129976 CEST	1.1.1.1	192.168.2.7	0x810	No error (0)	sunrise.ch		212.35.60.35	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.857683897 CEST	1.1.1.1	192.168.2.7	0x271	No error (0)	aureadiseno.com		51.79.33.181	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.899068117 CEST	1.1.1.1	192.168.2.7	0x8f1a	No error (0)	smtp.katriots.com		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.941278934 CEST	1.1.1.1	192.168.2.7	0xfa10	Name error (3)	out.bcaoo.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.966990948 CEST	1.1.1.1	192.168.2.7	0x36f8	No error (0)	mx.securemx.jp		210.130.202.96	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.966990948 CEST	1.1.1.1	192.168.2.7	0x36f8	No error (0)	mx.securemx.jp		210.130.202.99	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.966990948 CEST	1.1.1.1	192.168.2.7	0x36f8	No error (0)	mx.securemx.jp		210.130.202.93	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.966990948 CEST	1.1.1.1	192.168.2.7	0x36f8	No error (0)	mx.securemx.jp		210.130.202.92	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.972239017 CEST	1.1.1.1	192.168.2.7	0xf9d1	Name error (3)	efebbfdf2a.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.977107048 CEST	1.1.1.1	192.168.2.7	0x71f5	No error (0)	mail.rexsales.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:31.977107048 CEST	1.1.1.1	192.168.2.7	0x71f5	No error (0)	mail.rexsales.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.034272909 CEST	1.1.1.1	192.168.2.7	0x7ec4	Server failure (2)	kaytoursmz.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.082304001 CEST	1.1.1.1	192.168.2.7	0x4c31	Name error (3)	mail.frucomedia.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.105257988 CEST	1.1.1.1	192.168.2.7	0xe887	Name error (3)	securesmtp.camm.id.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.241204977 CEST	1.1.1.1	192.168.2.7	0x6340	Name error (3)	smtp.tapovanvidhyalay.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.241214991 CEST	1.1.1.1	192.168.2.7	0x6869	Name error (3)	securesmtp.esvmedien.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.347337008 CEST	1.1.1.1	192.168.2.7	0xf367	Name error (3)	securesmtp.84c8db7dd9.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.422627926 CEST	1.1.1.1	192.168.2.7	0x9eb7	Name error (3)	securesmtp.bm-i.co.kr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.454799891 CEST	1.1.1.1	192.168.2.7	0x304c	Name error (3)	out.gargoyleenterprises.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.486741066 CEST	1.1.1.1	192.168.2.7	0xb906	No error (0)	secure.diskret-escort.de		213.132.197.18	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.570179939 CEST	1.1.1.1	192.168.2.7	0x1b0f	No error (0)	mx.armstrong.syn-alias.com		193.122.187.19	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.729309082 CEST	1.1.1.1	192.168.2.7	0x3040	No error (0)	telorummedia.com		74.220.199.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.735165119 CEST	1.1.1.1	192.168.2.7	0xbb4c	No error (0)	securesmtp.was.es		64.190.63.222	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.747652054 CEST	1.1.1.1	192.168.2.7	0x3610	Name error (3)	smtp.novachem.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.776870966 CEST	1.1.1.1	192.168.2.7	0x1da	Name error (3)	smtp.4kmulti.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.779990911 CEST	1.1.1.1	192.168.2.7	0xe15f	No error (0)	smtp.contecomagra.com.br	smtp.exchangecorp.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:32.779990911 CEST	1.1.1.1	192.168.2.7	0xe15f	No error (0)	smtp.exchangecorp.com.br		191.252.14.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.813298941 CEST	1.1.1.1	192.168.2.7	0xa58d	Name error (3)	securesmtp.tecar.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.838088036 CEST	1.1.1.1	192.168.2.7	0xe8f7	Name error (3)	mail.zaiss.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.840286016 CEST	1.1.1.1	192.168.2.7	0xd990	No error (0)	youcast.tv.br		154.12.239.6	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.940397024 CEST	1.1.1.1	192.168.2.7	0xb703	No error (0)	smtp.seguralta.com.br	smtp-cluster.idc2.mandic.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:32.940397024 CEST	1.1.1.1	192.168.2.7	0xb703	No error (0)	smtp-cluster.idc2.mandic.com.br		177.70.110.120	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.965584040 CEST	1.1.1.1	192.168.2.7	0xb97	Name error (3)	out.dcb3de5ce9.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.965998888 CEST	1.1.1.1	192.168.2.7	0x4890	No error (0)	mailstore1.secureserver.net		92.204.80.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.967355013 CEST	1.1.1.1	192.168.2.7	0xfc9a	Name error (3)	smtp.ookmail.ab.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:32.975127935 CEST	1.1.1.1	192.168.2.7	0xef8f	Name error (3)	smtp.ndcuk.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.021409035 CEST	1.1.1.1	192.168.2.7	0xf1eb	Name error (3)	smtp.vipmai.hu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.055969954 CEST	1.1.1.1	192.168.2.7	0xbf8d	No error (0)	mail.petsouk.in		103.14.121.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.087259054 CEST	1.1.1.1	192.168.2.7	0x9de	Name error (3)	secure.tanzschule-feil.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.200858116 CEST	1.1.1.1	192.168.2.7	0x7b64	Name error (3)	secure.lanches.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.211283922 CEST	1.1.1.1	192.168.2.7	0x679f	Name error (3)	smtp.cobbref.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.332896948 CEST	1.1.1.1	192.168.2.7	0x2f71	No error (0)	out.sbt.co.in		64.190.63.222	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.377876997 CEST	1.1.1.1	192.168.2.7	0x3146	Name error (3)	out.guesscab.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.380207062 CEST	1.1.1.1	192.168.2.7	0x8d7c	No error (0)	smtp.yassaka.com.br	pop.yassaka.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:33.380207062 CEST	1.1.1.1	192.168.2.7	0x8d7c	No error (0)	pop.yassaka.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:33.380207062 CEST	1.1.1.1	192.168.2.7	0x8d7c	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.404119968 CEST	1.1.1.1	192.168.2.7	0x6bf1	Name error (3)	out.coind.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.463609934 CEST	1.1.1.1	192.168.2.7	0x21c1	Name error (3)	out.synack.mckinsey.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.466814995 CEST	1.1.1.1	192.168.2.7	0x6c41	No error (0)	smtp.designillustrated.co.uk		217.160.239.66	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.480705023 CEST	1.1.1.1	192.168.2.7	0x636a	Server failure (2)	secure.dnklot.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.493469954 CEST	1.1.1.1	192.168.2.7	0x871c	Name error (3)	out.izabelfailde.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.592998981 CEST	1.1.1.1	192.168.2.7	0x138	Name error (3)	mail.esu16.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.886790991 CEST	1.1.1.1	192.168.2.7	0x4ab2	Name error (3)	out.e-mali.co.sz	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.886833906 CEST	1.1.1.1	192.168.2.7	0x1c25	Name error (3)	secure.inovasuporte.xsp.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.886904955 CEST	1.1.1.1	192.168.2.7	0xcb0b	Name error (3)	out.hhfp.pcc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.914525986 CEST	1.1.1.1	192.168.2.7	0x86e9	No error (0)	schniz1.de		81.169.145.94	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.924787998 CEST	1.1.1.1	192.168.2.7	0xb508	Name error (3)	mail.wmdc.co.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.925329924 CEST	1.1.1.1	192.168.2.7	0xc188	Name error (3)	smtp.harshmage.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.986273050 CEST	1.1.1.1	192.168.2.7	0x3c37	Name error (3)	out.thiloschneider.net	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:33.991571903 CEST	1.1.1.1	192.168.2.7	0x66c0	Name error (3)	secure.sepric.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.000427961 CEST	1.1.1.1	192.168.2.7	0x97a2	Server failure (2)	out.opco-construction.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.000824928 CEST	1.1.1.1	192.168.2.7	0x4138	Name error (3)	secure.rapid-mails.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.058854103 CEST	1.1.1.1	192.168.2.7	0x9d6	No error (0)	turriscorp.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.058854103 CEST	1.1.1.1	192.168.2.7	0x9d6	No error (0)	turriscorp.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.095710993 CEST	1.1.1.1	192.168.2.7	0x75f4	Name error (3)	securesmtp.mailnesa.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.118240118 CEST	1.1.1.1	192.168.2.7	0x9b3d	Name error (3)	secure.epa-marnelavallee.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.213268042 CEST	1.1.1.1	192.168.2.7	0x4f96	Name error (3)	out.cpqhfvrc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.213402987 CEST	1.1.1.1	192.168.2.7	0x4137	Name error (3)	out.haworth.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.215006113 CEST	1.1.1.1	192.168.2.7	0x2b85	No error (0)	omahonydesign.com		107.20.241.149	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.220854998 CEST	1.1.1.1	192.168.2.7	0xedde	No error (0)	smtp.skynet.be	relay.glb.proximus.be		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:34.220854998 CEST	1.1.1.1	192.168.2.7	0xedde	No error (0)	relay.glb.proximus.be		195.238.20.30	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.256377935 CEST	1.1.1.1	192.168.2.7	0x8ac5	No error (0)	sp.zs1godziesze.pl		178.211.137.47	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.274117947 CEST	1.1.1.1	192.168.2.7	0x1190	Name error (3)	testwww.commandersofevony.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.344717026 CEST	1.1.1.1	192.168.2.7	0x5d0	Name error (3)	mail.sdna.gr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.362996101 CEST	1.1.1.1	192.168.2.7	0xa5cd	Name error (3)	secure.motiv-one.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.410650969 CEST	1.1.1.1	192.168.2.7	0xf2fd	No error (0)	mail.optonline.net	mail.altice.prod.cloud.openwave.ai		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:34.410650969 CEST	1.1.1.1	192.168.2.7	0xf2fd	No error (0)	mail.altice.prod.cloud.openwave.ai		65.20.63.172	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.464325905 CEST	1.1.1.1	192.168.2.7	0xd79c	Name error (3)	dutch8challenge.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.469475985 CEST	1.1.1.1	192.168.2.7	0x4eaa	Name error (3)	out.yay.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.486848116 CEST	1.1.1.1	192.168.2.7	0xa030	Name error (3)	smtp.alrayanholdingco.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.590418100 CEST	1.1.1.1	192.168.2.7	0x479c	Name error (3)	smtp.order.augustow.pl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.591305971 CEST	1.1.1.1	192.168.2.7	0xd8be	No error (0)	walla.co.il		3.165.113.76	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.591305971 CEST	1.1.1.1	192.168.2.7	0xd8be	No error (0)	walla.co.il		3.165.113.38	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.591305971 CEST	1.1.1.1	192.168.2.7	0xd8be	No error (0)	walla.co.il		3.165.113.78	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.591305971 CEST	1.1.1.1	192.168.2.7	0xd8be	No error (0)	walla.co.il		3.165.113.32	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.604681969 CEST	1.1.1.1	192.168.2.7	0xd375	No error (0)	mail.rinku.zaq.ne.jp	zaq-zaq.mx.zaq.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:34.604681969 CEST	1.1.1.1	192.168.2.7	0xd375	No error (0)	zaq-zaq.mx.zaq.ne.jp		175.135.253.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.604744911 CEST	1.1.1.1	192.168.2.7	0xd375	No error (0)	mail.rinku.zaq.ne.jp	zaq-zaq.mx.zaq.ne.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:34.604744911 CEST	1.1.1.1	192.168.2.7	0xd375	No error (0)	zaq-zaq.mx.zaq.ne.jp		175.135.253.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.639494896 CEST	1.1.1.1	192.168.2.7	0x5ba0	Name error (3)	out.dellagiacoma.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.837548018 CEST	1.1.1.1	192.168.2.7	0x5bd1	Name error (3)	smtp.wirteltor-gymnasium.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.847421885 CEST	1.1.1.1	192.168.2.7	0x4cee	No error (0)	mail.marcaregistradaeng.com.br		192.185.214.44	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.879476070 CEST	1.1.1.1	192.168.2.7	0x7d20	Name error (3)	smtp.kaishfamilyartproject.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.938839912 CEST	1.1.1.1	192.168.2.7	0x2d0	Name error (3)	secure.cirruscomms.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.945635080 CEST	1.1.1.1	192.168.2.7	0x965b	No error (0)	secure.meyns.nl	92708.BODIS.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:34.945635080 CEST	1.1.1.1	192.168.2.7	0x965b	No error (0)	92708.BODIS.com		199.59.243.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.949389935 CEST	1.1.1.1	192.168.2.7	0xb02b	Server failure (2)	secure.hakol.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.955240965 CEST	1.1.1.1	192.168.2.7	0xddeb	No error (0)	mail.capitalone.com	a51092.d.outlook.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:34.955240965 CEST	1.1.1.1	192.168.2.7	0xddeb	No error (0)	a51092.d.outlook.com	pod51092.tm-3.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:34.955240965 CEST	1.1.1.1	192.168.2.7	0xddeb	No error (0)	pod51092.tm-3.office.com		52.96.126.39	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:34.955240965 CEST	1.1.1.1	192.168.2.7	0xddeb	No error (0)	pod51092.tm-3.office.com		52.96.193.71	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.003464937 CEST	1.1.1.1	192.168.2.7	0x7fad	No error (0)	securesmtp.ifwda.co.cc		175.126.123.219	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.042028904 CEST	1.1.1.1	192.168.2.7	0x2bcb	No error (0)	ergofocus.nl		46.30.215.209	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.042062044 CEST	1.1.1.1	192.168.2.7	0x2bcb	No error (0)	ergofocus.nl		46.30.215.209	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.113713980 CEST	1.1.1.1	192.168.2.7	0x128f	Name error (3)	securesmtp.e-difference.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.115148067 CEST	1.1.1.1	192.168.2.7	0xbc7d	Name error (3)	securesmtp.nortexint.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.118737936 CEST	1.1.1.1	192.168.2.7	0x44b7	Name error (3)	iflashworks.pl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.186887980 CEST	1.1.1.1	192.168.2.7	0xad12	Name error (3)	secure.esyem.com.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.228167057 CEST	1.1.1.1	192.168.2.7	0x9d2b	Name error (3)	out.petrina.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.388253927 CEST	1.1.1.1	192.168.2.7	0x7640	Name error (3)	mail.undiesdrawer.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.390852928 CEST	1.1.1.1	192.168.2.7	0x8685	Name error (3)	out.urbanusroad.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.401532888 CEST	1.1.1.1	192.168.2.7	0xeabb	Name error (3)	abnamroverzekeringen.nl.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.457087040 CEST	1.1.1.1	192.168.2.7	0x1a83	Name error (3)	secure.comunicaciones-idiem.cl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.479513884 CEST	1.1.1.1	192.168.2.7	0x2222	No error (0)	mail.mitradev.ca	mailroot5.namespro.ca		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:35.479513884 CEST	1.1.1.1	192.168.2.7	0x2222	No error (0)	mailroot5.namespro.ca		169.54.82.183	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.521305084 CEST	1.1.1.1	192.168.2.7	0x8b4d	No error (0)	mail.ifactory.com.au	ifactory-com-au.mail.protection.outlook.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:35.521305084 CEST	1.1.1.1	192.168.2.7	0x8b4d	No error (0)	ifactory-com-au.mail.protection.outlook.com		52.101.149.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.521305084 CEST	1.1.1.1	192.168.2.7	0x8b4d	No error (0)	ifactory-com-au.mail.protection.outlook.com		52.101.151.5	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.521305084 CEST	1.1.1.1	192.168.2.7	0x8b4d	No error (0)	ifactory-com-au.mail.protection.outlook.com		52.101.149.9	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.521305084 CEST	1.1.1.1	192.168.2.7	0x8b4d	No error (0)	ifactory-com-au.mail.protection.outlook.com		52.101.149.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.528098106 CEST	1.1.1.1	192.168.2.7	0x2b98	No error (0)	aseqroo.mx		187.157.139.179	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.532881021 CEST	1.1.1.1	192.168.2.7	0xb9c5	Name error (3)	mail.evitable.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.597872019 CEST	1.1.1.1	192.168.2.7	0xef81	Name error (3)	secure.pagusviriditas.nl	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.607606888 CEST	1.1.1.1	192.168.2.7	0xc6f9	Name error (3)	secure.mexonexc.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.688544989 CEST	1.1.1.1	192.168.2.7	0x164c	No error (0)	rogers.com		40.85.218.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.712418079 CEST	1.1.1.1	192.168.2.7	0xc91	No error (0)	mx00.ionos.de		212.227.15.41	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.812510014 CEST	1.1.1.1	192.168.2.7	0x807c	Name error (3)	secure.mixely.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.839602947 CEST	1.1.1.1	192.168.2.7	0x6274	Name error (3)	out.centralparknyc.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.864326000 CEST	1.1.1.1	192.168.2.7	0x7b1f	Name error (3)	smtp.ce5aj6ck10.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.869273901 CEST	1.1.1.1	192.168.2.7	0x502	Name error (3)	securesmtp.tiomail.ch	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.871490002 CEST	1.1.1.1	192.168.2.7	0x793d	No error (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com		52.101.170.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.871490002 CEST	1.1.1.1	192.168.2.7	0x793d	No error (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com		52.101.170.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.871490002 CEST	1.1.1.1	192.168.2.7	0x793d	No error (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com		52.101.170.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.871490002 CEST	1.1.1.1	192.168.2.7	0x793d	No error (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com		52.101.168.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.871540070 CEST	1.1.1.1	192.168.2.7	0x793d	No error (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com		52.101.170.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.871540070 CEST	1.1.1.1	192.168.2.7	0x793d	No error (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com		52.101.170.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.871540070 CEST	1.1.1.1	192.168.2.7	0x793d	No error (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com		52.101.170.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.871540070 CEST	1.1.1.1	192.168.2.7	0x793d	No error (0)	flairhotelhopfengarten-de02e.mail.protection.outlook.com		52.101.168.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.878530025 CEST	1.1.1.1	192.168.2.7	0x39df	No error (0)	mail.senkom.or.id	senkom.or.id		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:35.878679991 CEST	1.1.1.1	192.168.2.7	0x39df	No error (0)	mail.senkom.or.id	senkom.or.id		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:35.894098997 CEST	1.1.1.1	192.168.2.7	0xa45f	Name error (3)	securesmtp.armmarket.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.922892094 CEST	1.1.1.1	192.168.2.7	0xf3ab	No error (0)	smtp.gcvlife.in	us2.smtp.mailhostbox.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:35.922892094 CEST	1.1.1.1	192.168.2.7	0xf3ab	No error (0)	us2.smtp.mailhostbox.com		208.91.199.224	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.922892094 CEST	1.1.1.1	192.168.2.7	0xf3ab	No error (0)	us2.smtp.mailhostbox.com		208.91.199.223	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.922892094 CEST	1.1.1.1	192.168.2.7	0xf3ab	No error (0)	us2.smtp.mailhostbox.com		208.91.199.225	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.922892094 CEST	1.1.1.1	192.168.2.7	0xf3ab	No error (0)	us2.smtp.mailhostbox.com		208.91.198.143	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.969712973 CEST	1.1.1.1	192.168.2.7	0x7808	No error (0)	hzmx02.mxmail.netease.com		103.129.255.239	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.969712973 CEST	1.1.1.1	192.168.2.7	0x7808	No error (0)	hzmx02.mxmail.netease.com		103.129.255.240	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.978334904 CEST	1.1.1.1	192.168.2.7	0x7d60	Name error (3)	secure.resultzinc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:35.998176098 CEST	1.1.1.1	192.168.2.7	0x3071	Name error (3)	out.dba-gmbh.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.005177021 CEST	1.1.1.1	192.168.2.7	0x4e0c	Name error (3)	mail.imagembr.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.048612118 CEST	1.1.1.1	192.168.2.7	0x4b93	Name error (3)	smtp.knowall.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.117156029 CEST	1.1.1.1	192.168.2.7	0x31be	Name error (3)	securesmtp.extremeconstructioninc.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.123712063 CEST	1.1.1.1	192.168.2.7	0x9cad	No error (0)	mx.verizon.ne		104.131.176.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.240803003 CEST	1.1.1.1	192.168.2.7	0xbb5a	Name error (3)	mail.haulio.io	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.262188911 CEST	1.1.1.1	192.168.2.7	0x21f2	Name error (3)	smtp.a7bb9fdcab.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.263607979 CEST	1.1.1.1	192.168.2.7	0x7447	Name error (3)	smtp.notebookspronto.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.408839941 CEST	1.1.1.1	192.168.2.7	0x1da6	Name error (3)	smtp.janseycpas.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.433254957 CEST	1.1.1.1	192.168.2.7	0xb317	No error (0)	globalgadgetuk.com		91.136.8.131	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.473202944 CEST	1.1.1.1	192.168.2.7	0xc0a7	Name error (3)	securesmtp.utb.salem.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.487102985 CEST	1.1.1.1	192.168.2.7	0xd182	Name error (3)	out.jsprm.online	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	mail.juweliermueller.de	pop.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.secureserver.net	pop.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.vox.secureserver.net	pop.us-phx.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.117	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.97	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.240	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.246	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.247	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.493175030 CEST	1.1.1.1	192.168.2.7	0xf14e	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.154	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.518831015 CEST	1.1.1.1	192.168.2.7	0xcd2a	No error (0)	smtp.keyrus.com.br	smtp-cluster.idc2.mandic.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:36.518831015 CEST	1.1.1.1	192.168.2.7	0xcd2a	No error (0)	smtp-cluster.idc2.mandic.com.br		177.70.110.120	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.519352913 CEST	1.1.1.1	192.168.2.7	0x5ced	Name error (3)	securesmtp.catral.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.579807997 CEST	1.1.1.1	192.168.2.7	0xe650	No error (0)	mail.sulminet.com.br	ns2.sulminet.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:36.579807997 CEST	1.1.1.1	192.168.2.7	0xe650	No error (0)	ns2.sulminet.com.br		131.72.12.24	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.592236996 CEST	1.1.1.1	192.168.2.7	0xe145	Name error (3)	out.cod.com.co	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.627945900 CEST	1.1.1.1	192.168.2.7	0x7956	No error (0)	secure.probiz.pl		31.186.86.109	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.642452955 CEST	1.1.1.1	192.168.2.7	0x5e94	Name error (3)	secure.sbsaude.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.841382027 CEST	1.1.1.1	192.168.2.7	0x1ea5	Name error (3)	mail.porjes.sk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.851262093 CEST	1.1.1.1	192.168.2.7	0x2b87	No error (0)	impactinternational-com.mail.protection.outlook.com		52.101.73.22	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.851262093 CEST	1.1.1.1	192.168.2.7	0x2b87	No error (0)	impactinternational-com.mail.protection.outlook.com		52.101.73.21	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.851262093 CEST	1.1.1.1	192.168.2.7	0x2b87	No error (0)	impactinternational-com.mail.protection.outlook.com		52.101.68.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.851262093 CEST	1.1.1.1	192.168.2.7	0x2b87	No error (0)	impactinternational-com.mail.protection.outlook.com		52.101.73.16	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.855259895 CEST	1.1.1.1	192.168.2.7	0x9dd6	No error (0)	krilly.de		83.243.58.29	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.960958958 CEST	1.1.1.1	192.168.2.7	0x408b	No error (0)	yorku.ca		130.63.236.137	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.964694977 CEST	1.1.1.1	192.168.2.7	0x3fc2	Name error (3)	mail.realsoul.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.965576887 CEST	1.1.1.1	192.168.2.7	0x9247	Name error (3)	out.c21keyrealty.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.981935024 CEST	1.1.1.1	192.168.2.7	0x50e5	Name error (3)	smtp.lancashire.newsquest.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:36.993242979 CEST	1.1.1.1	192.168.2.7	0x8c54	No error (0)	chr-systems.net		213.186.33.87	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.049130917 CEST	1.1.1.1	192.168.2.7	0x74dd	Name error (3)	smtp.imdico.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.083201885 CEST	1.1.1.1	192.168.2.7	0xd4cc	Name error (3)	out.singapurhelpdesk.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.083214998 CEST	1.1.1.1	192.168.2.7	0x7d07	Name error (3)	mail.fischermichl.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.126291990 CEST	1.1.1.1	192.168.2.7	0x599f	No error (0)	mail.unliminet.de		85.215.219.177	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.211548090 CEST	1.1.1.1	192.168.2.7	0xbb43	Name error (3)	securesmtp.fronat.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.225471020 CEST	1.1.1.1	192.168.2.7	0x4ae5	Name error (3)	smtp.cultura.combr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.249851942 CEST	1.1.1.1	192.168.2.7	0xfa36	Name error (3)	smtp.ebruerol.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.334863901 CEST	1.1.1.1	192.168.2.7	0x5d59	No error (0)	shsgroup.net		15.197.142.173	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.334863901 CEST	1.1.1.1	192.168.2.7	0x5d59	No error (0)	shsgroup.net		3.33.152.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.366292953 CEST	1.1.1.1	192.168.2.7	0x784b	No error (0)	mail.restech.com.sa	mail-redirect.turbify.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:37.366292953 CEST	1.1.1.1	192.168.2.7	0x784b	No error (0)	mail-redirect.turbify.com		54.211.177.144	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.366292953 CEST	1.1.1.1	192.168.2.7	0x784b	No error (0)	mail-redirect.turbify.com		44.210.154.213	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.371565104 CEST	1.1.1.1	192.168.2.7	0x5395	No error (0)	mail.enzojeep.com.br	mail.grupoenzo.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:37.371565104 CEST	1.1.1.1	192.168.2.7	0x5395	No error (0)	mail.grupoenzo.com.br		134.65.228.98	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.386332035 CEST	1.1.1.1	192.168.2.7	0x15d1	No error (0)	mx.viaga.info		104.131.176.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.392204046 CEST	1.1.1.1	192.168.2.7	0x6ac6	No error (0)	smtp.officinaeverdi.it		62.149.128.201	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.392204046 CEST	1.1.1.1	192.168.2.7	0x6ac6	No error (0)	smtp.officinaeverdi.it		62.149.128.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.392204046 CEST	1.1.1.1	192.168.2.7	0x6ac6	No error (0)	smtp.officinaeverdi.it		62.149.128.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.392204046 CEST	1.1.1.1	192.168.2.7	0x6ac6	No error (0)	smtp.officinaeverdi.it		62.149.128.202	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.393793106 CEST	1.1.1.1	192.168.2.7	0x813a	Name error (3)	out.smartdealsaccessory.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.403316021 CEST	1.1.1.1	192.168.2.7	0xc851	No error (0)	mail.displayd.com.au		59.167.44.32	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.473500967 CEST	1.1.1.1	192.168.2.7	0x7405	Name error (3)	smtp.mv-hallstadt.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.576070070 CEST	1.1.1.1	192.168.2.7	0x9933	Name error (3)	out.myprix.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.600924969 CEST	1.1.1.1	192.168.2.7	0xffde	Name error (3)	gmk42.plus.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.703109026 CEST	1.1.1.1	192.168.2.7	0xbfd9	Name error (3)	secure.mychaplaincy.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.717684984 CEST	1.1.1.1	192.168.2.7	0x8527	Name error (3)	secure.andersenpub.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.725325108 CEST	1.1.1.1	192.168.2.7	0xda5d	Name error (3)	securesmtp.greenlightlocating.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.820875883 CEST	1.1.1.1	192.168.2.7	0xe74d	No error (0)	mx-02-eu-central-1.prod.hydra.sophos.com		18.195.127.105	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.820875883 CEST	1.1.1.1	192.168.2.7	0xe74d	No error (0)	mx-02-eu-central-1.prod.hydra.sophos.com		18.157.203.101	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.822532892 CEST	1.1.1.1	192.168.2.7	0x33ef	Name error (3)	bs-solutions.com.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.823290110 CEST	1.1.1.1	192.168.2.7	0xc93f	Name error (3)	securesmtp.ribs.press	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.825588942 CEST	1.1.1.1	192.168.2.7	0xf51a	No error (0)	jacarandainternational.co.za		169.239.218.31	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.917355061 CEST	1.1.1.1	192.168.2.7	0xc80f	No error (0)	smtp054.gdfnet.df.gov.br		131.72.222.254	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.919605970 CEST	1.1.1.1	192.168.2.7	0x4c16	Name error (3)	mail.sma.belajar.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:37.997679949 CEST	1.1.1.1	192.168.2.7	0xd415	Name error (3)	out.rosangelacastro.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.000533104 CEST	1.1.1.1	192.168.2.7	0x10c5	No error (0)	intercanal.com.br		50.116.87.233	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.075268030 CEST	1.1.1.1	192.168.2.7	0xe477	Name error (3)	smtp.kone.way	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.107655048 CEST	1.1.1.1	192.168.2.7	0x5e81	Server failure (2)	securesmtp.nobugs.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.113841057 CEST	1.1.1.1	192.168.2.7	0x7b08	Name error (3)	smtp.ozhanyogurrtcu.com.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.115457058 CEST	1.1.1.1	192.168.2.7	0xab0a	Name error (3)	secure.jvo.se	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.182032108 CEST	1.1.1.1	192.168.2.7	0x20bd	No error (0)	uit.ac.ma		157.90.94.241	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.232491970 CEST	1.1.1.1	192.168.2.7	0xac83	No error (0)	smtp.heino.ch		194.191.24.14	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.248650074 CEST	1.1.1.1	192.168.2.7	0xea21	Name error (3)	arpek.org.tn	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.273906946 CEST	1.1.1.1	192.168.2.7	0x2e3	No error (0)	smtp.technokabel.com.pl	technokabel.com.pl		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:38.273906946 CEST	1.1.1.1	192.168.2.7	0x2e3	No error (0)	technokabel.com.pl		79.96.223.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.307112932 CEST	1.1.1.1	192.168.2.7	0xe47b	Name error (3)	securesmtp.monacelli.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.386890888 CEST	1.1.1.1	192.168.2.7	0xd377	No error (0)	smtp.freenet.it		62.149.128.202	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.386890888 CEST	1.1.1.1	192.168.2.7	0xd377	No error (0)	smtp.freenet.it		62.149.128.201	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.386890888 CEST	1.1.1.1	192.168.2.7	0xd377	No error (0)	smtp.freenet.it		62.149.128.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.386890888 CEST	1.1.1.1	192.168.2.7	0xd377	No error (0)	smtp.freenet.it		62.149.128.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.447145939 CEST	1.1.1.1	192.168.2.7	0xea2d	No error (0)	ssss-gouv-qc-ca.mail.protection.outlook.com		52.101.192.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.447145939 CEST	1.1.1.1	192.168.2.7	0xea2d	No error (0)	ssss-gouv-qc-ca.mail.protection.outlook.com		52.101.192.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.447145939 CEST	1.1.1.1	192.168.2.7	0xea2d	No error (0)	ssss-gouv-qc-ca.mail.protection.outlook.com		52.101.190.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.447145939 CEST	1.1.1.1	192.168.2.7	0xea2d	No error (0)	ssss-gouv-qc-ca.mail.protection.outlook.com		52.101.190.0	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.447145939 CEST	1.1.1.1	192.168.2.7	0xea2d	No error (0)	ssss-gouv-qc-ca.mail.protection.outlook.com		52.101.190.3	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.447145939 CEST	1.1.1.1	192.168.2.7	0xea2d	No error (0)	ssss-gouv-qc-ca.mail.protection.outlook.com		52.101.190.2	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.483592987 CEST	1.1.1.1	192.168.2.7	0x8f57	Name error (3)	secure.wiseworldseminars.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.556404114 CEST	1.1.1.1	192.168.2.7	0x8ae1	No error (0)	mxb-00795303.gslb.pphosted.com		205.220.163.62	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.570839882 CEST	1.1.1.1	192.168.2.7	0xd425	No error (0)	indiatimes.com		104.102.49.62	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.593648911 CEST	1.1.1.1	192.168.2.7	0xe92e	No error (0)	elbers.de		92.205.53.104	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.627295971 CEST	1.1.1.1	192.168.2.7	0x9ff8	Name error (3)	secure.tdservice.eu	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.665333986 CEST	1.1.1.1	192.168.2.7	0xe91e	Name error (3)	secure.educacao.pmrp.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.933365107 CEST	1.1.1.1	192.168.2.7	0x4e04	No error (0)	cnsm.ro		185.171.186.30	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.944339037 CEST	1.1.1.1	192.168.2.7	0xcdba	No error (0)	mx.breakthur.com		164.90.203.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.949467897 CEST	1.1.1.1	192.168.2.7	0x359c	No error (0)	smtp.mailme.dk		81.19.232.212	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.949697971 CEST	1.1.1.1	192.168.2.7	0xc38e	No error (0)	securesmtp.oventrop.de		217.117.111.52	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.969698906 CEST	1.1.1.1	192.168.2.7	0xd020	No error (0)	smtp.1und1.de		212.227.15.167	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.969698906 CEST	1.1.1.1	192.168.2.7	0xd020	No error (0)	smtp.1und1.de		212.227.15.183	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.970262051 CEST	1.1.1.1	192.168.2.7	0xd9f6	No error (0)	ruffini.de		5.175.14.40	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.971295118 CEST	1.1.1.1	192.168.2.7	0x8f9c	No error (0)	socal-lighting.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.971295118 CEST	1.1.1.1	192.168.2.7	0x8f9c	No error (0)	socal-lighting.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:38.975402117 CEST	1.1.1.1	192.168.2.7	0x41e0	Name error (3)	smtp.maxiaudio2014.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.045314074 CEST	1.1.1.1	192.168.2.7	0xf1a0	No error (0)	mail.mygsc.com	mygsc.com.av-mx.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:39.045314074 CEST	1.1.1.1	192.168.2.7	0xf1a0	No error (0)	mygsc.com.av-mx.com		129.159.110.135	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.070324898 CEST	1.1.1.1	192.168.2.7	0x580b	No error (0)	mail.oceanica.ufrj.br	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:39.070324898 CEST	1.1.1.1	192.168.2.7	0x580b	No error (0)	ghs.googlehosted.com		216.58.212.179	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.104840040 CEST	1.1.1.1	192.168.2.7	0xd86	No error (0)	securesmtp.decorxxi.com		91.195.240.13	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.112056971 CEST	1.1.1.1	192.168.2.7	0x8d86	No error (0)	rodofly.com.br		216.59.16.36	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.112117052 CEST	1.1.1.1	192.168.2.7	0x1b3	No error (0)	out.yachtseahorse.com	yachtseahorse.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:39.112117052 CEST	1.1.1.1	192.168.2.7	0x1b3	No error (0)	yachtseahorse.com		192.0.78.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.112117052 CEST	1.1.1.1	192.168.2.7	0x1b3	No error (0)	yachtseahorse.com		192.0.78.24	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.215672016 CEST	1.1.1.1	192.168.2.7	0x6c1	No error (0)	out.sitechqm.ca		216.40.34.41	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.224517107 CEST	1.1.1.1	192.168.2.7	0xb503	No error (0)	smtp.grossworld.de		185.53.177.53	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.231539965 CEST	1.1.1.1	192.168.2.7	0x9ad9	Name error (3)	secure.6ec49ec1be.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.307244062 CEST	1.1.1.1	192.168.2.7	0x17d9	No error (0)	clyps.com.br		149.18.51.54	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.336585045 CEST	1.1.1.1	192.168.2.7	0xaee0	Name error (3)	smtp.trans-ocean.org	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.338546038 CEST	1.1.1.1	192.168.2.7	0x791b	Name error (3)	securesmtp.kellam.us.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.344012022 CEST	1.1.1.1	192.168.2.7	0x8096	Name error (3)	mail.franksu.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.508382082 CEST	1.1.1.1	192.168.2.7	0x1dec	Name error (3)	smtp.kftec.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.613846064 CEST	1.1.1.1	192.168.2.7	0xdecc	Name error (3)	out.guesscab.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.645507097 CEST	1.1.1.1	192.168.2.7	0x1faf	No error (0)	c-ms.de		193.254.190.101	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.737018108 CEST	1.1.1.1	192.168.2.7	0x6d69	Name error (3)	securesmtp.jgseguranca.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.744124889 CEST	1.1.1.1	192.168.2.7	0xab05	No error (0)	smtp.portugalmail.pt	pmail-smtp-out.m.portugalmail.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:39.744124889 CEST	1.1.1.1	192.168.2.7	0xab05	No error (0)	pmail-smtp-out.m.portugalmail.net		195.170.168.76	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.822001934 CEST	1.1.1.1	192.168.2.7	0x1a3c	No error (0)	optushome.com.au		211.29.132.152	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.969793081 CEST	1.1.1.1	192.168.2.7	0x3a29	No error (0)	mail.kmcontab.com.br	mailserver.kmcontab.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:39.969793081 CEST	1.1.1.1	192.168.2.7	0x3a29	No error (0)	mailserver.kmcontab.com.br		187.85.164.168	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:39.995237112 CEST	1.1.1.1	192.168.2.7	0x7938	No error (0)	securesmtp.hausatlantik.de	hausatlantik.de		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:39.995237112 CEST	1.1.1.1	192.168.2.7	0x7938	No error (0)	hausatlantik.de		157.90.155.99	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.004411936 CEST	1.1.1.1	192.168.2.7	0x4f65	Name error (3)	out.nartproje.com.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.093463898 CEST	1.1.1.1	192.168.2.7	0x8f62	Name error (3)	out.webpc.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.179442883 CEST	1.1.1.1	192.168.2.7	0x86b7	Name error (3)	out.rhodes.k12.il.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.216403961 CEST	1.1.1.1	192.168.2.7	0xd908	No error (0)	smtp.hetnet.nl	mailhost.hetnet.nl		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:40.216403961 CEST	1.1.1.1	192.168.2.7	0xd908	No error (0)	mailhost.hetnet.nl		195.121.65.26	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.247494936 CEST	1.1.1.1	192.168.2.7	0x3a31	No error (0)	hwonline.it		46.28.4.90	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.255245924 CEST	1.1.1.1	192.168.2.7	0xbdad	No error (0)	coemi.it		35.214.197.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.484445095 CEST	1.1.1.1	192.168.2.7	0x72e	Name error (3)	securesmtp.maconcom.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.562022924 CEST	1.1.1.1	192.168.2.7	0x5a49	No error (0)	mail.berlin.de		84.23.254.58	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.601536989 CEST	1.1.1.1	192.168.2.7	0x6361	No error (0)	mx.progiftstore.org		167.172.23.243	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.603338957 CEST	1.1.1.1	192.168.2.7	0x34b4	No error (0)	smtp.tds.net	mail.tds.syn-alias.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:40.603338957 CEST	1.1.1.1	192.168.2.7	0x34b4	No error (0)	mail.tds.syn-alias.com		129.159.94.43	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.669959068 CEST	1.1.1.1	192.168.2.7	0xb00b	No error (0)	securesmtp.cancerresearch.org		141.193.213.20	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.764023066 CEST	1.1.1.1	192.168.2.7	0x7ead	Name error (3)	secure.arrowaviation.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.781645060 CEST	1.1.1.1	192.168.2.7	0x7af	No error (0)	vntechcon.vn		117.122.125.107	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.781661987 CEST	1.1.1.1	192.168.2.7	0x7af	No error (0)	vntechcon.vn		117.122.125.107	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.781675100 CEST	1.1.1.1	192.168.2.7	0x7af	No error (0)	vntechcon.vn		117.122.125.107	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.819082022 CEST	1.1.1.1	192.168.2.7	0x4290	No error (0)	smtp.centrum.cz		46.255.231.70	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.834484100 CEST	1.1.1.1	192.168.2.7	0x92f9	Name error (3)	smtp.ens-bousaada.dz	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.847897053 CEST	1.1.1.1	192.168.2.7	0x477c	Name error (3)	secure.tokainuts.co.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.854731083 CEST	1.1.1.1	192.168.2.7	0xcd30	Name error (3)	mail.sptiles.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.881361961 CEST	1.1.1.1	192.168.2.7	0xe146	No error (0)	securesmtp.selectivedata.com		76.12.146.141	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.891323090 CEST	1.1.1.1	192.168.2.7	0x8f0d	Name error (3)	smtp.waukesha.k12.wi.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.937916994 CEST	1.1.1.1	192.168.2.7	0xea6f	Name error (3)	smtp.hairformation.ca	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.956681013 CEST	1.1.1.1	192.168.2.7	0xa54	Name error (3)	smtp.creativecanvas.info	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:40.962136030 CEST	1.1.1.1	192.168.2.7	0x7882	Name error (3)	smtp.acerinox.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.010585070 CEST	1.1.1.1	192.168.2.7	0xbbab	Name error (3)	mail.cardios.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.064969063 CEST	1.1.1.1	192.168.2.7	0xe83f	No error (0)	mx-caprica.zoneedit.com		64.68.198.23	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.064969063 CEST	1.1.1.1	192.168.2.7	0xe83f	No error (0)	mx-caprica.zoneedit.com		64.68.198.24	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.071849108 CEST	1.1.1.1	192.168.2.7	0x68ae	Name error (3)	out.antares-so.fr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.131792068 CEST	1.1.1.1	192.168.2.7	0x9031	Name error (3)	securesmtp.c2servizi.it	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.146692038 CEST	1.1.1.1	192.168.2.7	0x85f5	No error (0)	solidsolucoes.com.br		195.35.43.153	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.204981089 CEST	1.1.1.1	192.168.2.7	0x40d7	Name error (3)	gamajl.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.264439106 CEST	1.1.1.1	192.168.2.7	0x8be9	No error (0)	smtp.com.br		177.70.14.19	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.269176960 CEST	1.1.1.1	192.168.2.7	0x7776	No error (0)	idenco.com		208.99.63.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.275006056 CEST	1.1.1.1	192.168.2.7	0x1f7d	No error (0)	senosalud.org		204.93.224.104	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.342978954 CEST	1.1.1.1	192.168.2.7	0x694e	No error (0)	mail.triplebond3.com	privateemail.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:41.342978954 CEST	1.1.1.1	192.168.2.7	0x694e	No error (0)	privateemail.com		198.54.122.136	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.354444981 CEST	1.1.1.1	192.168.2.7	0x8847	Name error (3)	smtp.muni25demayo.gob.ar	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.462327003 CEST	1.1.1.1	192.168.2.7	0x5390	No error (0)	smtp.usit.net		209.86.93.103	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.462327003 CEST	1.1.1.1	192.168.2.7	0x5390	No error (0)	smtp.usit.net		209.86.93.104	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.462327003 CEST	1.1.1.1	192.168.2.7	0x5390	No error (0)	smtp.usit.net		209.86.93.105	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.468200922 CEST	1.1.1.1	192.168.2.7	0x335e	No error (0)	out.surpass-tech.com.cn		154.86.130.253	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.492918015 CEST	1.1.1.1	192.168.2.7	0x79c6	No error (0)	zahora.eu		95.216.24.158	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.546711922 CEST	1.1.1.1	192.168.2.7	0x771	No error (0)	mail.umagezana.co.za		156.38.235.106	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.597726107 CEST	1.1.1.1	192.168.2.7	0x4bc8	Name error (3)	out.grunwedl.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.623123884 CEST	1.1.1.1	192.168.2.7	0xea3d	Name error (3)	smtp.nissoshoji.co.jp	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.677341938 CEST	1.1.1.1	192.168.2.7	0x6cb1	Name error (3)	securesmtp.crossco.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.703636885 CEST	1.1.1.1	192.168.2.7	0x165d	Name error (3)	secure.com.tencent.mobileqq	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.810873985 CEST	1.1.1.1	192.168.2.7	0xf5c7	No error (0)	mx1-us1.ppe-hosted.com		148.163.129.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.810873985 CEST	1.1.1.1	192.168.2.7	0xf5c7	No error (0)	mx1-us1.ppe-hosted.com		67.231.154.162	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.837238073 CEST	1.1.1.1	192.168.2.7	0x4c0	No error (0)	smtp.gesundheitbb.de	smtprelaypool.ispgateway.de		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:41.837238073 CEST	1.1.1.1	192.168.2.7	0x4c0	No error (0)	smtprelaypool.ispgateway.de		80.67.29.4	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.906038046 CEST	1.1.1.1	192.168.2.7	0xb6d1	Name error (3)	secure.rainagaintanks.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.929229021 CEST	1.1.1.1	192.168.2.7	0x4e4f	Name error (3)	securesmtp.tessta.no	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:41.950582027 CEST	1.1.1.1	192.168.2.7	0xf8f5	Name error (3)	securesmtp.rodas3.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.004831076 CEST	1.1.1.1	192.168.2.7	0x9e42	Name error (3)	securesmtp.harris.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.111907959 CEST	1.1.1.1	192.168.2.7	0xe386	No error (0)	ardya.co.id		107.6.115.133	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.138024092 CEST	1.1.1.1	192.168.2.7	0xea30	Name error (3)	mail.gobiz.id	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.173244953 CEST	1.1.1.1	192.168.2.7	0x469f	No error (0)	mail.artesconstrutora.com.br	pop.artesconstrutora.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.173244953 CEST	1.1.1.1	192.168.2.7	0x469f	No error (0)	pop.artesconstrutora.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.173244953 CEST	1.1.1.1	192.168.2.7	0x469f	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.173346043 CEST	1.1.1.1	192.168.2.7	0x469f	No error (0)	mail.artesconstrutora.com.br	pop.artesconstrutora.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.173346043 CEST	1.1.1.1	192.168.2.7	0x469f	No error (0)	pop.artesconstrutora.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.173346043 CEST	1.1.1.1	192.168.2.7	0x469f	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.178069115 CEST	1.1.1.1	192.168.2.7	0x8220	No error (0)	smtp.ns.sympatico.ca	smtp.bellaliant.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.178069115 CEST	1.1.1.1	192.168.2.7	0x8220	No error (0)	smtp.bellaliant.net	smtp-aliant.bell.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.178069115 CEST	1.1.1.1	192.168.2.7	0x8220	No error (0)	smtp-aliant.bell.net		209.71.208.9	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.374002934 CEST	1.1.1.1	192.168.2.7	0x4b29	No error (0)	student.itera.ac.id		103.211.143.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.374022961 CEST	1.1.1.1	192.168.2.7	0x4b29	No error (0)	student.itera.ac.id		103.211.143.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.646804094 CEST	1.1.1.1	192.168.2.7	0x5e28	No error (0)	smtp.evoluaeducacao.com.br	pop.evoluaeducacao.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.646804094 CEST	1.1.1.1	192.168.2.7	0x5e28	No error (0)	pop.evoluaeducacao.com.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.646804094 CEST	1.1.1.1	192.168.2.7	0x5e28	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.646816969 CEST	1.1.1.1	192.168.2.7	0x5e28	No error (0)	smtp.evoluaeducacao.com.br	pop.evoluaeducacao.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.646816969 CEST	1.1.1.1	192.168.2.7	0x5e28	No error (0)	pop.evoluaeducacao.com.br	mail.ita.locaweb.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:42.646816969 CEST	1.1.1.1	192.168.2.7	0x5e28	No error (0)	mail.ita.locaweb.com.br		191.252.112.194	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.665175915 CEST	1.1.1.1	192.168.2.7	0x562	Name error (3)	int.efoa.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.665268898 CEST	1.1.1.1	192.168.2.7	0x562	Name error (3)	int.efoa.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:42.665281057 CEST	1.1.1.1	192.168.2.7	0x562	Name error (3)	int.efoa.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.143042088 CEST	1.1.1.1	192.168.2.7	0x5738	Name error (3)	out.fcgnfndhj.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.143613100 CEST	1.1.1.1	192.168.2.7	0x513f	Name error (3)	out.pop.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.145720959 CEST	1.1.1.1	192.168.2.7	0x7f85	No error (0)	mxlb.ispgateway.de		80.67.18.126	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.146044016 CEST	1.1.1.1	192.168.2.7	0xa43d	Name error (3)	secure.chadwellacademy.co.uk	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.146312952 CEST	1.1.1.1	192.168.2.7	0x5c82	Name error (3)	mail.independent.ie	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.148646116 CEST	1.1.1.1	192.168.2.7	0x1b4b	Name error (3)	securesmtp.escaparatedeharo.com.mx	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.149952888 CEST	1.1.1.1	192.168.2.7	0x7bb9	Name error (3)	secure.home-assist.com.au	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.151269913 CEST	1.1.1.1	192.168.2.7	0xebfe	No error (0)	meetinleeds.co.uk		141.193.213.10	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.151269913 CEST	1.1.1.1	192.168.2.7	0xebfe	No error (0)	meetinleeds.co.uk		141.193.213.11	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.152465105 CEST	1.1.1.1	192.168.2.7	0xcdd3	Name error (3)	minicat.es	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.156608105 CEST	1.1.1.1	192.168.2.7	0x1017	Name error (3)	securesmtp.sisnet.ssku.k12.ca.us	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.165155888 CEST	1.1.1.1	192.168.2.7	0xf859	No error (0)	nordnet.fr		79.141.193.68	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.165793896 CEST	1.1.1.1	192.168.2.7	0xedb7	Name error (3)	secure.manx.neta	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.172082901 CEST	1.1.1.1	192.168.2.7	0x7ef9	Name error (3)	smtp.mtcqfs.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.174870968 CEST	1.1.1.1	192.168.2.7	0xb23f	Name error (3)	secure.scoala174.ro	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.181420088 CEST	1.1.1.1	192.168.2.7	0x4c1f	No error (0)	securesmtp.gjs.de		185.53.177.50	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.182475090 CEST	1.1.1.1	192.168.2.7	0x220d	No error (0)	dacoll.co.uk		205.196.214.70	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.191083908 CEST	1.1.1.1	192.168.2.7	0xac73	No error (0)	rg.com.br		192.0.78.24	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.191083908 CEST	1.1.1.1	192.168.2.7	0xac73	No error (0)	rg.com.br		192.0.78.25	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.193855047 CEST	1.1.1.1	192.168.2.7	0x4aa2	Name error (3)	mail.caudlept.plus.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.201694012 CEST	1.1.1.1	192.168.2.7	0x233a	Name error (3)	itelefonica.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.206075907 CEST	1.1.1.1	192.168.2.7	0xfa8d	No error (0)	out.eresmas.com	web.eresmas.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.206075907 CEST	1.1.1.1	192.168.2.7	0xfa8d	No error (0)	web.eresmas.com		62.37.237.60	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.206701040 CEST	1.1.1.1	192.168.2.7	0xfff9	No error (0)	mail.modular.com.br	ghs.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.206701040 CEST	1.1.1.1	192.168.2.7	0xfff9	No error (0)	ghs.googlehosted.com		142.250.74.211	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.211654902 CEST	1.1.1.1	192.168.2.7	0x69a9	No error (0)	smtp.internouno.it		62.149.128.202	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.211654902 CEST	1.1.1.1	192.168.2.7	0x69a9	No error (0)	smtp.internouno.it		62.149.128.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.211654902 CEST	1.1.1.1	192.168.2.7	0x69a9	No error (0)	smtp.internouno.it		62.149.128.200	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.211654902 CEST	1.1.1.1	192.168.2.7	0x69a9	No error (0)	smtp.internouno.it		62.149.128.201	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.215465069 CEST	1.1.1.1	192.168.2.7	0xd040	No error (0)	mail.progmasters.hu	progmasters.hu		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.215465069 CEST	1.1.1.1	192.168.2.7	0xd040	No error (0)	progmasters.hu		54.216.72.17	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.215630054 CEST	1.1.1.1	192.168.2.7	0x46de	No error (0)	buziaczki.pl		51.77.61.35	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.222603083 CEST	1.1.1.1	192.168.2.7	0x4a28	No error (0)	mx.mix-good.com		167.172.23.243	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.246293068 CEST	1.1.1.1	192.168.2.7	0xfefb	No error (0)	cnsl.com.br		75.2.70.75	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.246293068 CEST	1.1.1.1	192.168.2.7	0xfefb	No error (0)	cnsl.com.br		99.83.190.102	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.271159887 CEST	1.1.1.1	192.168.2.7	0x4f02	Name error (3)	out.sketchish.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.272420883 CEST	1.1.1.1	192.168.2.7	0x43b2	Name error (3)	out.tvdestaque15.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.276170015 CEST	1.1.1.1	192.168.2.7	0xc138	Name error (3)	secure.khemistrinola.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.289900064 CEST	1.1.1.1	192.168.2.7	0x1e49	No error (0)	mail.irs.gov	mail.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.289900064 CEST	1.1.1.1	192.168.2.7	0x1e49	No error (0)	mail.office365.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.289900064 CEST	1.1.1.1	192.168.2.7	0x1e49	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.289900064 CEST	1.1.1.1	192.168.2.7	0x1e49	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.289900064 CEST	1.1.1.1	192.168.2.7	0x1e49	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.289900064 CEST	1.1.1.1	192.168.2.7	0x1e49	No error (0)	FRA-efz.ms-acdc.office.com		52.98.179.178	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.289900064 CEST	1.1.1.1	192.168.2.7	0x1e49	No error (0)	FRA-efz.ms-acdc.office.com		52.98.253.146	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.289900064 CEST	1.1.1.1	192.168.2.7	0x1e49	No error (0)	FRA-efz.ms-acdc.office.com		52.98.178.210	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.330144882 CEST	1.1.1.1	192.168.2.7	0xe925	No error (0)	seekersrecruitment.com	traff-5.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.330144882 CEST	1.1.1.1	192.168.2.7	0xe925	No error (0)	traff-5.hugedomains.com	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.330144882 CEST	1.1.1.1	192.168.2.7	0xe925	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		54.161.222.85	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.330144882 CEST	1.1.1.1	192.168.2.7	0xe925	No error (0)	hdr-nlb7-aebd5d615260636b.elb.us-east-1.amazonaws.com		34.205.242.146	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.396449089 CEST	1.1.1.1	192.168.2.7	0x1a9e	No error (0)	sil.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.482731104 CEST	1.1.1.1	192.168.2.7	0xd87a	Name error (3)	securesmtp.pentagon.co.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.524224997 CEST	1.1.1.1	192.168.2.7	0x7d89	No error (0)	smtp.nsgi.com	webhost131.cloud9ssl.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.524224997 CEST	1.1.1.1	192.168.2.7	0x7d89	No error (0)	webhost131.cloud9ssl.com		216.203.60.42	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.525726080 CEST	1.1.1.1	192.168.2.7	0x34cc	Name error (3)	smtp.hsbc.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.532766104 CEST	1.1.1.1	192.168.2.7	0x2e31	No error (0)	studenti.unipd.it		147.162.235.155	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.557348967 CEST	1.1.1.1	192.168.2.7	0x280d	Name error (3)	smtp.sseduks.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.626467943 CEST	1.1.1.1	192.168.2.7	0x8f7e	Name error (3)	email.tst	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.629956961 CEST	1.1.1.1	192.168.2.7	0x574f	No error (0)	smtp.ma.point.ne.jp	smtp2.cm.dream.jp		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.629956961 CEST	1.1.1.1	192.168.2.7	0x574f	No error (0)	smtp2.cm.dream.jp		59.157.128.15	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.667915106 CEST	1.1.1.1	192.168.2.7	0xbc95	Name error (3)	secure.holland1.plus.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.709470987 CEST	1.1.1.1	192.168.2.7	0x5604	Name error (3)	out.ptyinvestor.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.729062080 CEST	1.1.1.1	192.168.2.7	0x846f	No error (0)	mail.izabelfailde.com.br	smtp-vip.kinghost.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.729062080 CEST	1.1.1.1	192.168.2.7	0x846f	No error (0)	smtp-vip.kinghost.net		191.6.216.99	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.729062080 CEST	1.1.1.1	192.168.2.7	0x846f	No error (0)	smtp-vip.kinghost.net		191.6.216.100	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.754064083 CEST	1.1.1.1	192.168.2.7	0x98c	Name error (3)	securesmtp.wsadv.com.br	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.796078920 CEST	1.1.1.1	192.168.2.7	0x6496	Name error (3)	mail.aquabins.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.806062937 CEST	1.1.1.1	192.168.2.7	0x5845	Name error (3)	out.daringtouch.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.839580059 CEST	1.1.1.1	192.168.2.7	0x6e5d	Server failure (2)	smtp.ferretforce.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.884569883 CEST	1.1.1.1	192.168.2.7	0xfd42	Name error (3)	securesmtp.mokapos.com	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.898816109 CEST	1.1.1.1	192.168.2.7	0x1aa4	No error (0)	mail.grupoembracon.com.br	pop.grupoembracon.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.898816109 CEST	1.1.1.1	192.168.2.7	0x1aa4	No error (0)	pop.grupoembracon.com.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.898816109 CEST	1.1.1.1	192.168.2.7	0x1aa4	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:43.946934938 CEST	1.1.1.1	192.168.2.7	0x22d4	No error (0)	smtp.fdte.org.br	pop.fdte.org.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.946934938 CEST	1.1.1.1	192.168.2.7	0x22d4	No error (0)	pop.fdte.org.br	mail.ita.locamail.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:43.946934938 CEST	1.1.1.1	192.168.2.7	0x22d4	No error (0)	mail.ita.locamail.com.br		191.252.112.195	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.032129049 CEST	1.1.1.1	192.168.2.7	0x892	No error (0)	out.supereva.it	d1881mr5w2vitt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:44.032129049 CEST	1.1.1.1	192.168.2.7	0x892	No error (0)	d1881mr5w2vitt.cloudfront.net		18.245.46.38	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.032129049 CEST	1.1.1.1	192.168.2.7	0x892	No error (0)	d1881mr5w2vitt.cloudfront.net		18.245.46.103	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.032129049 CEST	1.1.1.1	192.168.2.7	0x892	No error (0)	d1881mr5w2vitt.cloudfront.net		18.245.46.12	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.032129049 CEST	1.1.1.1	192.168.2.7	0x892	No error (0)	d1881mr5w2vitt.cloudfront.net		18.245.46.88	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.041183949 CEST	1.1.1.1	192.168.2.7	0xb0f5	No error (0)	mail.joho-kochi.or.jp		202.218.119.152	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.100553036 CEST	1.1.1.1	192.168.2.7	0xeab2	No error (0)	mail.masterop.com.br		162.240.111.46	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.132559061 CEST	1.1.1.1	192.168.2.7	0x5e7	Name error (3)	securesmtp.dvwr.de	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.141535997 CEST	1.1.1.1	192.168.2.7	0xc958	No error (0)	mx4.eganet.go.tz		196.192.79.83	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.148696899 CEST	1.1.1.1	192.168.2.7	0x6ce3	Name error (3)	securesmtp.tematik.com.tr	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.152287006 CEST	1.1.1.1	192.168.2.7	0x1335	No error (0)	smtp.habitacional.com.br	smtp.emailemnuvem.com.br		CNAME (Canonical name)	IN (0x0001)	false
Jun 4, 2024 12:44:44.152287006 CEST	1.1.1.1	192.168.2.7	0x1335	No error (0)	smtp.emailemnuvem.com.br		168.0.132.203	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.688076973 CEST	1.1.1.1	192.168.2.7	0x915e	Name error (3)	securesmtp.smlindustries.in	none	none	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.718914986 CEST	1.1.1.1	192.168.2.7	0xb59d	No error (0)	earth.za.com		41.185.8.132	A (IP address)	IN (0x0001)	false
Jun 4, 2024 12:44:44.719053984 CEST	1.1.1.1	192.168.2.7	0xb59d	No error (0)	earth.za.com		41.185.8.132	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	06:42:35
Start date:	04/06/2024
Path:	C:\Users\user\Desktop\cbIcBAgY5W.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\cbIcBAgY5W.exe"
Imagebase:	0x7ff764050000
File size:	920'370 bytes
MD5 hash:	1B1ECD323162C054864B63ADA693CD71
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	06:42:36
Start date:	04/06/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user~1\AppData\Local\Temp\RarSFX0\1.bat" "
Imagebase:	0x7ff627c10000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	06:42:36
Start date:	04/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:42:36
Start date:	04/06/2024
Path:	C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe
Wow64 process (32bit):	false
Commandline:	work.exe -priverdD
Imagebase:	0x7ff6e9930000
File size:	464'808 bytes
MD5 hash:	405B7FBE8C0ED98620064F0CD80F24C4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000004.00000003.1358655589.000001E3D0E21000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 8%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	06:42:36
Start date:	04/06/2024
Path:	C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\RarSFX1\jergs.exe"
Imagebase:	0x400000
File size:	16'384 bytes
MD5 hash:	C661A77C31F83C413A96B5537AD31989
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000005.00000000.1359592703.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000005.00000002.1363866088.00000000004EB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000005.00000002.1363751487.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 82%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	06:42:37
Start date:	04/06/2024
Path:	C:\ProgramData\ooxxi\ealfvjp.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\ooxxi\ealfvjp.exe start2
Imagebase:	0x400000
File size:	16'384 bytes
MD5 hash:	C661A77C31F83C413A96B5537AD31989
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000006.00000000.1365821763.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000006.00000002.2603847749.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: C:\ProgramData\ooxxi\ealfvjp.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 82%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	11.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	27.8%
Total number of Nodes:	2000
Total number of Limit Nodes:	25

Executed Functions

Function 00007FF76407B190 Relevance: 125.7, APIs: 61, Strings: 10, Instructions: 1421windowfilesleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76405255C: GetDlgItem.USER32 ref: 00007FF7640525AC
Part of subcall function 00007FF76405255C: SetDlgItemTextW.USER32 ref: 00007FF7640525C8

EndDialog.USER32 ref: 00007FF76407B2D0
SetDlgItemTextW.USER32 ref: 00007FF76407B320
GetMessageW.USER32 ref: 00007FF76407B350
IsDialogMessageW.USER32 ref: 00007FF76407B369
TranslateMessage.USER32 ref: 00007FF76407B37B
DispatchMessageW.USER32 ref: 00007FF76407B389
EndDialog.USER32 ref: 00007FF76407B3D3
GetDlgItem.USER32 ref: 00007FF76407B410
IsDlgButtonChecked.USER32 ref: 00007FF76407B431
IsDlgButtonChecked.USER32 ref: 00007FF76407B449
SetFocus.USER32 ref: 00007FF76407B452
GetLastError.KERNEL32 ref: 00007FF76407B634
GetLastError.KERNEL32 ref: 00007FF76407B665
GetTickCount.KERNEL32 ref: 00007FF76407B68B
GetLastError.KERNEL32 ref: 00007FF76407B6F5
GetCommandLineW.KERNEL32 ref: 00007FF76407B841
CreateFileMappingW.KERNEL32 ref: 00007FF76407B900
MapViewOfFile.KERNEL32 ref: 00007FF76407B923
ShellExecuteExW.SHELL32 ref: 00007FF76407B95B
Sleep.KERNEL32 ref: 00007FF76407B9B6
UnmapViewOfFile.KERNEL32 ref: 00007FF76407B9DF
CloseHandle.KERNEL32 ref: 00007FF76407B9E8
SetDlgItemTextW.USER32 ref: 00007FF76407BCDE
DialogBoxParamW.USER32 ref: 00007FF76407C0D7
EndDialog.USER32 ref: 00007FF76407C0EF
EnableWindow.USER32 ref: 00007FF76407C2A6
IsDlgButtonChecked.USER32 ref: 00007FF76407C2F8
WaitForInputIdle.USER32 ref: 00007FF76407B9A3

Part of subcall function 00007FF76406AAE0: LoadStringW.USER32 ref: 00007FF76406AB67
Part of subcall function 00007FF76406AAE0: LoadStringW.USER32 ref: 00007FF76406AB80

IsDlgButtonChecked.USER32 ref: 00007FF76407BEC3
SendDlgItemMessageW.USER32 ref: 00007FF76407BEEA
GetDlgItem.USER32 ref: 00007FF76407BEF8
IsDlgButtonChecked.USER32 ref: 00007FF76407BF12
GetDlgItem.USER32 ref: 00007FF76407BF4F
SetDlgItemTextW.USER32 ref: 00007FF76407BFEC
SetDlgItemTextW.USER32 ref: 00007FF76407C004
SetDlgItemTextW.USER32 ref: 00007FF76407C321
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407C363
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407C369
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407C36F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407C375
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407C37B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407C381
SendDlgItemMessageW.USER32 ref: 00007FF76407C449
EndDialog.USER32 ref: 00007FF76407C463
GetDlgItem.USER32 ref: 00007FF76407C491
SetFocus.USER32 ref: 00007FF76407C49A
SendDlgItemMessageW.USER32 ref: 00007FF76407C53E
FindFirstFileW.KERNEL32 ref: 00007FF76407C562
FindClose.KERNEL32 ref: 00007FF76407C68A
SendDlgItemMessageW.USER32 ref: 00007FF76407C7AF

Part of subcall function 00007FF76405129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF764051396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407CAA9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407CAAF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407CAB5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407CABB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407CAC1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407CAC7

Strings

-el -s2 "-d%s" "-sp%s", xrefs: 00007FF76407B799
STARTDLG, xrefs: 00007FF76407B1CA
p, xrefs: 00007FF76407B7AB
%s %s, xrefs: 00007FF76407C6D9, 00007FF76407C946
@, xrefs: 00007FF76407B7B6
winrarsfxmappingfile.tmp, xrefs: 00007FF76407B8E0
runas, xrefs: 00007FF76407B7C9
__tmp_rar_sfx_access_check_, xrefs: 00007FF76407B6A9
REPLACEFILEDLG, xrefs: 00007FF76407C3D3
LICENSEDLG, xrefs: 00007FF76407C0C9

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Item$_invalid_parameter_noinfo_noreturn$Message$DialogText$ButtonChecked$FileSend$ErrorLast$CloseFindFocusLoadStringView$CommandConcurrency::cancel_current_taskCountCreateDispatchEnableExecuteFirstHandleIdleInputLineMappingParamShellSleepTickTranslateUnmapWaitWindow
String ID: %s %s$-el -s2 "-d%s" "-sp%s"$@$LICENSEDLG$REPLACEFILEDLG$STARTDLG$__tmp_rar_sfx_access_check_$p$runas$winrarsfxmappingfile.tmp
API String ID: 2128803032-2702805183
Opcode ID: f59b834086376e339c83917a63575836ec3daf488d9ea16da4cbcd7f0faab137
Instruction ID: c0f5ccb75d4565c26e5a5c88505accce412546a75b991ae55b53f54484a9d53a
Opcode Fuzzy Hash: f59b834086376e339c83917a63575836ec3daf488d9ea16da4cbcd7f0faab137
Instruction Fuzzy Hash: D1D2C262A0C6A2D1EA20BF26E8C43F9A361FF85784FD045B5DA4D076A6DF3CE544C721

Function 00007FF76407CE88 Relevance: 66.7, APIs: 27, Strings: 10, Instructions: 1963fileCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF76407D5F3
IsDlgButtonChecked.USER32 ref: 00007FF76407D626
IsDlgButtonChecked.USER32 ref: 00007FF76407D655
SHFileOperationW.SHELL32 ref: 00007FF76407D9BB
MoveFileW.KERNEL32 ref: 00007FF76407DB4B
MoveFileExW.KERNEL32 ref: 00007FF76407DB69
GetTempPathW.KERNEL32 ref: 00007FF76407DC49

Part of subcall function 00007FF764051FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764051FFB

EndDialog.USER32 ref: 00007FF76407DFCA
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF76407EEE3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EEEF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF07
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF0D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF13
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF19
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF1F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF25
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF2B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF31
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF37
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF3D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF43
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF49
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF4F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF55
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407EF5B
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF76407EF67
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF76407EF73

Strings

.tmp, xrefs: 00007FF76407DA85
MIN, xrefs: 00007FF76407EAE5, 00007FF76407EAF4
HIDE, xrefs: 00007FF76407E9E5, 00007FF76407E9F4
lnk, xrefs: 00007FF76407E3CA, 00007FF76407E3D9
@set:user, xrefs: 00007FF76407DD96, 00007FF76407DDA5
<br>, xrefs: 00007FF76407D6DA, 00007FF76407D6E9
MAX, xrefs: 00007FF76407EA82, 00007FF76407EA91
Software\Microsoft\Windows\CurrentVersion, xrefs: 00007FF76407D501
ProgramFilesDir, xrefs: 00007FF76407D4F0
.lnk, xrefs: 00007FF76407E406, 00007FF76407E415

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskFile$ButtonCheckedMove$DialogItemOperationPathTemp
String ID: .lnk$.tmp$<br>$@set:user$HIDE$MAX$MIN$ProgramFilesDir$Software\Microsoft\Windows\CurrentVersion$lnk
API String ID: 2285161090-3916287355
Opcode ID: 518ef0c81222691b4379469e4424a844ddd7281ba2e05ca043482167130635dc
Instruction ID: 99b4116ae041fbfa42e059647a84ff9272eddf281a1efca91b3ef015050c8026
Opcode Fuzzy Hash: 518ef0c81222691b4379469e4424a844ddd7281ba2e05ca043482167130635dc
Instruction Fuzzy Hash: 7413AC72B04BA2D9EB10AF66D8802FC67A1FF40398F901576DA5D17AD9DF38E584C360

Function 00007FF764080754 Relevance: 45.9, APIs: 21, Strings: 5, Instructions: 380
filetimewindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF76406DFD0: GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E018
Part of subcall function 00007FF76406DFD0: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E030
Part of subcall function 00007FF76406DFD0: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E05D

Part of subcall function 00007FF7640662DC: GetCurrentDirectoryW.KERNEL32 ref: 00007FF7640662F2
Part of subcall function 00007FF7640662DC: GetCurrentDirectoryW.KERNEL32 ref: 00007FF76406632C

Part of subcall function 00007FF76407946C: OleInitialize.OLE32 ref: 00007FF764079486
Part of subcall function 00007FF76407946C: SHGetMalloc.SHELL32 ref: 00007FF7640794D4

GetCommandLineW.KERNEL32 ref: 00007FF76408096E
OpenFileMappingW.KERNEL32 ref: 00007FF764080A07
MapViewOfFile.KERNEL32 ref: 00007FF764080A30
UnmapViewOfFile.KERNEL32 ref: 00007FF764080A46
MapViewOfFile.KERNEL32 ref: 00007FF764080A63
UnmapViewOfFile.KERNEL32 ref: 00007FF764080ACA
CloseHandle.KERNEL32 ref: 00007FF764080AD3
SetEnvironmentVariableW.KERNEL32 ref: 00007FF764080BAD
GetLocalTime.KERNEL32 ref: 00007FF764080BB8
swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF764080C13
SetEnvironmentVariableW.KERNEL32 ref: 00007FF764080C26
GetModuleHandleW.KERNEL32 ref: 00007FF764080C2E
LoadIconW.USER32 ref: 00007FF764080C4D
DialogBoxParamW.USER32 ref: 00007FF764080CB6
SleepEx.KERNEL32 ref: 00007FF764080CE6
DeleteObject.GDI32 ref: 00007FF764080D0D
DeleteObject.GDI32 ref: 00007FF764080D1F
CloseHandle.KERNEL32 ref: 00007FF764080D67
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764080DD7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764080DDD
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764080DE3

Part of subcall function 00007FF76407FD0C: SetEnvironmentVariableW.KERNEL32 ref: 00007FF76407FD43
Part of subcall function 00007FF76407FD0C: SetEnvironmentVariableW.KERNEL32 ref: 00007FF76407FDBC

Strings

sfxstime, xrefs: 00007FF764080C1F
STARTDLG, xrefs: 00007FF764080CA5
winrarsfxmappingfile.tmp, xrefs: 00007FF7640809F9
%4d-%02d-%02d-%02d-%02d-%02d-%03d, xrefs: 00007FF764080C02
sfxname, xrefs: 00007FF764080B9B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: File$EnvironmentHandleVariableView$_invalid_parameter_noinfo_noreturn$AddressCloseCurrentDeleteDirectoryModuleObjectProcUnmap$CommandDialogIconInitializeLineLoadLocalMallocMappingOpenParamSleepTimeswprintf
String ID: %4d-%02d-%02d-%02d-%02d-%02d-%03d$STARTDLG$sfxname$sfxstime$winrarsfxmappingfile.tmp
API String ID: 1048086575-3710569615
Opcode ID: 3dcdb7318393e105a338e8cb32d491fb5f6ba1dd272b7644bf1fc14c80c861ed
Instruction ID: ccb328b2401405d2717f759e7dd9eae8f18cbb081305d869fe5130a92e86ac9f
Opcode Fuzzy Hash: 3dcdb7318393e105a338e8cb32d491fb5f6ba1dd272b7644bf1fc14c80c861ed
Instruction Fuzzy Hash: 57129321A19BA2C5EF10BF26E9C12B9B361FF85784F804275DA9D57AA5DF3CE140C320

Function 00007FF76406A4AC Relevance: 23.0, APIs: 11, Strings: 2, Instructions: 250
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF76406A504

Part of subcall function 00007FF764070F68: WideCharToMultiByte.KERNEL32 ref: 00007FF764070F99

SetDlgItemTextW.USER32 ref: 00007FF76406A573
GetWindowRect.USER32 ref: 00007FF76406A5AD
GetClientRect.USER32 ref: 00007FF76406A5BB
GetWindowLongPtrW.USER32 ref: 00007FF76406A66C
GetWindowRect.USER32 ref: 00007FF76406A6B2
SetDlgItemTextW.USER32 ref: 00007FF76406A6EC
GetSystemMetrics.USER32 ref: 00007FF76406A6F7
GetWindow.USER32 ref: 00007FF76406A708
GetWindowRect.USER32 ref: 00007FF76406A746
GetWindow.USER32 ref: 00007FF76406A808

Strings

CAPTION, xrefs: 00007FF76406A6CF
$%s:, xrefs: 00007FF76406A4EF

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Window$Rect$ItemText$ByteCharClientLongMetricsMultiSystemWideswprintf
String ID: $%s:$CAPTION
API String ID: 1936833115-404845831
Opcode ID: 1224945cd41bf140f0dcf37f1b002595631e4f701a4b658f84a72e9da714e3d9
Instruction ID: 82dbb1687e12bbbf8475a035d4f53986be06e9f459d802918c9546445f8a7e6f
Opcode Fuzzy Hash: 1224945cd41bf140f0dcf37f1b002595631e4f701a4b658f84a72e9da714e3d9
Instruction Fuzzy Hash: E9913B32B18261CAE718EF3AE840669E7A1FB85784F905075EE4E57B58CF3DE805CB50

Function 00007FF764078624 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 101
memorywindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindResourceW.KERNELBASE ref: 00007FF76407863D
SizeofResource.KERNEL32 ref: 00007FF764078659
LoadResource.KERNEL32 ref: 00007FF764078673
LockResource.KERNEL32 ref: 00007FF764078685
GlobalAlloc.KERNELBASE ref: 00007FF7640786A6
GlobalLock.KERNEL32 ref: 00007FF7640786BB
GdipAlloc.GDIPLUS ref: 00007FF7640786FE
GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF764078769
GlobalUnlock.KERNEL32 ref: 00007FF76407878C
GlobalFree.KERNEL32 ref: 00007FF764078795

Strings

PNG, xrefs: 00007FF76407862F

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: GlobalResource$AllocGdipLock$BitmapCreateFindFreeFromLoadSizeofUnlock
String ID: PNG
API String ID: 541704414-364855578
Opcode ID: c8606208415c3a11eb94d5df8c8f8595ea54109f2541637b646828bce78d4013
Instruction ID: fd97cd5b75765c0ddccf42c2018f8d303d81790b8487c8ba1dac6c312d1266f1
Opcode Fuzzy Hash: c8606208415c3a11eb94d5df8c8f8595ea54109f2541637b646828bce78d4013
Instruction Fuzzy Hash: E9411E26A19B62C1EE04AF57D894779A3A0BF88B90F844475CE0E47764EF7CE848C721

Function 00007FF76405F930 Relevance: 17.2, APIs: 8, Strings: 1, Instructions: 1417COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764061239
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406123F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764061245
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406124B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764061251
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764061257
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406125D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764061263

Strings

__tmp_reference_source_, xrefs: 00007FF76405FCCF, 00007FF76405FCDE

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: __tmp_reference_source_
API String ID: 3668304517-685763994
Opcode ID: 838cf9e537b4fb5df7b8e92982fe36efba4283ecfa9d91ae07b065b962de51db
Instruction ID: 5e48a70410e5c2679102dfa2589d001740a31e177ded4911fb78352c7acb8c3e
Opcode Fuzzy Hash: 838cf9e537b4fb5df7b8e92982fe36efba4283ecfa9d91ae07b065b962de51db
Instruction Fuzzy Hash: C7E28562B0C6D2E2EA64EF26D1803AEE761FB81744F804176DB9E576A5CF3CE454C720

Function 00007FF764054840 Relevance: 12.1, APIs: 5, Strings: 1, Instructions: 1624COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405511E
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764055124
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405512A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764055E16
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764055E1C

Strings

CMT, xrefs: 00007FF7640559B2

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: CMT
API String ID: 3668304517-2756464174
Opcode ID: c2ed92b8c1219768cd7922760b7d4e0c6ec8c5bfb85c042814717c3d5ffeec4c
Instruction ID: 3ae53144eb7af40365296ec38cf828fad3610338c0adb30d0482a4b15ce80241
Opcode Fuzzy Hash: c2ed92b8c1219768cd7922760b7d4e0c6ec8c5bfb85c042814717c3d5ffeec4c
Instruction Fuzzy Hash: B9E20F22B086A2D6EB18EF76D6903FEA7A1FB45384F800475DA5E53696DF3CE454C320

Function 00007FF7640640BC Relevance: 10.7, APIs: 7, Instructions: 153
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNELBASE ref: 00007FF76406410B
FindFirstFileW.KERNEL32 ref: 00007FF76406415E
GetLastError.KERNEL32 ref: 00007FF7640641AF
FindNextFileW.KERNEL32 ref: 00007FF7640641D7
GetLastError.KERNEL32 ref: 00007FF7640641E5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406430F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764064315

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FileFind$ErrorFirstLast_invalid_parameter_noinfo_noreturn$Next
String ID:
API String ID: 474548282-0
Opcode ID: ee5b8a3817742aa34bf8fe6f457784b4fe5053db0f5ec5b81f22969634733f46
Instruction ID: 2b02ceaa226eed1658ca6068c69165a2b7e73d312a020015f08a1886738bc495
Opcode Fuzzy Hash: ee5b8a3817742aa34bf8fe6f457784b4fe5053db0f5ec5b81f22969634733f46
Instruction Fuzzy Hash: BB61F732B18A52E1DA10AF26E8D027DA361FB857A4F905371EAAE177D9DF3CD484C710

Function 00007FF764055E24 Relevance: 7.6, APIs: 3, Strings: 1, Instructions: 586
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

CMT, xrefs: 00007FF7640559B2, 00007FF76405675B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID: CMT
API String ID: 0-2756464174
Opcode ID: e58ea5d07e30f29eaf86f68642e1cb38961aa44a7661b56cd2ad864dc5164ece
Instruction ID: 322e42825e381435f27632ec49e82e3d056fb1546cd6c219ec2362c6cf6c24fa
Opcode Fuzzy Hash: e58ea5d07e30f29eaf86f68642e1cb38961aa44a7661b56cd2ad864dc5164ece
Instruction Fuzzy Hash: 75420022B096A2DAEB1CEF76C2902FDB7A1EB51344F801576CB5E53696DF38E518C310

Function 00007FF764064928 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Create$CriticalEventInitializeSectionSemaphore
String ID:
API String ID: 3340455307-0
Opcode ID: da87a57a9ac39f65141c41a007b89939efb02abc0997ac81e55b16170c34fd38
Instruction ID: dcb03dca3b1e02d22331021f151d1154b99d7e55c6859713399ac718b19eb9f4
Opcode Fuzzy Hash: da87a57a9ac39f65141c41a007b89939efb02abc0997ac81e55b16170c34fd38
Instruction Fuzzy Hash: 73412932B15662E6FB64EF23A99076AA252FBC4784F845034DE0F17794CE3CE446C758

Function 00007FF76406DFD0 Relevance: 143.9, APIs: 16, Strings: 66, Instructions: 440
libraryfileloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E018
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E030
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E05D
CreateFileW.KERNEL32 ref: 00007FF76406E3F0
SetFilePointer.KERNEL32 ref: 00007FF76406E40E
ReadFile.KERNEL32 ref: 00007FF76406E436

Part of subcall function 00007FF76406DFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF76406DDDF

CompareStringW.KERNELBASE ref: 00007FF76406E559
CloseHandle.KERNEL32 ref: 00007FF76406E4F3

Part of subcall function 00007FF764051FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764051FFB

Part of subcall function 00007FF7640651A4: GetVersionExW.KERNEL32 ref: 00007FF7640651D5

Part of subcall function 00007FF76406DFD0: LoadLibraryW.KERNELBASE ref: 00007FF76406DEFF
Part of subcall function 00007FF76406DFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406DFB5
Part of subcall function 00007FF76406DFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406DFBB
Part of subcall function 00007FF76406DFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406DFC1
Part of subcall function 00007FF76406DFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406DFC7

AllocConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E74B
GetCurrentProcessId.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E755
AttachConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E75D
GetStdHandle.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E780
WriteConsoleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E799
Sleep.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E7A4
FreeConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF76406E7AA
ExitProcess.KERNEL32 ref: 00007FF76406E7BB

Strings

ntshrui.dll, xrefs: 00007FF76406E12B
srvcli.dll, xrefs: 00007FF76406E221
netapi32.dll, xrefs: 00007FF76406E16B
rasadhlp.dll, xrefs: 00007FF76406E30F
RpcRtRemote.dll, xrefs: 00007FF76406E363
psapi.dll, xrefs: 00007FF76406E115
mpr.dll, xrefs: 00007FF76406E291
kernel32, xrefs: 00007FF76406E011
cryptsp.dll, xrefs: 00007FF76406E355
SSPICLI.DLL, xrefs: 00007FF76406E09C
WINNSI.DLL, xrefs: 00007FF76406E275
mlang.dll, xrefs: 00007FF76406E2BB
ws2help.dll, xrefs: 00007FF76406E10A
XmlLite.dll, xrefs: 00007FF76406E339
sfc_os.dll, xrefs: 00007FF76406E091
userenv.dll, xrefs: 00007FF76406E15D
comres.dll, xrefs: 00007FF76406E0F4
profapi.dll, xrefs: 00007FF76406E205
propsys.dll, xrefs: 00007FF76406E2AD
UXTheme.dll, xrefs: 00007FF76406E0B2
Please remove %s from %s folder. It is unsecure to run %s until it is done., xrefs: 00007FF76406E73B
DXGIDebug.dll, xrefs: 00007FF76406E086, 00007FF76406E5B6
ws2_32.dll, xrefs: 00007FF76406E0FF
dhcpcsvc.dll, xrefs: 00007FF76406E32B
shdocvw.dll, xrefs: 00007FF76406E179
clbcatq.dll, xrefs: 00007FF76406E0E9
msasn1.dll, xrefs: 00007FF76406E195
cryptbase.dll, xrefs: 00007FF76406E0C8
slc.dll, xrefs: 00007FF76406E23D
linkinfo.dll, xrefs: 00007FF76406E347
dwmapi.dll, xrefs: 00007FF76406E0BD, 00007FF76406E661
SetDefaultDllDirectories, xrefs: 00007FF76406E053
uxtheme.dll, xrefs: 00007FF76406E66D
secur32.dll, xrefs: 00007FF76406E1CD
peerdist.dll, xrefs: 00007FF76406E38D
crypt32.dll, xrefs: 00007FF76406E187
wkscli.dll, xrefs: 00007FF76406E2E5
lpk.dll, xrefs: 00007FF76406E0D3
devrtl.dll, xrefs: 00007FF76406E29F
rsaenh.dll, xrefs: 00007FF76406E0A7
shell32.dll, xrefs: 00007FF76406E1BF
imageres.dll, xrefs: 00007FF76406E24B
setupapi.dll, xrefs: 00007FF76406E141
oleaccrc.dll, xrefs: 00007FF76406E1E9
WindowsCodecs.dll, xrefs: 00007FF76406E213
cryptui.dll, xrefs: 00007FF76406E1A3
dsrole.dll, xrefs: 00007FF76406E37F
samlib.dll, xrefs: 00007FF76406E2D7
dnsapi.DLL, xrefs: 00007FF76406E259
SetDllDirectoryW, xrefs: 00007FF76406E026
atl.dll, xrefs: 00007FF76406E136
cabinet.dll, xrefs: 00007FF76406E1DB
apphelp.dll, xrefs: 00007FF76406E14F
ntmarta.dll, xrefs: 00007FF76406E1F7
aclui.dll, xrefs: 00007FF76406E371
dfscli.dll, xrefs: 00007FF76406E2F3
wintrust.dll, xrefs: 00007FF76406E1B1
dhcpcsvc6.dll, xrefs: 00007FF76406E31D
version.dll, xrefs: 00007FF76406E07B
browcli.dll, xrefs: 00007FF76406E301
iphlpapi.DLL, xrefs: 00007FF76406E267
cscapi.dll, xrefs: 00007FF76406E22F
samcli.dll, xrefs: 00007FF76406E2C9
ieframe.dll, xrefs: 00007FF76406E120
usp10.dll, xrefs: 00007FF76406E0DE
netutils.dll, xrefs: 00007FF76406E283

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Console$FileHandle$AddressProcProcess$AllocAttachCloseCompareCreateCurrentDirectoryExitFreeLibraryLoadModulePointerReadSleepStringSystemVersionWrite
String ID: DXGIDebug.dll$Please remove %s from %s folder. It is unsecure to run %s until it is done.$RpcRtRemote.dll$SSPICLI.DLL$SetDefaultDllDirectories$SetDllDirectoryW$UXTheme.dll$WINNSI.DLL$WindowsCodecs.dll$XmlLite.dll$aclui.dll$apphelp.dll$atl.dll$browcli.dll$cabinet.dll$clbcatq.dll$comres.dll$crypt32.dll$cryptbase.dll$cryptsp.dll$cryptui.dll$cscapi.dll$devrtl.dll$dfscli.dll$dhcpcsvc.dll$dhcpcsvc6.dll$dnsapi.DLL$dsrole.dll$dwmapi.dll$ieframe.dll$imageres.dll$iphlpapi.DLL$kernel32$linkinfo.dll$lpk.dll$mlang.dll$mpr.dll$msasn1.dll$netapi32.dll$netutils.dll$ntmarta.dll$ntshrui.dll$oleaccrc.dll$peerdist.dll$profapi.dll$propsys.dll$psapi.dll$rasadhlp.dll$rsaenh.dll$samcli.dll$samlib.dll$secur32.dll$setupapi.dll$sfc_os.dll$shdocvw.dll$shell32.dll$slc.dll$srvcli.dll$userenv.dll$usp10.dll$uxtheme.dll$version.dll$wintrust.dll$wkscli.dll$ws2_32.dll$ws2help.dll
API String ID: 1496594111-2013832382
Opcode ID: f7f2a11762ce96c0b678dc2ee5f4093b28e28463b6618f01c06ebafbf4af03a3
Instruction ID: 04179cec972fd41dcbf59a44db4b37a25cad35d7578858c8fc0513e3e37f679e
Opcode Fuzzy Hash: f7f2a11762ce96c0b678dc2ee5f4093b28e28463b6618f01c06ebafbf4af03a3
Instruction Fuzzy Hash: F3323B31A09BA2E9EB11AF22EC801E9B3A4FF44354FD01276DA4D167A5EF3CD655C360

Function 00007FF7640698DC Relevance: 25.2, APIs: 3, Strings: 11, Instructions: 702COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF764068E58: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF764068F8D

_snwprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF764069F75
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406A42F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406A435

Part of subcall function 00007FF764070BBC: MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF764070B44), ref: 00007FF764070BE9

Strings

DIALOG, xrefs: 00007FF764069DCD
@%s:, xrefs: 00007FF764069F57
, xrefs: 00007FF764069DF9
RTL, xrefs: 00007FF764069F2E
STRINGS, xrefs: 00007FF764069DC1
*messages***, xrefs: 00007FF764069BC6
DIRECTION, xrefs: 00007FF764069DE5
MENU, xrefs: 00007FF764069DD9
*messages***, xrefs: 00007FF764069C04
$%s:, xrefs: 00007FF764069F50
,, xrefs: 00007FF764069FAA

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ByteCharConcurrency::cancel_current_taskMultiWide_snwprintf
String ID: $ ,$$%s:$*messages***$*messages***$@%s:$DIALOG$DIRECTION$MENU$RTL$STRINGS
API String ID: 3629253777-3268106645
Opcode ID: 72bbcf380aa8be2af92e72bf7cde0c18d88409a47336849dce4c5460a7e1df8e
Instruction ID: dc71c1ed8d4b7ed505bf592496e5ff84faf4c6e68ba66fcc4736111489c9c4ba
Opcode Fuzzy Hash: 72bbcf380aa8be2af92e72bf7cde0c18d88409a47336849dce4c5460a7e1df8e
Instruction Fuzzy Hash: 0262DD32B186A2E5EB10FF2AD4842BEA361FB41784FD05172DA4E17A95EF3CE544C760

Function 00007FF764081900 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 195
libraryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF764081558: DloadProtectSection.DELAYIMP ref: 00007FF7640815C9

RaiseException.KERNEL32 ref: 00007FF7640819A7
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF764081993

Part of subcall function 00007FF764081868: DloadProtectSection.DELAYIMP ref: 00007FF7640818C7

LoadLibraryExA.KERNELBASE ref: 00007FF764081A46
GetLastError.KERNEL32 ref: 00007FF764081A54
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF764081A86
RaiseException.KERNEL32 ref: 00007FF764081A9A

Strings

H, xrefs: 00007FF764081974

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: DloadSection$AccessExceptionProtectRaiseReleaseWrite$ErrorLastLibraryLoad
String ID: H
API String ID: 3432403771-2852464175
Opcode ID: cf3fc932a6b7fb7fc9ef8320b4dd67bfc8d7ec91281715f792326570f1d4a57f
Instruction ID: ee07d3baee550238bba9589185c4726476e11d6e9de0baff7bc7870fc6cfb8fb
Opcode Fuzzy Hash: cf3fc932a6b7fb7fc9ef8320b4dd67bfc8d7ec91281715f792326570f1d4a57f
Instruction Fuzzy Hash: F2916D22A15B21CAEF40EF62D9842A8B7B5FF48B98F845175CE1D1B744EF38E845C320

Function 00007FF76407F4E0 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 285
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ShellExecuteExW.SHELL32 ref: 00007FF76407F747
IsWindowVisible.USER32 ref: 00007FF76407F777
ShowWindow.USER32 ref: 00007FF76407F786
WaitForInputIdle.USER32 ref: 00007FF76407F797
GetExitCodeProcess.KERNEL32 ref: 00007FF76407F7BD
FindCloseChangeNotification.KERNELBASE ref: 00007FF76407F7E7
ShowWindow.USER32 ref: 00007FF76407F83F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407F8FB

Strings

.exe, xrefs: 00007FF76407F7F2
Install, xrefs: 00007FF76407F684
.inf, xrefs: 00007FF76407F675
p, xrefs: 00007FF76407F529

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Window$Show$ChangeCloseCodeExecuteExitFindIdleInputNotificationProcessShellVisibleWait_invalid_parameter_noinfo_noreturn
String ID: .exe$.inf$Install$p
API String ID: 3555946777-3607691742
Opcode ID: 1e60e5045e6e2ec6a5143a9241e674ab6fc9234a452a23c0e8c5e71c7df86374
Instruction ID: 76f93d82395a4df341435cccd18ce7cd26395655486ee43efaf50e59f52be187
Opcode Fuzzy Hash: 1e60e5045e6e2ec6a5143a9241e674ab6fc9234a452a23c0e8c5e71c7df86374
Instruction Fuzzy Hash: D3C18D62F18622D5FA00EF26D9C0279A7B6BF88B80F8440B5CE4D476A5DF3CE4518325

Function 00007FF76407F0A4 Relevance: 16.6, APIs: 11, Instructions: 102
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF76407AE1C: PeekMessageW.USER32 ref: 00007FF76407AE32
Part of subcall function 00007FF76407AE1C: GetMessageW.USER32 ref: 00007FF76407AE49
Part of subcall function 00007FF76407AE1C: IsDialogMessageW.USER32 ref: 00007FF76407AE60
Part of subcall function 00007FF76407AE1C: TranslateMessage.USER32 ref: 00007FF76407AE6F
Part of subcall function 00007FF76407AE1C: DispatchMessageW.USER32 ref: 00007FF76407AE7A

GetDlgItem.USER32 ref: 00007FF76407F0E3
ShowWindow.USER32 ref: 00007FF76407F109
IsDlgButtonChecked.USER32 ref: 00007FF76407F11E
IsDlgButtonChecked.USER32 ref: 00007FF76407F136
IsDlgButtonChecked.USER32 ref: 00007FF76407F157
IsDlgButtonChecked.USER32 ref: 00007FF76407F173
IsDlgButtonChecked.USER32 ref: 00007FF76407F1B6
IsDlgButtonChecked.USER32 ref: 00007FF76407F1D4
IsDlgButtonChecked.USER32 ref: 00007FF76407F1E8
IsDlgButtonChecked.USER32 ref: 00007FF76407F212
IsDlgButtonChecked.USER32 ref: 00007FF76407F22A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ButtonChecked$Message$DialogDispatchItemPeekShowTranslateWindow
String ID:
API String ID: 4119318379-0
Opcode ID: c58ef51af4c11ae469b78d40ba7290d4e9656f32b0895ce54e4debee0d1a06d9
Instruction ID: 9823e9e7e3c8835e8f2c04884aecb506fb4155c9b6b3d2c637316b07d84cce64
Opcode Fuzzy Hash: c58ef51af4c11ae469b78d40ba7290d4e9656f32b0895ce54e4debee0d1a06d9
Instruction Fuzzy Hash: 2F41EF31B14762C6F700AF62E854BAA6360FB89F88F8411B5DD0E17B95CE3ED44587A8

Function 00007FF76405EF10 Relevance: 11.0, APIs: 7, Instructions: 453COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F542
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F548
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F554
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F55A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F560
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F56C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F572

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 95f682f023754f56a0dcca5eb1f48e82665a17e2aa84d7a71d7c4cda38083178
Instruction ID: ca4ac1a895e74e3e4b28babb917534dce7a650c1f5f745a76e803e29b68ca00b
Opcode Fuzzy Hash: 95f682f023754f56a0dcca5eb1f48e82665a17e2aa84d7a71d7c4cda38083178
Instruction Fuzzy Hash: DE12DF62F08B52C4EF14EF66D5842ADA376EB447A8F800276DA5C17AD9DF3CE489C350

Function 00007FF7640624C0 Relevance: 9.2, APIs: 6, Instructions: 164
filetimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE ref: 00007FF76406259B
GetLastError.KERNEL32 ref: 00007FF7640625AE
CreateFileW.KERNEL32 ref: 00007FF76406260E
GetLastError.KERNEL32 ref: 00007FF764062617
SetFileTime.KERNEL32 ref: 00007FF7640626C9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764062736

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: File$CreateErrorLast$Time_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3536497005-0
Opcode ID: dc46ff84bd0c57c9ac2b9914d0228e8f14f7433d989622a2074281460ea8d587
Instruction ID: 67e1603ace7796af0dc65597c2deefe2a550c401dee26668fbe35a25b6756c4f
Opcode Fuzzy Hash: dc46ff84bd0c57c9ac2b9914d0228e8f14f7433d989622a2074281460ea8d587
Instruction Fuzzy Hash: 6D61D462B18651D5E720AF2AE5803AEA7A1FB847A8F501338DFAE13AD4DF3DD454C710

Function 00007FF76407B014 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadBitmapW.USER32 ref: 00007FF76407B02A
GetObjectW.GDI32 ref: 00007FF76407B05B
DeleteObject.GDI32 ref: 00007FF76407B095
DeleteObject.GDI32 ref: 00007FF76407B0C5

Part of subcall function 00007FF764078624: FindResourceW.KERNELBASE ref: 00007FF76407863D
Part of subcall function 00007FF764078624: SizeofResource.KERNEL32 ref: 00007FF764078659
Part of subcall function 00007FF764078624: LoadResource.KERNEL32 ref: 00007FF764078673
Part of subcall function 00007FF764078624: LockResource.KERNEL32 ref: 00007FF764078685
Part of subcall function 00007FF764078624: GlobalAlloc.KERNELBASE ref: 00007FF7640786A6
Part of subcall function 00007FF764078624: GlobalLock.KERNEL32 ref: 00007FF7640786BB
Part of subcall function 00007FF764078624: GdipAlloc.GDIPLUS ref: 00007FF7640786FE
Part of subcall function 00007FF764078624: GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF764078769
Part of subcall function 00007FF764078624: GlobalUnlock.KERNEL32 ref: 00007FF76407878C
Part of subcall function 00007FF764078624: GlobalFree.KERNEL32 ref: 00007FF764078795

Strings

], xrefs: 00007FF76407B063

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: GlobalResource$Object$AllocBitmapDeleteGdipLoadLock$CreateFindFreeFromSizeofUnlock
String ID: ]
API String ID: 2347093688-3352871620
Opcode ID: 2f79d63664e457f963bfbd157e1c525b341384e02eb8e860e1f42d2dee528bbf
Instruction ID: 151f7f0e7389bf994ec198a4779ee573ad292fd24537414664688de217bfb36d
Opcode Fuzzy Hash: 2f79d63664e457f963bfbd157e1c525b341384e02eb8e860e1f42d2dee528bbf
Instruction Fuzzy Hash: A1116321B0D652C1FA64FF23A6D4379D3A1BF88BC4F8804B4D95D07B96DE2DE8048662

Function 00007FF76407FE24 Relevance: 7.5, APIs: 5, Instructions: 29
windowsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF76407FE41
GetMessageW.USER32 ref: 00007FF76407FE58
TranslateMessage.USER32 ref: 00007FF76407FE63
DispatchMessageW.USER32 ref: 00007FF76407FE6E
WaitForSingleObject.KERNEL32 ref: 00007FF76407FE7C

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Message$DispatchObjectPeekSingleTranslateWait
String ID:
API String ID: 3621893840-0
Opcode ID: eb57a341668d454e4e6cd52f39bb1811463ddcab187ea95c48cb89abc8d18535
Instruction ID: b926e65653bdf67351aa766015260bcd63fa307d74ca24cdd07faaf62e88ae26
Opcode Fuzzy Hash: eb57a341668d454e4e6cd52f39bb1811463ddcab187ea95c48cb89abc8d18535
Instruction Fuzzy Hash: 47F06232B38466C2F710AF22E8D4B36A215FFE4B05FD414B0E94F41A94DE2CD549C724

Function 00007FF76407AE1C Relevance: 7.5, APIs: 5, Instructions: 27
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF76407AE32
GetMessageW.USER32 ref: 00007FF76407AE49
IsDialogMessageW.USER32 ref: 00007FF76407AE60
TranslateMessage.USER32 ref: 00007FF76407AE6F
DispatchMessageW.USER32 ref: 00007FF76407AE7A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Message$DialogDispatchPeekTranslate
String ID:
API String ID: 1266772231-0
Opcode ID: 8f901ab8bb575df3ccfb48a5cb3294f091b017f84468599a2020223c8e70b7dc
Instruction ID: 3b233df7b2c24870083c9d4e56aa59a26a5d311a7fba4294f773104879c09548
Opcode Fuzzy Hash: 8f901ab8bb575df3ccfb48a5cb3294f091b017f84468599a2020223c8e70b7dc
Instruction Fuzzy Hash: A7F03C31A38562C2FB50AF22E8D5B36A361FFD0704FD058B1E94E42954DF2DD108CB14

Function 00007FF7640791E8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 33
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetClassNameW.USER32 ref: 00007FF764079211
SHAutoComplete.SHLWAPI ref: 00007FF764079255

Part of subcall function 00007FF7640713C4: CompareStringW.KERNEL32 ref: 00007FF7640713E3

FindWindowExW.USER32 ref: 00007FF76407923F

Strings

EDIT, xrefs: 00007FF76407921B, 00007FF764079233

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AutoClassCompareCompleteFindNameStringWindow
String ID: EDIT
API String ID: 4243998846-3080729518
Opcode ID: 5198dd27efd6ef2cfe81d4e1a42d30dc263c523227a297f5f4c02164b2b5e029
Instruction ID: 4883243aa6966222443dcbd7b46011db7069ccfbde873d80b4d8c402f8087a32
Opcode Fuzzy Hash: 5198dd27efd6ef2cfe81d4e1a42d30dc263c523227a297f5f4c02164b2b5e029
Instruction Fuzzy Hash: 3E018631B18AA3C1FA20BF23E8913F5A390BFD8740FD410B1C94D06795DE2CD54986A0

Function 00007FF764062CE0 Relevance: 6.1, APIs: 4, Instructions: 136
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStdHandle.KERNEL32(00007FF764068C9A), ref: 00007FF764062D22
WriteFile.KERNEL32 ref: 00007FF764062D6C
WriteFile.KERNELBASE ref: 00007FF764062D9A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FileWrite$Handle
String ID:
API String ID: 4209713984-0
Opcode ID: 759593f06e971a5af3dff942057e3884964648b854c35b3f90eb8150d1d2c130
Instruction ID: 9b8a8b1a1685c022179c7f260bb56ed3313c0ead02670dda62954d86e0cf7abe
Opcode Fuzzy Hash: 759593f06e971a5af3dff942057e3884964648b854c35b3f90eb8150d1d2c130
Instruction Fuzzy Hash: 0551E722B29562E2FA50FF26D9847BAA360FF45790F841175EA4E07AD4DF3CE485C320

Function 00007FF7640803E0 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

SetDlgItemTextW.USER32 ref: 00007FF764080556
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640805C1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640805C7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640805CD

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ItemText
String ID:
API String ID: 3750147219-0
Opcode ID: 1c85325ca1bec79bc6b06232edd6a2cd7f7222dcb33bd4fe7bc844c9a09d55ac
Instruction ID: 5a0e45963f43c0cea9524f0b85c0e8a96bf0e7e15f49c43856563e4958447790
Opcode Fuzzy Hash: 1c85325ca1bec79bc6b06232edd6a2cd7f7222dcb33bd4fe7bc844c9a09d55ac
Instruction Fuzzy Hash: 39519362F19A61C8FF00BF66D9842AD6322EF46B94F910675DA5C17BD6DF6CD440C320

Function 00007FF764082D6C Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

__scrt_initialize_crt.LIBCMT ref: 00007FF764082D7B

Part of subcall function 00007FF7640827FC: __scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FF76408281E

__scrt_acquire_startup_lock.LIBCMT ref: 00007FF764082D90
__scrt_release_startup_lock.LIBCMT ref: 00007FF764082DFE
__scrt_get_show_window_mode.LIBCMT ref: 00007FF764082E51

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: __scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_get_show_window_mode__scrt_initialize_crt__scrt_release_startup_lock
String ID:
API String ID: 1452418845-0
Opcode ID: f380b52e8f95e6a0f24ce785192d8cb773bc143ddf3d62aee805abe4fb8ed354
Instruction ID: e49c7a73e52470c4cbf2b1c1fa06a328163033c1c786135c3c7004b32cb24e04
Opcode Fuzzy Hash: f380b52e8f95e6a0f24ce785192d8cb773bc143ddf3d62aee805abe4fb8ed354
Instruction Fuzzy Hash: 74315C21A0D223C9FE54BF6796D13F9A391EF44384FC414B8E94E0B6D3DE2DA8048274

Function 00007FF764063684 Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?,?,?,?,?,?,00000000,?,00007FF76406309D), ref: 00007FF7640636CE
CreateDirectoryW.KERNEL32 ref: 00007FF764063733
GetLastError.KERNEL32(?,?,?,?,?,?,?,00000000,?,00007FF76406309D), ref: 00007FF764063791
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640637CE

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CreateDirectory$ErrorLast_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2359106489-0
Opcode ID: 5cda4ea00785afd89f4b2a0283e369f756aeb3863be6a65230e4b36aaec5c4cf
Instruction ID: dd4a65cfcf21dcd3e2e19bfa26034eec1ef3fabf1f5c3a3dc591123ada5e7952
Opcode Fuzzy Hash: 5cda4ea00785afd89f4b2a0283e369f756aeb3863be6a65230e4b36aaec5c4cf
Instruction Fuzzy Hash: 8A31B422B1C652E1EA70AF27A4C5279E361FF88790F905271EE8E52BD5CF3CD4458660

Function 00007FF764062320 Relevance: 6.1, APIs: 4, Instructions: 58fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(?,?,?,?,00000000,00007FF764062927,?,00100000,?,00000001,00000000,00000000,?,00007FF7640614C1), ref: 00007FF764062348
ReadFile.KERNELBASE ref: 00007FF764062367
GetLastError.KERNEL32 ref: 00007FF76406239B
GetLastError.KERNEL32 ref: 00007FF7640623BA

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorLast$FileHandleRead
String ID:
API String ID: 2244327787-0
Opcode ID: 5dece825d5be91adec6864fa12bb564f4e3b5809c08bfde6ef0babe01e3581d0
Instruction ID: ce623d56e431114cac5ce5564f135fb196535db8aab04294197ae709718d5f01
Opcode Fuzzy Hash: 5dece825d5be91adec6864fa12bb564f4e3b5809c08bfde6ef0babe01e3581d0
Instruction Fuzzy Hash: 0A21B321F0C532D1EA607F16A4802B9E360FB45B94F944578DA8E66784CF7CD8858732

Function 00007FF76406E948 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76406ECD8: ResetEvent.KERNEL32 ref: 00007FF76406ECF1
Part of subcall function 00007FF76406ECD8: ReleaseSemaphore.KERNEL32 ref: 00007FF76406ED07

ReleaseSemaphore.KERNEL32 ref: 00007FF76406E974
FindCloseChangeNotification.KERNELBASE ref: 00007FF76406E993
DeleteCriticalSection.KERNEL32 ref: 00007FF76406E9AA
CloseHandle.KERNEL32 ref: 00007FF76406E9B7

Part of subcall function 00007FF76406EA5C: WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,00007FF76406E95F,?,?,?,00007FF76406463A,?,?,?), ref: 00007FF76406EA63
Part of subcall function 00007FF76406EA5C: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF76406E95F,?,?,?,00007FF76406463A,?,?,?), ref: 00007FF76406EA6E

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CloseReleaseSemaphore$ChangeCriticalDeleteErrorEventFindHandleLastNotificationObjectResetSectionSingleWait
String ID:
API String ID: 2143293610-0
Opcode ID: 7c4c69b688bb09167c3d8ec6f4195a818a409db0987586a56ae23aa503e7e0cd
Instruction ID: 27a826fd222f4367e9a74ebd4234f2d8581e74db1799f778c609ecd99ab858d1
Opcode Fuzzy Hash: 7c4c69b688bb09167c3d8ec6f4195a818a409db0987586a56ae23aa503e7e0cd
Instruction Fuzzy Hash: 5501E133A24A61E2E644AF22D98466DA321FBC4790F405071DB5E13665CF39E4B5C750

Function 00007FF76406EAA4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 00007FF76406EAE0
SetThreadPriority.KERNEL32 ref: 00007FF76406EB36

Strings

CreateThread failed, xrefs: 00007FF76406EAEE

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Thread$CreatePriority
String ID: CreateThread failed
API String ID: 2610526550-3849766595
Opcode ID: cf4f3858e1c5421656891f758a667cd72a6f2059ba57d4f8d940dbc9b5e0f540
Instruction ID: d8389367e19e229305708faeb3ad578b5c6b7b04659b6ba0002a8d9d6d603ea9
Opcode Fuzzy Hash: cf4f3858e1c5421656891f758a667cd72a6f2059ba57d4f8d940dbc9b5e0f540
Instruction Fuzzy Hash: 6B119031A18B62D1F704EF12E8C12AAF374FB80794F944171D64E02669DF3CE545C760

Function 00007FF76407946C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26comCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76406DFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF76406DDDF

OleInitialize.OLE32 ref: 00007FF764079486
SHGetMalloc.SHELL32 ref: 00007FF7640794D4

Strings

riched20.dll, xrefs: 00007FF764079475

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: DirectoryInitializeMallocSystem
String ID: riched20.dll
API String ID: 174490985-3360196438
Opcode ID: 0d85db053d286d1bd0fa19ead2840fc3f5149c6ee0f027e6ed6c33eb2c824e37
Instruction ID: 8f7f77a3ef31b80318585622dfdcfef67c7a5e66655fd5e67368016245f616a4
Opcode Fuzzy Hash: 0d85db053d286d1bd0fa19ead2840fc3f5149c6ee0f027e6ed6c33eb2c824e37
Instruction Fuzzy Hash: 71F0AF31A18A91C2EB00AF21F8842AAF3A0FF88754F800175EA8E42B54DF7CD148CF10

Function 00007FF76407095C Relevance: 4.7, APIs: 3, Instructions: 152windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76407853C: GlobalMemoryStatusEx.KERNEL32 ref: 00007FF76407856C

Part of subcall function 00007FF76406AAE0: LoadStringW.USER32 ref: 00007FF76406AB67
Part of subcall function 00007FF76406AAE0: LoadStringW.USER32 ref: 00007FF76406AB80

Part of subcall function 00007FF764051FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764051FFB

Part of subcall function 00007FF76405129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF764051396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640801BB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640801C1
SendDlgItemMessageW.USER32 ref: 00007FF7640801F2

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$LoadString$Concurrency::cancel_current_taskGlobalItemMemoryMessageSendStatus
String ID:
API String ID: 3106221260-0
Opcode ID: f7793a058a2a9ae74a8b13b48e826019ebcce49a9c5359d39c692031bfe510b0
Instruction ID: a547d1dcbbc2e07908d42d5951e62babd07239ccb9bf786d05c0359e03681ec6
Opcode Fuzzy Hash: f7793a058a2a9ae74a8b13b48e826019ebcce49a9c5359d39c692031bfe510b0
Instruction Fuzzy Hash: CB51C062F09662DAFF00BFA2D4812FDA322EB85794F900176DE0D1B79ADE2CD400C360

Function 00007FF764079F4C Relevance: 4.6, APIs: 3, Instructions: 146COMMON

Download Yara Rule

APIs

SHFileOperationW.SHELL32 ref: 00007FF76407A118
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407A184
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407A18A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$FileOperation
String ID:
API String ID: 2032784890-0
Opcode ID: d84b959cb52ac2b45cb228921a01aff5b742bfe85dfebf4c2a95a99d48551309
Instruction ID: 64e34ede748ba0d2008f3c9e266a082472652e894b6791eb4db7685031c9631b
Opcode Fuzzy Hash: d84b959cb52ac2b45cb228921a01aff5b742bfe85dfebf4c2a95a99d48551309
Instruction Fuzzy Hash: B161BB32B18B51D8EB00EF66D8942BC7361FB84788F904676DA0C23BA9DF38D195C320

Function 00007FF764062134 Relevance: 4.6, APIs: 3, Instructions: 114fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 00007FF7640621CF
CreateFileW.KERNEL32 ref: 00007FF76406223C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640622D8

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CreateFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2272807158-0
Opcode ID: 650906bb36444c59f78769edd7e70a31dc34f49dc41decdeb4024168be9b1e6b
Instruction ID: 07af89ce5b45403becb0ef576de52293f2e82f75fe1c7842241a56c4c61eb935
Opcode Fuzzy Hash: 650906bb36444c59f78769edd7e70a31dc34f49dc41decdeb4024168be9b1e6b
Instruction Fuzzy Hash: 5041D873A18792D2EB10AF16E4842A9A3A0FB847B4F505774DFAE17AD9CF3CD4908710

Function 00007FF7640523F8 Relevance: 4.6, APIs: 3, Instructions: 73COMMON

Download Yara Rule

APIs

GetWindowTextLengthW.USER32 ref: 00007FF76405243E
GetWindowTextW.USER32 ref: 00007FF764052476
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764052505

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: TextWindow$Length_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2176759853-0
Opcode ID: 1bf85210b9a87779fb11811f9a7e2f8ba75c636e64e4f9da94f36f1c7ff0fb34
Instruction ID: 9f39da8fcbeb2d7d3f3ed51700a8a1189442f6750df08c0da13621cf7b21e377
Opcode Fuzzy Hash: 1bf85210b9a87779fb11811f9a7e2f8ba75c636e64e4f9da94f36f1c7ff0fb34
Instruction Fuzzy Hash: 4F21A272A28B91C1EA14AF66A98017AA364FB89BD0F545275EFDD03B95CF3CD190CB40

Function 00007FF764071F94 Relevance: 4.6, APIs: 3, Instructions: 68COMMON

Download Yara Rule

APIs

std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF76407205B
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF764072077
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF764072093

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: std::bad_alloc::bad_alloc
String ID:
API String ID: 1875163511-0
Opcode ID: 473e069831e40b03067e3ac07c55198f41caec4ce5e3ab4939735fa524c57bef
Instruction ID: 219ab7caf5922ea961ad9d233172cc6652ffcd0f49b19ad96b7c1e07937e2662
Opcode Fuzzy Hash: 473e069831e40b03067e3ac07c55198f41caec4ce5e3ab4939735fa524c57bef
Instruction Fuzzy Hash: 6831B423A086A6D5FB24BF16E4C43F9A3A0FB40784F944475D64C06AE6DF7CE546C322

Function 00007FF764063D34 Relevance: 4.6, APIs: 3, Instructions: 62COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE(?,?,?,?,?,?,00000000,00000001,?,00007FF7640707E1), ref: 00007FF764063D5E
SetFileAttributesW.KERNEL32 ref: 00007FF764063DB0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764063E1A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: 30421b436104fcb90b4cd2208b99a3bf3782908f0837f7a91d3eb4cb73bf7196
Instruction ID: 0023ec02b7281bba1458771744b6a05d21b5651d9a840651db94356cb13fe38c
Opcode Fuzzy Hash: 30421b436104fcb90b4cd2208b99a3bf3782908f0837f7a91d3eb4cb73bf7196
Instruction Fuzzy Hash: A621D822B18A91D1EE20AF26F485269B360FF88794F805274EA9E42A95DF3CD540C650

Function 00007FF7640631BC Relevance: 4.6, APIs: 3, Instructions: 59fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(?,?,?,?,?,?,?,?,00000000,00007FF764070822), ref: 00007FF7640631E7
DeleteFileW.KERNEL32 ref: 00007FF764063237
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640632A1

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: DeleteFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3118131910-0
Opcode ID: 539e2a0488ada646b9a4eb5c90a9f278ffd13936dc8dbc7caf4118334a65d282
Instruction ID: dc0b5f659d6aee3e69e8fc50cce06a91a108efda77f5af899a40fc70363fa026
Opcode Fuzzy Hash: 539e2a0488ada646b9a4eb5c90a9f278ffd13936dc8dbc7caf4118334a65d282
Instruction Fuzzy Hash: 7A21CD32B18792D1EE10AF26F48416EA360FBC9B94F901274EADE56A99DF3CD540C750

Function 00007FF7640632BC Relevance: 4.6, APIs: 3, Instructions: 57COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(?,?,?,?,00007FF76406E5B1,?,?,?,00000000,?), ref: 00007FF7640632E7
GetFileAttributesW.KERNELBASE ref: 00007FF764063334
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764063399

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: a8bcf6e2598255fa991570dfaf367ef52c8767d47326b3423635884fafe6ecbe
Instruction ID: 609efd07d5673da7b3d4051bc724bd57cc18d759a20f6ca69ea2cd945c394630
Opcode Fuzzy Hash: a8bcf6e2598255fa991570dfaf367ef52c8767d47326b3423635884fafe6ecbe
Instruction Fuzzy Hash: E121A472B18AA1D1EA10AF2AE485129A361FBC87A4F901371EADE43BD9DF3CD440C754

Function 00007FF76408BF64 Relevance: 4.5, APIs: 3, Instructions: 19COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,00007FF76408BF48), ref: 00007FF76408BF8C
TerminateProcess.KERNEL32(?,?,?,00007FF76408BF48), ref: 00007FF76408BF97
ExitProcess.KERNEL32 ref: 00007FF76408BFA6

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 44b3a526fe0d15710854bc957cc7a82f9edee4cc7420f0560de4bec5ea2a17a0
Instruction ID: 915b530491002e1c19c8ba2ae1dd0c89f5265dba3f634ef2dad68b33ff4ec9b1
Opcode Fuzzy Hash: 44b3a526fe0d15710854bc957cc7a82f9edee4cc7420f0560de4bec5ea2a17a0
Instruction Fuzzy Hash: 2EE01A25A14325CAEE547F329DD5379A362AF88741F5064B8D80A023A7CE3DE8098620

Function 00007FF76405F578 Relevance: 3.2, APIs: 2, Instructions: 193COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F895
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405F89B

Part of subcall function 00007FF764063EC8: FindClose.KERNELBASE(?,?,00000000,00007FF764070811), ref: 00007FF764063EFD

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseFind
String ID:
API String ID: 3587649625-0
Opcode ID: 1c0bb42e79c9fb00636deaf2d0e282c242ffc3b1dd605f464871389e3482b40a
Instruction ID: f5fd5bbd7a8d917dd2cc02ea7684f7ef25b42ed5f0fa40b51f2d2fde2d8de2ac
Opcode Fuzzy Hash: 1c0bb42e79c9fb00636deaf2d0e282c242ffc3b1dd605f464871389e3482b40a
Instruction Fuzzy Hash: 8391AF32B18AA1D4EB14EF26D5842EDA366FB84798FC04175EA4C07AE9DF7CD585C320

Function 00007FF764053904 Relevance: 3.1, APIs: 2, Instructions: 124COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764053AB3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764053AB9

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 08c6e2d20e94fe5d114b94b17f84e93e5249d169b81ce8341d273cd43f7755ea
Instruction ID: 34605e6ee3d2ff2cdd4dd40d205d4b7d5c90324131a97787ccdf1cdd91f51a0a
Opcode Fuzzy Hash: 08c6e2d20e94fe5d114b94b17f84e93e5249d169b81ce8341d273cd43f7755ea
Instruction Fuzzy Hash: 8841C162F14661C4FB04EFB2D5802EDA760EF49B98F945275DE1D67E9ACE3C94828310

Function 00007FF764062778 Relevance: 3.1, APIs: 2, Instructions: 100COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(00000000,00000002,?,00000F99,?,00007FF76406274D), ref: 00007FF7640628A9
GetLastError.KERNEL32(?,00007FF76406274D), ref: 00007FF7640628B8

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 043a82e8aff847b2e282b78885e55c7214a93c585b530bdf19c19deffc600893
Instruction ID: d1f80a9efc2575059fed820d001efb82b0f523fe5412266a38989f765900bbb0
Opcode Fuzzy Hash: 043a82e8aff847b2e282b78885e55c7214a93c585b530bdf19c19deffc600893
Instruction Fuzzy Hash: 4131E732B1A662D6EE607F2BDDC06F8A350AF04BD4F841175DE1E27790DE3CD8858660

Function 00007FF7640522BC Relevance: 3.1, APIs: 2, Instructions: 83COMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF7640522F1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640523F0

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Item_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1746051919-0
Opcode ID: 95739ad7301a08b82252912ada3ab6f57aee1bff7a48893d1edd4817af44debc
Instruction ID: e364ad13a48234a430ac9def08d12d7c92ee68a908bf7fb5e8e4e19830060345
Opcode Fuzzy Hash: 95739ad7301a08b82252912ada3ab6f57aee1bff7a48893d1edd4817af44debc
Instruction Fuzzy Hash: 6631C122A18755C6EB14AF16E6853AEF360EF84790F844275EB9C07B95DF3CE4808714

Function 00007FF764062AD0 Relevance: 3.1, APIs: 2, Instructions: 76timeCOMMON

Download Yara Rule

APIs

FlushFileBuffers.KERNEL32 ref: 00007FF764062AFE
SetFileTime.KERNELBASE ref: 00007FF764062B9B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: File$BuffersFlushTime
String ID:
API String ID: 1392018926-0
Opcode ID: 1f7bfd0f82637a6abdcd08aef8b442a865f6f50d97ba3a1fa7ef62b0e093425a
Instruction ID: beaeda2afd7e8d3ffb51504d4ea995201278067fa6926316a6f5dcf897a70cb9
Opcode Fuzzy Hash: 1f7bfd0f82637a6abdcd08aef8b442a865f6f50d97ba3a1fa7ef62b0e093425a
Instruction Fuzzy Hash: C0210522F09762F1EA61BF13D8943FA9794EF01794F946075DE4D12291EE3CD546C220

Function 00007FF76406AAE0 Relevance: 3.1, APIs: 2, Instructions: 52COMMON

Download Yara Rule

APIs

LoadStringW.USER32 ref: 00007FF76406AB67
LoadStringW.USER32 ref: 00007FF76406AB80

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: LoadString
String ID:
API String ID: 2948472770-0
Opcode ID: efc1550bd5bba1d5ac9face2304fa075ed5e4cb94ffc19493764f318ca00d951
Instruction ID: 9d9cfca4d7be6656e4a856d4f88021b40da9593bc4fd8b050087ffb3f8a3fc10
Opcode Fuzzy Hash: efc1550bd5bba1d5ac9face2304fa075ed5e4cb94ffc19493764f318ca00d951
Instruction Fuzzy Hash: 5B119070B08721C5EA00AF17A980228F7A1BB9AFC0F9444B5CE0DA3721DF7DE5418758

Function 00007FF764062BB0 Relevance: 3.0, APIs: 2, Instructions: 47COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE ref: 00007FF764062C11
GetLastError.KERNEL32 ref: 00007FF764062C1E

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 5eda2cbf1ce6837a88d649c872729f31e823bc49095d59e5e9b193bf7b9166cd
Instruction ID: d01cc95d0a9aedcedac7ca0ce49f4e9682a790f67c5737936803e2af6e215a71
Opcode Fuzzy Hash: 5eda2cbf1ce6837a88d649c872729f31e823bc49095d59e5e9b193bf7b9166cd
Instruction Fuzzy Hash: 5E119321B28661D1EB50BF26E8C12A9A360EB457B4F944375DA6E222D5CF3CE996C310

Function 00007FF76405255C Relevance: 3.0, APIs: 2, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76406A4AC: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF76406A504
Part of subcall function 00007FF76406A4AC: SetDlgItemTextW.USER32 ref: 00007FF76406A573
Part of subcall function 00007FF76406A4AC: GetWindowRect.USER32 ref: 00007FF76406A5AD
Part of subcall function 00007FF76406A4AC: GetClientRect.USER32 ref: 00007FF76406A5BB

GetDlgItem.USER32 ref: 00007FF7640525AC
SetDlgItemTextW.USER32 ref: 00007FF7640525C8

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Item$RectText$ClientWindowswprintf
String ID:
API String ID: 402765569-0
Opcode ID: ad94589889145b650e3461eb84003e845283bd92425fc2a9221c8100a4e27e71
Instruction ID: cc28ce553d1132c8bd829d9cf939799ef1b164aef6fb71492f47beff3832df92
Opcode Fuzzy Hash: ad94589889145b650e3461eb84003e845283bd92425fc2a9221c8100a4e27e71
Instruction Fuzzy Hash: 54015E20A0D26AC1FF597F53A5D83B9D391AF85744F8800B8E94D062D9DE3DE9848724

Function 00007FF76406EB58 Relevance: 3.0, APIs: 2, Instructions: 23COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,00007FF76406EBAD,?,?,?,?,00007FF764065752,?,?,?,00007FF7640656DE), ref: 00007FF76406EB5C
GetProcessAffinityMask.KERNEL32 ref: 00007FF76406EB6F

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: 444071b75e142e51b736d9fa504759652bc9944b894df1f8101a797a07211085
Instruction ID: 7a4951f65c2a24c24d68d198e45aa410419cdf2f6c7dab4d7573801b33a9bbe1
Opcode Fuzzy Hash: 444071b75e142e51b736d9fa504759652bc9944b894df1f8101a797a07211085
Instruction Fuzzy Hash: 5CE02B61F34646D2DF489F57D8904EAB396BFC8B40BC49035D60B83714DE2CE5458B10

Function 00007FF7640821D0 Relevance: 3.0, APIs: 2, Instructions: 21COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF764082200

Part of subcall function 00007FF764082F7C: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF764082F85

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF764082206

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Concurrency::cancel_current_task$std::bad_alloc::bad_alloc
String ID:
API String ID: 1173176844-0
Opcode ID: ac554a43d54612151bc7e480101717375080be3004ee5b366f50feb51e7139dd
Instruction ID: 159ac2cb82a98e3183ae92cfde1b8386d109a39a1bc7412efac16ec433042108
Opcode Fuzzy Hash: ac554a43d54612151bc7e480101717375080be3004ee5b366f50feb51e7139dd
Instruction Fuzzy Hash: 83E0EC50E09127CDFD287EA71BA51F48050CFA9370EE81BB8DE3E086D3AD1CA5919230

Function 00007FF76408D90C Relevance: 3.0, APIs: 2, Instructions: 19threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlRestoreThreadPreferredUILanguages.NTDLL ref: 00007FF76408D922
GetLastError.KERNEL32 ref: 00007FF76408D934

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorLanguagesLastPreferredRestoreThread
String ID:
API String ID: 588628887-0
Opcode ID: 7829e02dcbd74b51c5e196648e5aad52518f68633834b7095f7e5950a32ae739
Instruction ID: ec15cfdb77170069c006ad2512a7984371393ff9c755a0117f31c2f7addbf07c
Opcode Fuzzy Hash: 7829e02dcbd74b51c5e196648e5aad52518f68633834b7095f7e5950a32ae739
Instruction Fuzzy Hash: A3E08651E09113CAFF047FB398C527893D19F94750F8411B1C90D86352EE3C94828234

Function 00007FF7640533E4 Relevance: 1.8, APIs: 1, Instructions: 328COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405388C

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: de6ed7916833eab16265dc8adf0133c5cc9bb4ef2c6b2401519f57c94907b3cc
Instruction ID: e1852b5cb73a07bd9dec10538f69ed50a4aebbb2546b2324afac280528226fc0
Opcode Fuzzy Hash: de6ed7916833eab16265dc8adf0133c5cc9bb4ef2c6b2401519f57c94907b3cc
Instruction Fuzzy Hash: 67D1CA72B08695D5EB6CAF2797C42B9E7A1FB09B84F845075CE1D07BA1CF38E4618720

Function 00007FF764065294 Relevance: 1.7, APIs: 1, Instructions: 198COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406551B

Part of subcall function 00007FF7640713F4: CompareStringW.KERNEL32 ref: 00007FF76407145A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CompareString_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1017591355-0
Opcode ID: 60054bf23714923d6cf658706c57d8570bb270d346a0b8b9a17da1f048c8cd6a
Instruction ID: bff6862b92e5c758ee9e817605979111e21f45c94ac02a970b07a4912622d05a
Opcode Fuzzy Hash: 60054bf23714923d6cf658706c57d8570bb270d346a0b8b9a17da1f048c8cd6a
Instruction Fuzzy Hash: 0F610315F0C677D1FA64BE1B649427AD291AF40BD8FD441B1DE4F26AC7EE6CE4418230

Function 00007FF764071870 Relevance: 1.7, APIs: 1, Instructions: 172COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76406E948: ReleaseSemaphore.KERNEL32 ref: 00007FF76406E974
Part of subcall function 00007FF76406E948: FindCloseChangeNotification.KERNELBASE ref: 00007FF76406E993
Part of subcall function 00007FF76406E948: DeleteCriticalSection.KERNEL32 ref: 00007FF76406E9AA
Part of subcall function 00007FF76406E948: CloseHandle.KERNEL32 ref: 00007FF76406E9B7

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764071ACB

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Close$ChangeCriticalDeleteFindHandleNotificationReleaseSectionSemaphore_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1624603282-0
Opcode ID: 5cf858acd293e3b658116d28c4335219560b9ae9bdc49428881993fa598d0e38
Instruction ID: 58ad9555a5def8ba9886a1bc93bb15b95157916313f10545451e1bb2bbd941bd
Opcode Fuzzy Hash: 5cf858acd293e3b658116d28c4335219560b9ae9bdc49428881993fa598d0e38
Instruction Fuzzy Hash: 2B61C372715AA5E5EE08EF66D5A40BCB364FF40F90B944676DB2D0BAC5CF2CE4618310

Function 00007FF76405EC9C Relevance: 1.6, APIs: 1, Instructions: 145COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405EEB8

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 89b76225f611734f1827ebf27dd46062ec279a58f062f7148514824cdf62f394
Instruction ID: e476207c3d272febe04448c67f8d3ac732e20cf6e77f6975095dc592a3487554
Opcode Fuzzy Hash: 89b76225f611734f1827ebf27dd46062ec279a58f062f7148514824cdf62f394
Instruction Fuzzy Hash: EC51C362A18692D0FA18BF27D5843B9A751FB85BC4F8401B6EE8D07796CF3DE485C360

Function 00007FF76405E7A8 Relevance: 1.6, APIs: 1, Instructions: 118COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF764063EC8: FindClose.KERNELBASE(?,?,00000000,00007FF764070811), ref: 00007FF764063EFD

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405E993

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CloseFind_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1011579015-0
Opcode ID: 7ccb79097edba5c9ff264a6ea3acda2e11d4279ec26602cbe1bb149cda34522a
Instruction ID: d0d6e8f70e40db044020f93b5d18d701f0020d55b5363bda0c92335f7d55530d
Opcode Fuzzy Hash: 7ccb79097edba5c9ff264a6ea3acda2e11d4279ec26602cbe1bb149cda34522a
Instruction Fuzzy Hash: 88518122A186A6C1FB64EF26D5C537DA361FF84B84F840176EA8D077A5CF2CE441C360

Function 00007FF764061794 Relevance: 1.6, APIs: 1, Instructions: 115COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406187D

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 3a9b32a1ed4e66b7bd21ca6fda0a4a67ef73245966a98ed2155b241384938f87
Instruction ID: d13da06b061fc13821d16dbb0f613f74b336f60bb09c07b40b71be78182b7e96
Opcode Fuzzy Hash: 3a9b32a1ed4e66b7bd21ca6fda0a4a67ef73245966a98ed2155b241384938f87
Instruction Fuzzy Hash: 9A411962B18AA192EE14AE17EA80379E691FF84FC0F848435EE4D1BF4ADF7CD4518300

Function 00007FF764062F58 Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640630C8

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 79c0921cd87fe934e762e48f5845e8be846b4b6500caa7e1addc831544741880
Instruction ID: 3df7bd051ea77c669e43f0df3b1be5d58d521b26beaff0f0fc266b3a2c3c4c8d
Opcode Fuzzy Hash: 79c0921cd87fe934e762e48f5845e8be846b4b6500caa7e1addc831544741880
Instruction Fuzzy Hash: A3411922B08B21D0FE14BF26E595379A360EB49BD4F941174EA4E17B99CF3DE4448360

Function 00007FF76408BDF8 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF76408BE20

Part of subcall function 00007FF76408BFB0: GetModuleHandleExW.KERNEL32 ref: 00007FF76408BFD0
Part of subcall function 00007FF76408BFB0: GetProcAddress.KERNEL32 ref: 00007FF76408BFE6
Part of subcall function 00007FF76408BFB0: FreeLibrary.KERNEL32 ref: 00007FF76408C00B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 5b4d6432c9ab27f48bf344f41163fa66ca8822e5b5ed34cf2c0174bd429b5c6d
Instruction ID: 5ff4cdd3dd3df15e8e026ebc170aee51c2798ec39d37b3d98ceef885b46024d9
Opcode Fuzzy Hash: 5b4d6432c9ab27f48bf344f41163fa66ca8822e5b5ed34cf2c0174bd429b5c6d
Instruction Fuzzy Hash: AC41B712A18623C9FE14BF1799D0138A761EF65740FC454B6EA0D4B6A2DF3DE841C760

Function 00007FF76405129C Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF764051396

Part of subcall function 00007FF764051F80: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF764051F89

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Concurrency::cancel_current_taskstd::bad_alloc::bad_alloc
String ID:
API String ID: 680105476-0
Opcode ID: 838a719ffde86585c2ca4feb776b3b301b6a2cf8068a53d29e5b16a8d3e2e804
Instruction ID: a45820e19f77f31aef3fd47a56a782aa7ebda4b46c8fb800daec8e7e4531b4a3
Opcode Fuzzy Hash: 838a719ffde86585c2ca4feb776b3b301b6a2cf8068a53d29e5b16a8d3e2e804
Instruction Fuzzy Hash: 81218122E08661C5EE18AE93A690279A650EB44BF0FA80B70DE7D4BBD1DE7CE4518354

Function 00007FF764052C54 Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764052D77

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 5f06d9f534deb30b69d3d2903f3d33ec42f88f018c603439ac5db5ad38322882
Instruction ID: c56c75af514daaa92c677ec69a117f938c2c3a4273e5ad941438b89c1d0ea133
Opcode Fuzzy Hash: 5f06d9f534deb30b69d3d2903f3d33ec42f88f018c603439ac5db5ad38322882
Instruction Fuzzy Hash: AC213C22B24596A2EA0CBF22D6943F9A324FB44784FD44475E71D076A2DF38A4A4C320

Function 00007FF76409124C Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF764091280

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 9dd5a9e84c18447e56e2265fa04046f11d37b96b7f5b774ce3305aa6458b3f00
Instruction ID: 3b0373548da387bfbef3795d7d96ea9002e72e457de5636c5ba7c06f429ee7f3
Opcode Fuzzy Hash: 9dd5a9e84c18447e56e2265fa04046f11d37b96b7f5b774ce3305aa6458b3f00
Instruction Fuzzy Hash: FA114F32E1C762C6F714BF52A9C0639EAA9FB41380FD411B5E68D8B695DF2CE8108764

Function 00007FF764053AD8 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764053B6C

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 454a1fcff6e1850c8b97cdd7684a735fd34d2cefc8bc4c1965818da2daadb151
Instruction ID: e4b97ac9f159ff2fe1c21b50703513b89a2bdb2f973cacde66dd5a607fd47bf5
Opcode Fuzzy Hash: 454a1fcff6e1850c8b97cdd7684a735fd34d2cefc8bc4c1965818da2daadb151
Instruction Fuzzy Hash: EB01C8A2E18A95C1FE15AF26E481269B361FB89790FC05271E79C07BA5DF3CD1408714

Function 00007FF764081558 Relevance: 1.5, APIs: 1, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00007FF764081604: GetModuleHandleW.KERNEL32(?,?,?,00007FF764081573,?,?,?,00007FF76408192A), ref: 00007FF76408162B

DloadProtectSection.DELAYIMP ref: 00007FF7640815C9

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: DloadHandleModuleProtectSection
String ID:
API String ID: 2883838935-0
Opcode ID: 908f49ac33541a8240f4269ada82e733cc5c0c647bda27ab8868a2cee9a60ef3
Instruction ID: e43828c30d7ef76c5fc86f29c19decda03d37e2ff17fa90a77e6b31b5b3490fd
Opcode Fuzzy Hash: 908f49ac33541a8240f4269ada82e733cc5c0c647bda27ab8868a2cee9a60ef3
Instruction Fuzzy Hash: AE11CC62D18627C5FF60BF17A9C43B0A760EF18348FD840B4C91D4A3B5EE3DA9958638

Function 00007FF76408FA04 Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 00007FF76408FA59

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c4d23aaef5024e3722ccbb242168b3e22d65bf63548bcaacbbf61b8d0a3ba7a1
Instruction ID: 3c9dfe0676a1c39f3175cba16cfb22a522d39008cc4966fbeb1ca6dbb2df34bd
Opcode Fuzzy Hash: c4d23aaef5024e3722ccbb242168b3e22d65bf63548bcaacbbf61b8d0a3ba7a1
Instruction Fuzzy Hash: 5BF04F95B09227CDFE547F739A913B4929ADF54B50F8C54B0C90E87382ED2CE6814134

Function 00007FF764063EC8 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7640640BC: FindFirstFileW.KERNELBASE ref: 00007FF76406410B
Part of subcall function 00007FF7640640BC: FindFirstFileW.KERNEL32 ref: 00007FF76406415E
Part of subcall function 00007FF7640640BC: GetLastError.KERNEL32 ref: 00007FF7640641AF

FindClose.KERNELBASE(?,?,00000000,00007FF764070811), ref: 00007FF764063EFD

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Find$FileFirst$CloseErrorLast
String ID:
API String ID: 1464966427-0
Opcode ID: 18fe74ab7ca813274cb64c08179860cc48efc587ad39327f0b25563dc18ddab5
Instruction ID: 0cef02af1a4aa832d717dbd2b1ccb7a9b2261b5208a9f1ee94ad2ec342738e76
Opcode Fuzzy Hash: 18fe74ab7ca813274cb64c08179860cc48efc587ad39327f0b25563dc18ddab5
Instruction Fuzzy Hash: 32F0286270C251D1EA50BFB6A180179B3609F19BB4F5413B8EA3E077C7CE38D444C7A4

Function 00007FF7640620D0 Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?,?,00000001,00007FF76406207E), ref: 00007FF7640620F6

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: ccbd9008d2c4ce7168f8d058ff2f34620ae6bf54bfe45a0cbca9d6a6f1a7c065
Instruction ID: 1061559c967cdd30f1c87d2d03efa040930d0f240421b1e18d66108564a4f06b
Opcode Fuzzy Hash: ccbd9008d2c4ce7168f8d058ff2f34620ae6bf54bfe45a0cbca9d6a6f1a7c065
Instruction Fuzzy Hash: 52F0F922B0C142D5FB24AF61D0813B8A660D750B78F880379D73D051C4CF28D8D58720

Function 00007FF76408D94C Relevance: 1.5, APIs: 1, Instructions: 29memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 00007FF76408D98A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 5fa632deebd8181b9f3ea37834cf4eccbda839d7d0d6f948310c23224b4a93e7
Instruction ID: 30ec78e09136c0defbc91f9f41f481816c8aa2992bb6c27d18309555f1f48e8d
Opcode Fuzzy Hash: 5fa632deebd8181b9f3ea37834cf4eccbda839d7d0d6f948310c23224b4a93e7
Instruction Fuzzy Hash: 6EF05E11B09227D8FF547E735AE03749A90DF84760F8817B5DDAE862C2DE2CA4418130

Function 00007FF764062490 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE ref: 00007FF7640624A2

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: df9a28314c6b6fddfb177ebf539387614dcb0363737e1ba4f38fe55c4f903e1a
Instruction ID: 5264ab5ac38d33da6dc4b41d9585586ac9ae3909ce129517df649d7c7a633f20
Opcode Fuzzy Hash: df9a28314c6b6fddfb177ebf539387614dcb0363737e1ba4f38fe55c4f903e1a
Instruction Fuzzy Hash: 02D0C912A09461E2D950BA379C9207C6250AF92735FE417A0DA3E916E1CE1DA496A221

Function 00007FF764067FC4 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNELBASE ref: 00007FF764067FD2

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CurrentDirectory
String ID:
API String ID: 1611563598-0
Opcode ID: 176ab68ebee512dad0278907058cd855c5c44f8615b79807412a7d406b36e525
Instruction ID: b84e13c307c1f230606e054a041e97a0c9e0b88199d3374e2740f19f84d2014f
Opcode Fuzzy Hash: 176ab68ebee512dad0278907058cd855c5c44f8615b79807412a7d406b36e525
Instruction Fuzzy Hash: 14C08C21F15502C1DA18BF27CCCA01813A4BB80B04BA04078C20D82220CE2DC8EAA365

Non-executed Functions

Function 00007FF76405C2F0 Relevance: 49.8, APIs: 24, Strings: 4, Instructions: 754fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76405DE04: GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF76405CF4B), ref: 00007FF76405DE27
Part of subcall function 00007FF76405DE04: GetLastError.KERNEL32 ref: 00007FF76405DE88
Part of subcall function 00007FF76405DE04: CloseHandle.KERNEL32 ref: 00007FF76405DE9B

wcscpy.LIBCMT ref: 00007FF76405CBC8
wcscpy.LIBCMT ref: 00007FF76405CBFE
CreateFileW.KERNEL32 ref: 00007FF76405CC38
DeviceIoControl.KERNEL32 ref: 00007FF76405CD01
CloseHandle.KERNEL32 ref: 00007FF76405CD12
GetLastError.KERNEL32 ref: 00007FF76405CD2E
RemoveDirectoryW.KERNEL32 ref: 00007FF76405CD7D
DeleteFileW.KERNEL32 ref: 00007FF76405CD88
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CE89
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CE8F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CE9B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CEA1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CEAD
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CEB3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CEB9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CEBF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CEC5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CECB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CED1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405CED7

Strings

SeRestorePrivilege, xrefs: 00007FF76405C343
\??\, xrefs: 00007FF76405C392, 00007FF76405C3B8
SeCreateSymbolicLinkPrivilege, xrefs: 00007FF76405C34F
UNC\, xrefs: 00007FF76405C53F, 00007FF76405C55D

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseErrorFileHandleLastwcscpy$ControlCreateCurrentDeleteDeviceDirectoryProcessRemove
String ID: SeCreateSymbolicLinkPrivilege$SeRestorePrivilege$UNC\$\??\
API String ID: 2659423929-3508440684
Opcode ID: f1e6eec8ecbe5e09d381db8a89365ebfa2c377f5d47fbbeb23eb751c6f3faf25
Instruction ID: f8dd28e60c17d3e8db7ae168c0195fcf2ee6db6a82baeab9ce0de4029d841ad1
Opcode Fuzzy Hash: f1e6eec8ecbe5e09d381db8a89365ebfa2c377f5d47fbbeb23eb751c6f3faf25
Instruction Fuzzy Hash: 0662F062F18662C5FB04BF76D9842BDA361EB857A8F900271DA6C57AD9DF3CE484C310

Function 00007FF76406F180 Relevance: 43.2, APIs: 22, Strings: 2, Instructions: 1205COMMON

Download Yara Rule

APIs

_Init_thread_footer.LIBCMT ref: 00007FF764070528

Part of subcall function 00007FF76406AAE0: LoadStringW.USER32 ref: 00007FF76406AB67
Part of subcall function 00007FF76406AAE0: LoadStringW.USER32 ref: 00007FF76406AB80

Part of subcall function 00007FF76407B0DC: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00000000,?,00007FF764070429), ref: 00007FF76407B110
Part of subcall function 00007FF76407B0DC: SetLastError.KERNEL32 ref: 00007FF76407B153

Part of subcall function 00007FF76405129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF764051396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764070490
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764070496
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407049C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704A2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704A8
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704AE
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704B4
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704BA
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704C0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704C6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704CC
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704D2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704D8
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704DE
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704E4
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704EA
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704F0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640704F6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764070532
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764070538

Strings

%ls, xrefs: 00007FF76406F3AC, 00007FF76406F3FF
%s: %s, xrefs: 00007FF76406FC11

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ErrorLastLoadString$Concurrency::cancel_current_taskInit_thread_footer
String ID: %ls$%s: %s
API String ID: 2539828978-2259941744
Opcode ID: 416f7ac5ce794b3f5fedfb3ff46f092ae962b751f79039000c59d6205bbc7698
Instruction ID: b0f543f51e7e139b2f6f407d3a95f5062cff106008c68a15e23b3ea300b684a1
Opcode Fuzzy Hash: 416f7ac5ce794b3f5fedfb3ff46f092ae962b751f79039000c59d6205bbc7698
Instruction Fuzzy Hash: D0B2B562B58692C1EA14BF27E4D41BAE321FFC6790F904376E69D13AEADE2CD540C710

Function 00007FF764092550 Relevance: 22.3, APIs: 8, Strings: 4, Instructions: 1310COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF764092C12
memcpy_s.LIBCMT ref: 00007FF7640935BF
memcpy_s.LIBCMT ref: 00007FF764093666

Part of subcall function 00007FF7640938BC: _invalid_parameter_noinfo.LIBCMT ref: 00007FF7640938EE

memcpy_s.LIBCMT ref: 00007FF76409372F

Part of subcall function 00007FF76408D008: _invalid_parameter_noinfo.LIBCMT ref: 00007FF76408D02D

Strings

1#IND, xrefs: 00007FF7640937AA
1#QNAN, xrefs: 00007FF7640937E8
1#INF, xrefs: 00007FF764093807
1#SNAN, xrefs: 00007FF7640937C9

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfomemcpy_s
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 1759834784-2761157908
Opcode ID: c1568b5568d689d261f1f0b975b9c1104ab10acfc5286cd5346a40821ab4f9bc
Instruction ID: f2d1d3b4b43b553517f70a3f98d9d72af57042f9ea13fff22bf3766bd83eb578
Opcode Fuzzy Hash: c1568b5568d689d261f1f0b975b9c1104ab10acfc5286cd5346a40821ab4f9bc
Instruction Fuzzy Hash: 48B2FD72A081A2CBE765AE66D9807FDB791FB48388F906175DA0D57F84DF38ED048B10

Function 00007FF764061A48 Relevance: 17.9, APIs: 9, Strings: 1, Instructions: 375fileCOMMON

Download Yara Rule

APIs

GetLongPathNameW.KERNEL32 ref: 00007FF764061A97
GetLongPathNameW.KERNEL32 ref: 00007FF764061AE0
GetShortPathNameW.KERNEL32 ref: 00007FF764061B21
GetShortPathNameW.KERNEL32 ref: 00007FF764061B6A

Part of subcall function 00007FF7640713C4: CompareStringW.KERNEL32 ref: 00007FF7640713E3

MoveFileW.KERNEL32 ref: 00007FF764061DFE
MoveFileW.KERNEL32 ref: 00007FF764061E65

Part of subcall function 00007FF764062134: CreateFileW.KERNEL32 ref: 00007FF76406223C

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764061FE1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764061FE7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764061FED

Strings

rtmp, xrefs: 00007FF764061CF4, 00007FF764061D03

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: NamePath$File_invalid_parameter_noinfo_noreturn$LongMoveShort$CompareCreateString
String ID: rtmp
API String ID: 3587137053-870060881
Opcode ID: 6844fc52beb637c2b27de38a8f1773b81546f1263b6adb3febe2d016913ca72a
Instruction ID: 42940cc6fab7754e9dd5326cff8873d01b2aa3e92671e420b81799a8c71cf8f7
Opcode Fuzzy Hash: 6844fc52beb637c2b27de38a8f1773b81546f1263b6adb3febe2d016913ca72a
Instruction Fuzzy Hash: 71F10622B18A52E5EB10EF66D8C01FDAB61FB853C4F901175EA4E5BAA9DF3CD484C350

Function 00007FF764065B60 Relevance: 12.3, APIs: 8, Instructions: 256COMMON

Download Yara Rule

APIs

GetFullPathNameW.KERNEL32 ref: 00007FF764065BC2
GetFullPathNameW.KERNEL32 ref: 00007FF764065C0E
GetFullPathNameW.KERNEL32 ref: 00007FF764065D2B
GetFullPathNameW.KERNEL32 ref: 00007FF764065D70
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764065EE0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764065EE6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764065EEC
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764065EF2

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FullNamePath_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1693479884-0
Opcode ID: b93ad2ce8aad967ae532d61f25a7d43417873e191935b00f4afba2dee12255a3
Instruction ID: 999f943d03d62afaabfdad0ccc85babd0848a627717a31a04e2712c0af8fe72a
Opcode Fuzzy Hash: b93ad2ce8aad967ae532d61f25a7d43417873e191935b00f4afba2dee12255a3
Instruction Fuzzy Hash: 33A1D666F24B61D8FF04AF7A98841BCA361AF84BE4B945275DE5E27BC9DE3CD0418210

Function 00007FF764083170 Relevance: 10.6, APIs: 7, Instructions: 72COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32 ref: 00007FF76408318C
RtlCaptureContext.KERNEL32 ref: 00007FF7640831B9
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF7640831D3
RtlVirtualUnwind.KERNEL32 ref: 00007FF764083214
IsDebuggerPresent.KERNEL32 ref: 00007FF764083268
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF764083289
UnhandledExceptionFilter.KERNEL32 ref: 00007FF764083294

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
String ID:
API String ID: 3140674995-0
Opcode ID: eb4060bcbbf6947450414bc0ac192b8da1feec02df413969c5a674799d26ef14
Instruction ID: beec2bc12e55ee1cbaa1e65c64fae82ea6c4a9991d5e44b0d55abaff42b40134
Opcode Fuzzy Hash: eb4060bcbbf6947450414bc0ac192b8da1feec02df413969c5a674799d26ef14
Instruction Fuzzy Hash: 25318172618B91DAEB60AF61E8903EDB360FB88744F845079DA4D47B88EF3DD548C720

Function 00007FF7640876D8 Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FF764087751
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF764087769
RtlVirtualUnwind.KERNEL32 ref: 00007FF7640877A4
IsDebuggerPresent.KERNEL32 ref: 00007FF7640877DD
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF7640877E7
UnhandledExceptionFilter.KERNEL32 ref: 00007FF7640877F2

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
String ID:
API String ID: 1239891234-0
Opcode ID: 5940ef1d6d2c32beaf7af9e8e0892e721e3d30544378453b8f42f9f5775f8da8
Instruction ID: ed09aac8a110a774862ea799cb75ecf3fc4f1cc4c8384d586197500e54ab6f62
Opcode Fuzzy Hash: 5940ef1d6d2c32beaf7af9e8e0892e721e3d30544378453b8f42f9f5775f8da8
Instruction Fuzzy Hash: B7316232618B91D9DB60DF26EC802AEB3A0FB88754F941135EA8D43B59DF38D555C710

Function 00007FF764051AA4 Relevance: 6.3, APIs: 4, Instructions: 285COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764051EA9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764051EAF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764051EB5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764051EBB

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: f150905576e1962152a6538581ed401fb107eac56a89863026226d037d82469d
Instruction ID: ce754372f5133f1025d6ae6aa5a19a1aa33725f1d80b0f12500e18fbebec1e8e
Opcode Fuzzy Hash: f150905576e1962152a6538581ed401fb107eac56a89863026226d037d82469d
Instruction Fuzzy Hash: 13B1D122F14AA6C5EB14BF26D9802EDA761FF85784F801671EA4D0BB9ADF3CD540C310

Function 00007FF76408FA94 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 164COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF76408FAC4

Part of subcall function 00007FF764087934: GetCurrentProcess.KERNEL32(00007FF764090CCD), ref: 00007FF764087961

Strings

*?, xrefs: 00007FF76408FAEB
., xrefs: 00007FF76408FEE4

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CurrentProcess_invalid_parameter_noinfo
String ID: *?$.
API String ID: 2518042432-3972193922
Opcode ID: f96344909874f118cd7fc652812aee2de17a0b901a5c412331694f6fbd6e8fc4
Instruction ID: 11b7a3e33e373962c0bd18068a1b267677a583c4f3e114392ed056810b71f3ab
Opcode Fuzzy Hash: f96344909874f118cd7fc652812aee2de17a0b901a5c412331694f6fbd6e8fc4
Instruction Fuzzy Hash: 46510662B14BA5C9EF10EF739A900B8A3A9FB98BD4B844131DE5D17B84DE3CD4418310

Function 00007FF764092080 Relevance: 4.8, APIs: 3, Instructions: 340COMMONLIBRARYCODE

Download Yara Rule

APIs

memcpy_s.LIBCMT ref: 00007FF76409210B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: memcpy_s
String ID:
API String ID: 1502251526-0
Opcode ID: b531b63a04a12e36dec63d06dc2411054f876835da8b044adf2bb9f605172619
Instruction ID: 3ec7222b6bd42fa3df1adc8a1d90774bed2713ad4c6a291d070a35ab41a7d8e6
Opcode Fuzzy Hash: b531b63a04a12e36dec63d06dc2411054f876835da8b044adf2bb9f605172619
Instruction Fuzzy Hash: 60D1C132B18296C7DB64DF16E5C46AAB7A1FB98784F449538CB4E57B44DA3CEC41CB00

Function 00007FF76405B6D8 Relevance: 4.5, APIs: 3, Instructions: 36windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,00007FF76405BA9D), ref: 00007FF76405B6E5
FormatMessageW.KERNEL32(?,?,?,?,?,?,?,00007FF76405BA9D), ref: 00007FF76405B719
LocalFree.KERNEL32(?,?,?,?,?,?,?,00007FF76405BA9D), ref: 00007FF76405B743

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorFormatFreeLastLocalMessage
String ID:
API String ID: 1365068426-0
Opcode ID: c27e05edbcf0c556cf9f4b9f4aa6354f64d9dc72ff0f252d3a2ededa039666af
Instruction ID: ee707769438cbd50fbbe91b0017c4d670402f26535af2c36fd363b2ebf885e42
Opcode Fuzzy Hash: c27e05edbcf0c556cf9f4b9f4aa6354f64d9dc72ff0f252d3a2ededa039666af
Instruction Fuzzy Hash: 6D014F7261C756C2EB54AF23B99057AA3A1FB89BC0F885074EA8D47B49CE3CE5048B10

Function 00007FF76408FCA0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 97COMMON

Download Yara Rule

Strings

., xrefs: 00007FF76408FEE4

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID: .
API String ID: 0-248832578
Opcode ID: 7c9d8364e7b62915daf92aecf888b4814fe01b6aae5fc02ec6e7aa2f3019df5b
Instruction ID: 5abdfa6b0b6446446dd1d1fc44a8f8fc12f0611e1e078719c6c011ce9208855e
Opcode Fuzzy Hash: 7c9d8364e7b62915daf92aecf888b4814fe01b6aae5fc02ec6e7aa2f3019df5b
Instruction Fuzzy Hash: 34313D22B18AA189FB20AF3799447B9FA96EB94BE4F448234DE5C07BC5CE3CD5018300

Function 00007FF764095AF8 Relevance: 3.2, APIs: 2, Instructions: 227COMMONLIBRARYCODE

Download Yara Rule

APIs

_clrfp.LIBCMT ref: 00007FF764095D45
RaiseException.KERNEL32 ref: 00007FF764095D56

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ExceptionRaise_clrfp
String ID:
API String ID: 15204871-0
Opcode ID: 131550a8e914c8a4384a7255cc8ec53066b4dff0b7ecc1394be8dfb6b4310eca
Instruction ID: 28c4086a13af26af468490ec26e1e131c88150fd3c38fe8d1ad30211780b0d40
Opcode Fuzzy Hash: 131550a8e914c8a4384a7255cc8ec53066b4dff0b7ecc1394be8dfb6b4310eca
Instruction Fuzzy Hash: 79B18B77611B98CBEB15CF2AC88636C7BE0F744B48F188861DA5D837A4CB39D851C710

Function 00007FF764078DF4 Relevance: 3.2, APIs: 2, Instructions: 186COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7640785E0: GetDC.USER32 ref: 00007FF7640785EC
Part of subcall function 00007FF7640785E0: GetDeviceCaps.GDI32 ref: 00007FF7640785FD
Part of subcall function 00007FF7640785E0: ReleaseDC.USER32 ref: 00007FF76407860A

GetObjectW.GDI32 ref: 00007FF764078E48

Part of subcall function 00007FF7640790B0: GetDC.USER32 ref: 00007FF7640790D9
Part of subcall function 00007FF7640790B0: GetObjectW.GDI32 ref: 00007FF764079107
Part of subcall function 00007FF7640790B0: ReleaseDC.USER32 ref: 00007FF7640791BB

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ObjectRelease$CapsDevice
String ID:
API String ID: 1061551593-0
Opcode ID: 68dbe16693602acb82a0a9c061fd0d735b77194d41f4ab9e90264308bb487059
Instruction ID: c76e4c17c0aa0486aabdfc38b46726a1f4decaccbf56e9cf4d2e5f4f2157e037
Opcode Fuzzy Hash: 68dbe16693602acb82a0a9c061fd0d735b77194d41f4ab9e90264308bb487059
Instruction Fuzzy Hash: 83815D32B18A25C6EB10EF6AD8846ACB771FB88B88F405172DE0D57B24DF39D549C790

Function 00007FF76407A2CC Relevance: 3.0, APIs: 2, Instructions: 46COMMON

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32 ref: 00007FF76407A315
GetNumberFormatW.KERNEL32 ref: 00007FF76407A371

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FormatInfoLocaleNumber
String ID:
API String ID: 2169056816-0
Opcode ID: a0c8fcaef59427837b2a7c7753e3d717a8442860a15e47712294eddcbb527c28
Instruction ID: c07d88f161bdf9f039552b4c04f007f6304151626ee4cb2cb9ed5c2eb3d2a150
Opcode Fuzzy Hash: a0c8fcaef59427837b2a7c7753e3d717a8442860a15e47712294eddcbb527c28
Instruction Fuzzy Hash: 22115822A18B95D5E661AF22E8803A9B360FF88B84F844075DA4D03A54EF3CD145C724

Function 00007FF76406126C Relevance: 1.7, APIs: 1, Instructions: 241COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7640624C0: CreateFileW.KERNELBASE ref: 00007FF76406259B
Part of subcall function 00007FF7640624C0: GetLastError.KERNEL32 ref: 00007FF7640625AE
Part of subcall function 00007FF7640624C0: CreateFileW.KERNEL32 ref: 00007FF76406260E
Part of subcall function 00007FF7640624C0: GetLastError.KERNEL32 ref: 00007FF764062617

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640615D0

Part of subcall function 00007FF764063980: MoveFileW.KERNEL32 ref: 00007FF7640639BD
Part of subcall function 00007FF764063980: MoveFileW.KERNEL32 ref: 00007FF764063A34

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: File$CreateErrorLastMove$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 34527147-0
Opcode ID: 92ab8ec23c0d05688d87e0dbc20859be8442520e5a3494748be150235fa3b172
Instruction ID: 2107dec140381068517d071ef67606a63b760b8eeb1126de138845e4d229ef65
Opcode Fuzzy Hash: 92ab8ec23c0d05688d87e0dbc20859be8442520e5a3494748be150235fa3b172
Instruction Fuzzy Hash: E991C122B28662E2EB10EF67D4842ADA761FB44BC4F804076EE4E6BB95DE3CD545C350

Function 00007FF7640651A4 Relevance: 1.5, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

GetVersionExW.KERNEL32 ref: 00007FF7640651D5

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Version
String ID:
API String ID: 1889659487-0
Opcode ID: 6220f8f0736b52f52a4f9f0684f7fcd1da0b773ba531a70ae5974f71c0de4052
Instruction ID: 1300e7a64162a62a4e48e31c2c3519729b00bf94a55f8bc63823c320bb3c2867
Opcode Fuzzy Hash: 6220f8f0736b52f52a4f9f0684f7fcd1da0b773ba531a70ae5974f71c0de4052
Instruction Fuzzy Hash: B0011376A08657CAF664EF02E89177AB2A1FB99314F9002B4D65E86795DB3CF4008E20

Function 00007FF764088C1C Relevance: 1.5, Strings: 1, Instructions: 219COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00007FF764088DD3

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 0
API String ID: 3215553584-4108050209
Opcode ID: 0fbd957179d89af9e1d3453d65279f22830f04fe064c784c04e338e6c7bf3646
Instruction ID: 53c4902b84932d3f8fe21a82b8ce625108e642e90cd5fcae412b5367b12f9565
Opcode Fuzzy Hash: 0fbd957179d89af9e1d3453d65279f22830f04fe064c784c04e338e6c7bf3646
Instruction Fuzzy Hash: E281F523A18262CEEEA8BE1786C067DB390EF50744F9415B1DD099B799CF3DE845C361

Function 00007FF7640889A0 Relevance: 1.4, Strings: 1, Instructions: 199COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00007FF764088B3A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 0
API String ID: 3215553584-4108050209
Opcode ID: a261a21fa45f21d734edfefcd2ffe271b1157111beaf653bc061adca1a26389c
Instruction ID: b9ed6de85b06e51bd173a8060daa330c44e64e6e4842d1b50f8b1219e1cc2520
Opcode Fuzzy Hash: a261a21fa45f21d734edfefcd2ffe271b1157111beaf653bc061adca1a26389c
Instruction Fuzzy Hash: B471E523A0C2A2CEFF68AF1B86C027DE790DF81744F9455B1CD09976D6CE2DE8468761

Function 00007FF76406C96C Relevance: 1.4, Strings: 1, Instructions: 142COMMON

Download Yara Rule

Strings

gj, xrefs: 00007FF76406C97B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID: gj
API String ID: 0-4203073231
Opcode ID: 226aa63bfce789330e15763d8953fb7d553c3450d9c1aa6f260de1088bdface5
Instruction ID: 9a0b6d5eab758b384d6ed9a11ced3e2d88ab0707b16a7e963a4810a3bffa311c
Opcode Fuzzy Hash: 226aa63bfce789330e15763d8953fb7d553c3450d9c1aa6f260de1088bdface5
Instruction Fuzzy Hash: 00518F377286908BD724CF26E444A9AB3A5F388758F445126EF4A93B09CB3DE945CF40

Function 00007FF76408C838 Relevance: 1.4, Strings: 1, Instructions: 139COMMON

Download Yara Rule

Strings

@, xrefs: 00007FF76408C874

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 49e7fa989fc271adaa8e130b28d1cae0d9f82f392019a5f874cdac11a507a941
Instruction ID: a5e1d04c5110165b806ad1e57ab643097658ee7653d57449b22f96f72fb4c8e3
Opcode Fuzzy Hash: 49e7fa989fc271adaa8e130b28d1cae0d9f82f392019a5f874cdac11a507a941
Instruction Fuzzy Hash: 2441E223718A68C9EE04DF2BD5941A9B3A1E758FC0B899136DF0D8B754DE3CD481C300

Function 00007FF764090D20 Relevance: 1.3, APIs: 1, Instructions: 7memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00007FF764090D24

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 4ce929ddb23f73c0a8458b43b9ad49d4d7e2a2f746430c3d48bba7e89996d797
Instruction ID: cf5673ec6ce3291eff35b32d94d723b2cb9f846ac3ec71cd85fe916a114275e5
Opcode Fuzzy Hash: 4ce929ddb23f73c0a8458b43b9ad49d4d7e2a2f746430c3d48bba7e89996d797
Instruction Fuzzy Hash: ADB09220E27A12C2EA083F126CC225863E4BF58700FD4A0B9C50C81320DE2D24A54720

Function 00007FF764073964 Relevance: .9, Instructions: 931COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f10b3c0000bd651423828cb986904098d4bd6c393877fd54d7a895255c38939a
Instruction ID: f9fbceb52c5319f98f53db61d877fa62dd4caea02720a58a06093d82fb85e682
Opcode Fuzzy Hash: f10b3c0000bd651423828cb986904098d4bd6c393877fd54d7a895255c38939a
Instruction Fuzzy Hash: 298247B3A096E1C6E704DF2AD0846FCBB61F755B88F99817ACA4E07785DA3CD445C321

Function 00007FF7640576C0 Relevance: .9, Instructions: 893COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb6bb4a62616f0bcd3e2e2126cd32946fe2ad160a7c0dbd4e5bd03ed1428d6a6
Instruction ID: d25deb712b21d12606df635f70d97d7036937da1b642f3e6b7ffe37995dc2452
Opcode Fuzzy Hash: fb6bb4a62616f0bcd3e2e2126cd32946fe2ad160a7c0dbd4e5bd03ed1428d6a6
Instruction Fuzzy Hash: 08626E9AD3AF9A1EE303A53954131D2E35C0EF74C9551E31BFCE431E66EB92A6832314

Function 00007FF7640753F0 Relevance: .9, Instructions: 891COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48af5ed364a5f24a1952bf7eddbdda76aa6abd9a5dc0519f651bf09102684f27
Instruction ID: c01b59870504013488df831677a89716ba24ee65cff739705c4273cfa24e66bb
Opcode Fuzzy Hash: 48af5ed364a5f24a1952bf7eddbdda76aa6abd9a5dc0519f651bf09102684f27
Instruction Fuzzy Hash: B68211B7A096E0CADB24DF29D4846FCBBA1F755B48F488176CA4D07B85CA3CD885C721

Function 00007FF76406BB90 Relevance: .6, Instructions: 587COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffdf8f5a64276e3eb417e3b9ae5b43350349d41efb04db03fca9f8ba9e24336f
Instruction ID: 1b5dd0ae324fc9a43940f870eb966f44fd5e59a5fe3d3eec07586ab4968b259a
Opcode Fuzzy Hash: ffdf8f5a64276e3eb417e3b9ae5b43350349d41efb04db03fca9f8ba9e24336f
Instruction Fuzzy Hash: BA22F5B3B246508BD728CF25D89AE5E3766F798744B4B8228DF0ACB785DB38D505CB40

Function 00007FF764074B98 Relevance: .6, Instructions: 578COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21143e83615dcc23e36b64f0d60848ac948cba63854c17a605a1a3ec217f9251
Instruction ID: 09316e6722f08d0710df2f3712046d08e4902dc1fc2c838f77624c28db1f70c7
Opcode Fuzzy Hash: 21143e83615dcc23e36b64f0d60848ac948cba63854c17a605a1a3ec217f9251
Instruction Fuzzy Hash: D5320072A081A1DBE71CDF25D590ABC77A1F794B48F418139DB4A87B88DB3CE860CB51

Function 00007FF764071F20 Relevance: .3, Instructions: 337COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3190ea2af27d5756d92182682109c7c4eb2d5c381fcec9ad387f57713ef71fe
Instruction ID: 770f7bea8f5e5f02273e207737c08443b0ac425f8aa327d47130d18e0592a416
Opcode Fuzzy Hash: c3190ea2af27d5756d92182682109c7c4eb2d5c381fcec9ad387f57713ef71fe
Instruction Fuzzy Hash: AEE12662A08292DAEB64EF2AA0C42BDB790FB44748F854179DB4E47B86CF3CE541C715

Function 00007FF764073484 Relevance: .3, Instructions: 302COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d9f1d4af68ebc00f7ab7abf4cea58f5074969ee2768498b55c72978f68bcf28
Instruction ID: c485f44e9333bc67052112f2d3e57aaca1ecbda3d872394e7ccd900e721860c5
Opcode Fuzzy Hash: 3d9f1d4af68ebc00f7ab7abf4cea58f5074969ee2768498b55c72978f68bcf28
Instruction Fuzzy Hash: 76B1BFA2B046E992EE58AF669588BF9A391F749FC4F848036DE0D0BB41DF3CE155C311

Function 00007FF764057288 Relevance: .3, Instructions: 294COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 063370d9e2e9571dc593e8358d008e0ec5385ad0435e9f2f5019d46da215c13b
Instruction ID: 2cf8769c5f93c426ea244bed1d66ffd7fc5fdd2ef3fed7b0663839fef86d776f
Opcode Fuzzy Hash: 063370d9e2e9571dc593e8358d008e0ec5385ad0435e9f2f5019d46da215c13b
Instruction Fuzzy Hash: 05C1BDB7B281A08FE310CF7AD440A9D7BB1F39878CB509125DF59A3B09D639D645CB40

Function 00007FF764072D58 Relevance: .3, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 602477e063b5c1ca901f2159ae3c7fc010244aaa433e93e1960e83d539d05e76
Instruction ID: cbd94cf102dc6b42202d33927904d4351886e0d8a9c0f970c690988b3e15fced
Opcode Fuzzy Hash: 602477e063b5c1ca901f2159ae3c7fc010244aaa433e93e1960e83d539d05e76
Instruction Fuzzy Hash: EDA17873B081A2C6EB15EE2AC4947FDA791FB94744F854178DA4E07786CE3CE881C362

Function 00007FF76406AF18 Relevance: .2, Instructions: 244COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3f156a61251d3696a660eff3e2c5499dd818c979554cbf7ea7c30eccab92618
Instruction ID: fb402a6d83b133185c2e8ad9f5ab240143300a1c6f00838def0748c1fcd27877
Opcode Fuzzy Hash: e3f156a61251d3696a660eff3e2c5499dd818c979554cbf7ea7c30eccab92618
Instruction Fuzzy Hash: 6FC1E473B291F08DE302CBB6A4648FD3FF1E71E34DB864151EF9666B4AD6285201DB60

Function 00007FF76405A310 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: ba0d91b71a6ba36ace61fab0c0f7d4922daa1e3f8d028e3e8b3457ff5b2a4fa0
Instruction ID: e244c8a41a83713728edd623edf5507445c0f75fc7e3cc3f641241d571079e74
Opcode Fuzzy Hash: ba0d91b71a6ba36ace61fab0c0f7d4922daa1e3f8d028e3e8b3457ff5b2a4fa0
Instruction Fuzzy Hash: 78914362B185A1D6EB11EF2AD4802FDA721FF95788F841031EF4E17B49EE38D646C720

Function 00007FF76406B534 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfd80b8924012b3a81ce264cde7180753b201b1e387c519ebd9873ce58afa85e
Instruction ID: e84b2708fc77214598b753324799c4d1be7ece64385e6f3e43a1845a8e9b39a9
Opcode Fuzzy Hash: cfd80b8924012b3a81ce264cde7180753b201b1e387c519ebd9873ce58afa85e
Instruction Fuzzy Hash: 6B6126A3F081F199EB11DF7685404FDBFB1E709784B858072EE9A67646DA3CE105CB20

Function 00007FF7640721D0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8137a9b05b05aada6fbcd6bbdda66db02b1ef4637fe403d2df7c72722ebbdea5
Instruction ID: be72fd0cadfa9c69a4825c1c70fce1078096700137661c1df46c45bcd0847efc
Opcode Fuzzy Hash: 8137a9b05b05aada6fbcd6bbdda66db02b1ef4637fe403d2df7c72722ebbdea5
Instruction Fuzzy Hash: 6E516673B181A19BE728DF2AD0447BDB762F780B48F844138DB0947A88CE3EE541CB11

Function 00007FF764072AB0 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 525267a7f117e2089c634eae81b531c40420bccc1aa688f1dd99d62513960580
Instruction ID: 08fa516385c6a50d72483bbd77f5cb94b8f77f1e467b0cf80a97345d7c878e84
Opcode Fuzzy Hash: 525267a7f117e2089c634eae81b531c40420bccc1aa688f1dd99d62513960580
Instruction Fuzzy Hash: 7531E6B2A185A19BD718EE1BDAE02BEB7D1F744344F44813DDB4A87B41DA3CE441C711

Function 00007FF7640958E0 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20052d42666034676028b01d15d2cffdefdd266dec7e2dd0f98b8d8f07818195
Instruction ID: 03437cc1595364c87728bc4432400fab944684a3bbdee740590338746abdcf2c
Opcode Fuzzy Hash: 20052d42666034676028b01d15d2cffdefdd266dec7e2dd0f98b8d8f07818195
Instruction Fuzzy Hash: DDF0687271C265CBDBA49F2AA882A2977D0F718384F848079D98D83B14D63D94519F18

Function 00007FF764083354 Relevance: .0, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e57e15d0ab639cfe726454a8769b7378f2b682ff734fe90589bfb13db1bf513a
Instruction ID: 71cb613099186b61875524e5f1a45bdd7117463e166a75bd78fefb61b6846823
Opcode Fuzzy Hash: e57e15d0ab639cfe726454a8769b7378f2b682ff734fe90589bfb13db1bf513a
Instruction Fuzzy Hash: 03A002B291CC62E4EA44AF13EDE0070A330FB94300BD060B1F00D815A4DF3DA801C320

Function 00007FF76405D7D0 Relevance: 26.3, APIs: 1, Strings: 14, Instructions: 98COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405D964

Strings

::$DATA, xrefs: 00007FF76405D812
::$INDEX_ALLOCATION, xrefs: 00007FF76405D83E
::$EA, xrefs: 00007FF76405D81D
:$EFS:$LOGGED_UTILITY_STREAM, xrefs: 00007FF76405D86A
::$INDEX_ROOT, xrefs: 00007FF76405D854
:$I30:$INDEX_ALLOCATION, xrefs: 00007FF76405D849
::$REPARSE_POINT, xrefs: 00007FF76405D88B
::$ATTRIBUTE_LIST, xrefs: 00007FF76405D7FC
::$EA_INFORMATION, xrefs: 00007FF76405D828
::$FILE_NAME, xrefs: 00007FF76405D833
:$TXF_DATA:$LOGGED_UTILITY_STREAM, xrefs: 00007FF76405D875
::$LOGGED_UTILITY_STREAM, xrefs: 00007FF76405D85F
::$BITMAP, xrefs: 00007FF76405D807
::$OBJECT_ID, xrefs: 00007FF76405D880

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: :$EFS:$LOGGED_UTILITY_STREAM$:$I30:$INDEX_ALLOCATION$:$TXF_DATA:$LOGGED_UTILITY_STREAM$::$ATTRIBUTE_LIST$::$BITMAP$::$DATA$::$EA$::$EA_INFORMATION$::$FILE_NAME$::$INDEX_ALLOCATION$::$INDEX_ROOT$::$LOGGED_UTILITY_STREAM$::$OBJECT_ID$::$REPARSE_POINT
API String ID: 3668304517-727060406
Opcode ID: 74d68d42448b2834d40d390ad32eed462d68e051ec4e29c63c0154d737a3ceed
Instruction ID: 99bcd1447eea4f33d790fc1405eb4648e9130bca2f410d38f9deb6f4e1103bec
Opcode Fuzzy Hash: 74d68d42448b2834d40d390ad32eed462d68e051ec4e29c63c0154d737a3ceed
Instruction Fuzzy Hash: 0C411876B15F11D8EB04AF62E8803E873B5EB08798F801176DA4C53B68EF38D555C360

Function 00007FF764082A10 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 61libraryloaderCOMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF764082A26
GetModuleHandleW.KERNEL32 ref: 00007FF764082A33
GetModuleHandleW.KERNEL32 ref: 00007FF764082A48
GetProcAddress.KERNEL32 ref: 00007FF764082A60
GetProcAddress.KERNEL32 ref: 00007FF764082A73
CreateEventW.KERNEL32 ref: 00007FF764082A9F
DeleteCriticalSection.KERNEL32 ref: 00007FF764082AEB
CloseHandle.KERNEL32 ref: 00007FF764082AFD

Strings

WakeAllConditionVariable, xrefs: 00007FF764082A66
kernel32.dll, xrefs: 00007FF764082A41
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00007FF764082A2C
SleepConditionVariableCS, xrefs: 00007FF764082A56

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Handle$AddressCriticalModuleProcSection$CloseCountCreateDeleteEventInitializeSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2565136772-3242537097
Opcode ID: 6e1e709f092c3aabc6fb1c9db3d7c09c3ef1a4a7bf2af41e7ac9402dec2f511f
Instruction ID: 4b43215fd7962e69638486666c3d7f166ba217440289b822352f165c7b05c348
Opcode Fuzzy Hash: 6e1e709f092c3aabc6fb1c9db3d7c09c3ef1a4a7bf2af41e7ac9402dec2f511f
Instruction Fuzzy Hash: 13212F65E19A23C6FE54BF63EDD55B4A3A0EF84B90FC450B9C90E427A0DE3DA8458324

Function 00007FF764066A0C Relevance: 16.2, APIs: 6, Strings: 3, Instructions: 444COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640670A6

Part of subcall function 00007FF764052004: std::_Xinvalid_argument.LIBCPMT ref: 00007FF76405200F

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640670B2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640670B8
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640670C4
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640670D6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640670DC

Strings

UNC, xrefs: 00007FF764066BBF
\\?\, xrefs: 00007FF764066A57, 00007FF764066A66
DXGIDebug.dll, xrefs: 00007FF764066A18

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Xinvalid_argumentstd::_
String ID: DXGIDebug.dll$UNC$\\?\
API String ID: 4097890229-4048004291
Opcode ID: 4f1437804bcdce90e20cec30e65ff0fa4fbfed6c2bf85bcea305f217ae80ce6c
Instruction ID: 61b65f077f89209f9e3f708bc43bc332baf9cbe04162b4ddedca22d97c2512b9
Opcode Fuzzy Hash: 4f1437804bcdce90e20cec30e65ff0fa4fbfed6c2bf85bcea305f217ae80ce6c
Instruction Fuzzy Hash: 34120F22B08A52D4EF10EF66D4801ADA371EB81B88F905675DB5E17BE9DF3CD449C360

Function 00007FF76407A440 Relevance: 16.0, APIs: 7, Strings: 2, Instructions: 257COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76405129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF764051396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407A72F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407A735
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407A73B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407A741
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407A747
EndDialog.USER32 ref: 00007FF76407A7BA

Strings

Software\WinRAR SFX, xrefs: 00007FF76407A52B, 00007FF76407A53A
GETPASSWORD1, xrefs: 00007FF76407A773

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskDialog
String ID: GETPASSWORD1$Software\WinRAR SFX
API String ID: 431506467-1315819833
Opcode ID: d8322a208530c57668d9ab0bd9eeb9a998ed53718cd7cec1bf797515a4396991
Instruction ID: 3f912b74bb049d9b1e03bee1a9eaa3bd682623cd56b25a0e4e63e072a420eef5
Opcode Fuzzy Hash: d8322a208530c57668d9ab0bd9eeb9a998ed53718cd7cec1bf797515a4396991
Instruction Fuzzy Hash: 5EB1BF62F19B92C9FB00AF66D8C42BCA372EB45394F904275DE5C26AD9DE3CE445C321

Function 00007FF76408E650 Relevance: 15.9, APIs: 1, Strings: 8, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF76408E7CD

Strings

nan(ind), xrefs: 00007FF76408E706
nan(snan), xrefs: 00007FF76408E6F0
NAN(IND), xrefs: 00007FF76408E6FB
NAN, xrefs: 00007FF76408E6B1
inf, xrefs: 00007FF76408E6D6
NAN(SNAN), xrefs: 00007FF76408E6E5
INF, xrefs: 00007FF76408E6C3
nan, xrefs: 00007FF76408E6B8

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: INF$NAN$NAN(IND)$NAN(SNAN)$inf$nan$nan(ind)$nan(snan)
API String ID: 3215553584-2617248754
Opcode ID: ca8329083cbd7a022b2adefca7a3bb58d0ae1dff90efa4c28dbe4d3f14657870
Instruction ID: 3d1a3237705af97972f27b05a45d7c8dfa07df0d416af4ac1aa2fc137b9296b7
Opcode Fuzzy Hash: ca8329083cbd7a022b2adefca7a3bb58d0ae1dff90efa4c28dbe4d3f14657870
Instruction Fuzzy Hash: 4541CE32B09B65C9EB00DF26E8817A973A4EB14398F80517AEE5C43B54DE38D425C354

Function 00007FF76407F390 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

GetWindow.USER32 ref: 00007FF76407F3CF
GetClassNameW.USER32 ref: 00007FF76407F3FC
GetWindowLongPtrW.USER32 ref: 00007FF76407F41D
IsDlgButtonChecked.USER32 ref: 00007FF76407F437
GetObjectW.GDI32 ref: 00007FF76407F452
IsDlgButtonChecked.USER32 ref: 00007FF76407F487
DeleteObject.GDI32 ref: 00007FF76407F490
GetWindow.USER32 ref: 00007FF76407F49E

Strings

STATIC, xrefs: 00007FF76407F402

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Window$ButtonCheckedObject$ClassDeleteLongName
String ID: STATIC
API String ID: 781704138-1882779555
Opcode ID: 028936735c5caa7e1c5955390d3996a5d13f8d6e72d7f98742e6e6c768b0ab82
Instruction ID: 9904d8cace921c15422d03dc8c04f6636c384d29eaaa0d7d14e243c69954e8c9
Opcode Fuzzy Hash: 028936735c5caa7e1c5955390d3996a5d13f8d6e72d7f98742e6e6c768b0ab82
Instruction Fuzzy Hash: 4F31B635B18662C6FA60FF13A5947BAA392BF88BD0F8004B0DD4D07B55DE3DE44587A1

Function 00007FF764076E80 Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

GlobalAlloc.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF764077E9B), ref: 00007FF764077080
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407717B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764077181
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764077187

Strings

</html>, xrefs: 00007FF764076F72, 00007FF764076F81
<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head>, xrefs: 00007FF764076ED5, 00007FF764076EE4
<html>, xrefs: 00007FF764076F13
<style>body{font-family:"Arial";font-size:12;}</style>, xrefs: 00007FF764076F2C, 00007FF764076F3B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$AllocGlobal
String ID: </html>$<html>$<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head>$<style>body{font-family:"Arial";font-size:12;}</style>
API String ID: 2721297748-1533471033
Opcode ID: 99020ba5446ec8b5071b5be278ebc62a02c6a64c5a04705e5c2bdc59161e89ed
Instruction ID: 44da75966cad50eb88266dcfcc63671fefaa510b8620699a545a06dac1aa14b9
Opcode Fuzzy Hash: 99020ba5446ec8b5071b5be278ebc62a02c6a64c5a04705e5c2bdc59161e89ed
Instruction Fuzzy Hash: 67818D62B18A52C9EB00FFA6D8802FDA371EB48794F801575DE1D1769ADE38E50AC360

Function 00007FF76407AE90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 94COMMON

Download Yara Rule

Strings

LICENSEDLG, xrefs: 00007FF76407AEAE

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Item$Text
String ID: LICENSEDLG
API String ID: 1601838975-2177901306
Opcode ID: e29db3841e3cac596c2aa5df9f59b5580221106af80a371471668d29e16b4ce4
Instruction ID: f14eaf57ce98193becffdb79bfadd3ed7af4b15e9623f44b350e2849c5160912
Opcode Fuzzy Hash: e29db3841e3cac596c2aa5df9f59b5580221106af80a371471668d29e16b4ce4
Instruction Fuzzy Hash: A741AE31A08662C2FB14BF13A894379A360BF84F84F9400B5DA0E03B91CF3DE5868766

Function 00007FF76406B9B4 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 84libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32 ref: 00007FF76406BA12
GetProcAddress.KERNEL32 ref: 00007FF76406BA2D
GetCurrentProcessId.KERNEL32 ref: 00007FF76406BACA

Part of subcall function 00007FF76406DFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF76406DDDF

Strings

CryptProtectMemory failed, xrefs: 00007FF76406BA80
CryptUnprotectMemory, xrefs: 00007FF76406BA1F
CryptUnprotectMemory failed, xrefs: 00007FF76406BAC1
CryptProtectMemory, xrefs: 00007FF76406BA08
Crypt32.dll, xrefs: 00007FF76406B9F0

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AddressProc$CurrentDirectoryProcessSystem
String ID: Crypt32.dll$CryptProtectMemory$CryptProtectMemory failed$CryptUnprotectMemory$CryptUnprotectMemory failed
API String ID: 2915667086-2207617598
Opcode ID: d2e93635ec338890dfe438c4789fcaf7e26687fbfe6c7ce53d5981307f2d6baa
Instruction ID: d5b5394c8ea0107ff25ee4e9576bab9e9baec40cdf9cdf6572664f18f0d88da9
Opcode Fuzzy Hash: d2e93635ec338890dfe438c4789fcaf7e26687fbfe6c7ce53d5981307f2d6baa
Instruction Fuzzy Hash: 5A315770B0DB32D0FA14BF13A9D4675A7A0BF84B90F8511B5E94E533A4DE3DE9458328

Function 00007FF7640787D8 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 415COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764078DB6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764078DC2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764078DCE
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764078DDA
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764078DE0

Strings

, xrefs: 00007FF7640788BE
, xrefs: 00007FF764078A55

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: $
API String ID: 3668304517-227171996
Opcode ID: c3d23b65519d6b0e16bf2cf387636935753ce78294b0e94f23a44a4be1d6057b
Instruction ID: 99ad9e966a5121fd4eccbf90506917222b055404d0832a188e44abaa766803e6
Opcode Fuzzy Hash: c3d23b65519d6b0e16bf2cf387636935753ce78294b0e94f23a44a4be1d6057b
Instruction Fuzzy Hash: 46F1CE63F14A66C0EE04AF66D5C81BCA361BB44BA8F809671CA5D17BD9DF7CE480C361

Function 00007FF7640857EC Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 317COMMONLIBRARYCODE

Download Yara Rule

APIs

Is_bad_exception_allowed.LIBVCRUNTIME ref: 00007FF76408598A
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF764085CAD
abort.LIBCMT ref: 00007FF764085CE1

Strings

csm, xrefs: 00007FF7640859B1
csm, xrefs: 00007FF7640858D1
csm, xrefs: 00007FF764085933

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Is_bad_exception_allowedabortstd::bad_alloc::bad_alloc
String ID: csm$csm$csm
API String ID: 2940173790-393685449
Opcode ID: 65edb01f61f21fff02eaccc9a46b43a233fa456fccf40e480b66f774ee54b1a7
Instruction ID: f8422d4b664ee8725ea8e2703b9f471d4d783a71514f51fb7600a902ce45aede
Opcode Fuzzy Hash: 65edb01f61f21fff02eaccc9a46b43a233fa456fccf40e480b66f774ee54b1a7
Instruction Fuzzy Hash: D3E1E036918BA2CEEB10AF26D5C03ADB7A0FB55758F900175DA8E07796DF38E485CB10

Function 00007FF764064F38 Relevance: 10.7, APIs: 1, Strings: 5, Instructions: 158COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF764064E24: SysAllocString.OLEAUT32 ref: 00007FF764064E5F

VariantClear.OLEAUT32 ref: 00007FF764065125

Strings

SELECT * FROM Win32_OperatingSystem, xrefs: 00007FF764065017
Windows 10, xrefs: 00007FF76406510A
WQL, xrefs: 00007FF76406502A
Name, xrefs: 00007FF7640650F9
ROOT\CIMV2, xrefs: 00007FF764064F7B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AllocClearStringVariant
String ID: Name$ROOT\CIMV2$SELECT * FROM Win32_OperatingSystem$WQL$Windows 10
API String ID: 1959693985-3505469590
Opcode ID: a8b35b7bcd37d82ee4aaa20c3b876beaab518b1de9e1ce59ea14af8b32f1fe8d
Instruction ID: 06fcf4e0dd4b6256834738328b6a2dcaa9678341789f4c8a2858f9f107e7612e
Opcode Fuzzy Hash: a8b35b7bcd37d82ee4aaa20c3b876beaab518b1de9e1ce59ea14af8b32f1fe8d
Instruction Fuzzy Hash: 94714B36B14A25D5EB10EF26E8D06ADB7B0FB88B98B801172EA4E47B64CF3CD544C710

Function 00007FF7640872EC Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 88libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,?,00000000,00007FF7640874F3,?,?,?,00007FF76408525E,?,?,?,00007FF764085219), ref: 00007FF764087371
GetLastError.KERNEL32(?,?,00000000,00007FF7640874F3,?,?,?,00007FF76408525E,?,?,?,00007FF764085219), ref: 00007FF76408737F
LoadLibraryExW.KERNEL32(?,?,00000000,00007FF7640874F3,?,?,?,00007FF76408525E,?,?,?,00007FF764085219), ref: 00007FF7640873A9
FreeLibrary.KERNEL32(?,?,00000000,00007FF7640874F3,?,?,?,00007FF76408525E,?,?,?,00007FF764085219), ref: 00007FF7640873EF
GetProcAddress.KERNEL32(?,?,00000000,00007FF7640874F3,?,?,?,00007FF76408525E,?,?,?,00007FF764085219), ref: 00007FF7640873FB

Strings

api-ms-, xrefs: 00007FF764087391

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProc
String ID: api-ms-
API String ID: 2559590344-2084034818
Opcode ID: eedfc97f7024c66fbeb39a7219499b253e22696fd1fdab2c5f769bf1fd383016
Instruction ID: f95200f32b16cddee51b4c4f672892cb78712992e64552f1ef80136eecf48a41
Opcode Fuzzy Hash: eedfc97f7024c66fbeb39a7219499b253e22696fd1fdab2c5f769bf1fd383016
Instruction Fuzzy Hash: 1131F022B1A662C5EE21BF03AD80679A294FF48BA4FD95575DD1D4B398DF3CE4408330

Function 00007FF764081604 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 43libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,00007FF764081573,?,?,?,00007FF76408192A), ref: 00007FF76408162B
GetProcAddress.KERNEL32(?,?,?,00007FF764081573,?,?,?,00007FF76408192A), ref: 00007FF764081648
GetProcAddress.KERNEL32(?,?,?,00007FF764081573,?,?,?,00007FF76408192A), ref: 00007FF764081664

Strings

KERNEL32.DLL, xrefs: 00007FF764081624
AcquireSRWLockExclusive, xrefs: 00007FF76408163E
ReleaseSRWLockExclusive, xrefs: 00007FF764081653

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AcquireSRWLockExclusive$KERNEL32.DLL$ReleaseSRWLockExclusive
API String ID: 667068680-1718035505
Opcode ID: 4fe35f58cd4175722fa2f4edd42b7d77b08fa8d78ae8e9bf73ccac7c2071e7f8
Instruction ID: edb8405b214447a55593051f75c0f5783c03873f2269f67e3876de2addf09d4d
Opcode Fuzzy Hash: 4fe35f58cd4175722fa2f4edd42b7d77b08fa8d78ae8e9bf73ccac7c2071e7f8
Instruction Fuzzy Hash: 05115221A19B23C5FD54BF13AAC0274DBA5AF48794FCC54B5C86D4A360EE3CAC648630

Function 00007FF76406ED24 Relevance: 9.1, APIs: 6, Instructions: 120timeCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7640651A4: GetVersionExW.KERNEL32 ref: 00007FF7640651D5

FileTimeToLocalFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF764055AB4), ref: 00007FF76406ED8C
FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF764055AB4), ref: 00007FF76406ED98
SystemTimeToTzSpecificLocalTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF764055AB4), ref: 00007FF76406EDA8
SystemTimeToFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF764055AB4), ref: 00007FF76406EDB6
SystemTimeToFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF764055AB4), ref: 00007FF76406EDC4
FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000001,00007FF764055AB4), ref: 00007FF76406EE05

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion
String ID:
API String ID: 2092733347-0
Opcode ID: 197518eb8103cda2bd6b54f1f5e99fa721289ee203340eaf45d2c62117a67569
Instruction ID: 4a5e00d17820264ef98b1f5bcd342d1edf6f5b7ced3ca605bfed0aa5048f78d0
Opcode Fuzzy Hash: 197518eb8103cda2bd6b54f1f5e99fa721289ee203340eaf45d2c62117a67569
Instruction Fuzzy Hash: 01518DB2B14661CBEB04DFA5D8800AC77B1F748788BA0403ADE0E67B58DF38D545C750

Function 00007FF76406F010 Relevance: 9.1, APIs: 6, Instructions: 80timeCOMMON

Download Yara Rule

APIs

SystemTimeToFileTime.KERNEL32 ref: 00007FF76406F074

Part of subcall function 00007FF7640651A4: GetVersionExW.KERNEL32 ref: 00007FF7640651D5

LocalFileTimeToFileTime.KERNEL32 ref: 00007FF76406F096
FileTimeToSystemTime.KERNEL32 ref: 00007FF76406F0A2
TzSpecificLocalTimeToSystemTime.KERNEL32 ref: 00007FF76406F0B2
SystemTimeToFileTime.KERNEL32 ref: 00007FF76406F0C0
SystemTimeToFileTime.KERNEL32 ref: 00007FF76406F0CE

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion
String ID:
API String ID: 2092733347-0
Opcode ID: 93bf5fe4be91675a5f4cba4a2df0f2c5ed0bd126a165fd4d88c3e7d5e64543a6
Instruction ID: ba274a9d88b1bd9a21b7f3b7eae00870eca0707dc6073b2b0cb9319ee85f45c9
Opcode Fuzzy Hash: 93bf5fe4be91675a5f4cba4a2df0f2c5ed0bd126a165fd4d88c3e7d5e64543a6
Instruction Fuzzy Hash: 8D312963B14A61DDFB04DFB5E8801AC7771FB08758B94502AEE0EA7A58EF38D895C710

Function 00007FF764067918 Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 233COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764067C8C

Strings

exe, xrefs: 00007FF7640679AF, 00007FF7640679BE
.rar, xrefs: 00007FF764067969, 00007FF764067978
rar, xrefs: 00007FF764067A9B, 00007FF764067AAA, 00007FF764067B67, 00007FF764067B7C
sfx, xrefs: 00007FF7640679F3, 00007FF764067A02

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: .rar$exe$rar$sfx
API String ID: 3668304517-630704357
Opcode ID: ded382a5f33e5d00d019a19aa0952dad5d31072c5da8fffb523e0446b7f74fbf
Instruction ID: 26019eea371f60109351c9370b42d1435a6182262a9c3beb97a89a033e42da5a
Opcode Fuzzy Hash: ded382a5f33e5d00d019a19aa0952dad5d31072c5da8fffb523e0446b7f74fbf
Instruction Fuzzy Hash: A7A1C422B14626D0EA04BF26D8D42BCA361EF40BA4F902275CE1E177EADF3CE551C360

Function 00007FF764085CE8 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 191COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32 ref: 00007FF764085D58

Part of subcall function 00007FF764085210: abort.LIBCMT ref: 00007FF764085223

_CallSETranslator.LIBVCRUNTIME ref: 00007FF764085DA3
abort.LIBCMT ref: 00007FF764085FD1

Strings

MOC, xrefs: 00007FF764085D6C
RCC, xrefs: 00007FF764085D74

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: abort$CallEncodePointerTranslator
String ID: MOC$RCC
API String ID: 2889003569-2084237596
Opcode ID: 0f4c2d06ef2d655583c55900dbb020dcf620b12558a4295111afe460be181df6
Instruction ID: 4628548e2acb1fa613e1360eba80e0d01dbc16197da9fa3265603b5e3e3a1fb7
Opcode Fuzzy Hash: 0f4c2d06ef2d655583c55900dbb020dcf620b12558a4295111afe460be181df6
Instruction Fuzzy Hash: 7291AF77A08BA1CEEB10DF66E9802ADBBA0FB04798F504129EE4D17B55DF38D195CB10

Function 00007FF764084F80 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF764084FAB
_IsNonwritableInCurrentImage.LIBCMT ref: 00007FF764085040
RtlUnwindEx.KERNEL32(?,?,?,?,?,?,?,00007FF764082F5E), ref: 00007FF76408508F

Strings

f, xrefs: 00007FF764084FBE
csm, xrefs: 00007FF764085026

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CurrentImageNonwritableUnwind__except_validate_context_record
String ID: csm$f
API String ID: 2395640692-629598281
Opcode ID: a7c39da158025e753bf36dfb1e051fd0b17def11f5f8def40396cbfe1c046983
Instruction ID: 6ba3c5bed84c88484a065474b0ade7b1d03cd213b365f0989cdb0a3dcd17f438
Opcode Fuzzy Hash: a7c39da158025e753bf36dfb1e051fd0b17def11f5f8def40396cbfe1c046983
Instruction Fuzzy Hash: A851A636B19622CADF14EF17E984A29B755FB80B98F9080B4DA1F47748DF78E841CB50

Function 00007FF76405CEE0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 139COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF76405D03D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405D0D1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405D0D7

Part of subcall function 00007FF76405DE04: GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF76405CF4B), ref: 00007FF76405DE27
Part of subcall function 00007FF76405DE04: GetLastError.KERNEL32 ref: 00007FF76405DE88
Part of subcall function 00007FF76405DE04: CloseHandle.KERNEL32 ref: 00007FF76405DE9B

Strings

SeRestorePrivilege, xrefs: 00007FF76405CF5E
SeSecurityPrivilege, xrefs: 00007FF76405CF3F

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorLast_invalid_parameter_noinfo_noreturn$CloseCurrentHandleProcess
String ID: SeRestorePrivilege$SeSecurityPrivilege
API String ID: 2102711378-639343689
Opcode ID: cc2cdb65981a4fcc868e5d913d4f06653a23f25da57a99a038b17aaaeb8469e6
Instruction ID: 423878621b1e609c90b607ba613aeb3ec7c120b5497261e1977716349b936171
Opcode Fuzzy Hash: cc2cdb65981a4fcc868e5d913d4f06653a23f25da57a99a038b17aaaeb8469e6
Instruction Fuzzy Hash: 8851F362F18662C5FB14FF62E9C12BDA360EF857A4F8051B5CE0D13696DE3CE485C220

Function 00007FF764077B28 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

ShowWindow.USER32 ref: 00007FF764077B6F
GetWindowRect.USER32 ref: 00007FF764077BC0
ShowWindow.USER32 ref: 00007FF764077C96
ShowWindow.USER32 ref: 00007FF764077CC3

Strings

RarHtmlClassName, xrefs: 00007FF764077C4B

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Window$Show$Rect
String ID: RarHtmlClassName
API String ID: 2396740005-1658105358
Opcode ID: 7e152e90957d1346e93cce3b53dfbd480fa38e990bdf0b518984ba75781cfd03
Instruction ID: 3c4ab023e3ac7d682e569e263e0294cf61e3bd9574f90c1afe2d4157a2284bfc
Opcode Fuzzy Hash: 7e152e90957d1346e93cce3b53dfbd480fa38e990bdf0b518984ba75781cfd03
Instruction Fuzzy Hash: 9C518132A08751CAEA24BF23E49437AE7A0FB88B80F804475DE4E07B55DF3CE0458B10

Function 00007FF76407FD0C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 76COMMON

Download Yara Rule

APIs

SetEnvironmentVariableW.KERNEL32 ref: 00007FF76407FD43
SetEnvironmentVariableW.KERNEL32 ref: 00007FF76407FDBC
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76407FE1B

Strings

sfxcmd, xrefs: 00007FF76407FD3C
sfxpar, xrefs: 00007FF76407FDB5

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: EnvironmentVariable$_invalid_parameter_noinfo_noreturn
String ID: sfxcmd$sfxpar
API String ID: 3540648995-3493335439
Opcode ID: 42a5c16ff962b42e9c466757ddc2add4312beed441a9accfeec164922430c806
Instruction ID: c616268c6c9833efc209af5cc9eeb4c0cbc0fbeb0c9335bd429beb6e091a6190
Opcode Fuzzy Hash: 42a5c16ff962b42e9c466757ddc2add4312beed441a9accfeec164922430c806
Instruction Fuzzy Hash: DE319E32A14A25C4EB00AF66E8C41BCB372FB48B98F945171DE5D177A9CE38D481C364

Function 00007FF76407FED4 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 52COMMON

Download Yara Rule

Strings

REPLACEFILEDLG, xrefs: 00007FF76407FF34, 00007FF76407FF99
RENAMEDLG, xrefs: 00007FF76407FF60

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID:
String ID: RENAMEDLG$REPLACEFILEDLG
API String ID: 0-56093855
Opcode ID: 98f895654b64cd1d2f90e97d30244ed9b67d31cc2014a88c355cd353264df31a
Instruction ID: 8577314acf415ffcb9d4d27fb93212f356ec4fe064ffd0640e08ce26da79eb9f
Opcode Fuzzy Hash: 98f895654b64cd1d2f90e97d30244ed9b67d31cc2014a88c355cd353264df31a
Instruction Fuzzy Hash: 23211921A0CBA7C1FA11BF1BE8C4274B3A5BF4AB88F9400B6D94D47360CE3DE4859365

Function 00007FF76408BFB0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 29libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32 ref: 00007FF76408BFD0
GetProcAddress.KERNEL32 ref: 00007FF76408BFE6
FreeLibrary.KERNEL32 ref: 00007FF76408C00B

Strings

mscoree.dll, xrefs: 00007FF76408BFC7
CorExitProcess, xrefs: 00007FF76408BFDF

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 42a4ca90c7c49dddb16080121233970ff8583544d2054868cb5f0899d871e2db
Instruction ID: e102c48147ce1e7d989d54b96aab5a1b947301099c221257718f888d67aeefa4
Opcode Fuzzy Hash: 42a4ca90c7c49dddb16080121233970ff8583544d2054868cb5f0899d871e2db
Instruction Fuzzy Hash: 28F06822A2DA52C1EF44AF12F8C4379A360EF887D0F842076D94F46764DE3CD884C710

Function 00007FF7640945C0 Relevance: 7.7, APIs: 5, Instructions: 203COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF764094605

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: cf462e6f26ae3af6f96c078c51b53c82231ed120809331cf2f591469c69a5a17
Instruction ID: 0205d64527dc73c644aa7029a54320b27906c0f209e9af9ecd8dcb866314fcfc
Opcode Fuzzy Hash: cf462e6f26ae3af6f96c078c51b53c82231ed120809331cf2f591469c69a5a17
Instruction Fuzzy Hash: 0681C262E1C626E9F710BF679CC06BDA7A0BB45B88F8051B5DD1E13695CF38A845C730

Function 00007FF764063AF8 Relevance: 7.7, APIs: 5, Instructions: 164filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 00007FF764063BBB
CreateFileW.KERNEL32 ref: 00007FF764063C24
SetFileTime.KERNEL32 ref: 00007FF764063CEC
CloseHandle.KERNEL32 ref: 00007FF764063CF6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764063D2C

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: File$Create$CloseHandleTime_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2398171386-0
Opcode ID: 94d33130e0d3e07453908689b86af48371af1e3e167329ed22bda644dbf2c176
Instruction ID: a5cc044dab88e6a6e43127af75a20ac2e2d2147fee1d48f15ee167f329724232
Opcode Fuzzy Hash: 94d33130e0d3e07453908689b86af48371af1e3e167329ed22bda644dbf2c176
Instruction Fuzzy Hash: 18512722F14B12E9FB10EF76E8803BCA371AB487A8F801675DE1E56BD4DE3894158360

Function 00007FF764093F34 Relevance: 7.6, APIs: 5, Instructions: 142fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,00007FF764094767), ref: 00007FF764093F91
WideCharToMultiByte.KERNEL32 ref: 00007FF76409406D
WriteFile.KERNEL32 ref: 00007FF764094093
WriteFile.KERNEL32 ref: 00007FF7640940D2
GetLastError.KERNEL32 ref: 00007FF76409410A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiWide
String ID:
API String ID: 3659116390-0
Opcode ID: 8f90b3f8899b92826fb288bc35eb601c263b89b4fb676f823db5d062d6f6b41f
Instruction ID: e8eeab7815d959f7b1494f3debeeb04eafd8fda308d230bc830239343b3d8e52
Opcode Fuzzy Hash: 8f90b3f8899b92826fb288bc35eb601c263b89b4fb676f823db5d062d6f6b41f
Instruction Fuzzy Hash: 5551BE32A18A61D9E710DF26E8843ACBBB0FB88798F449135CF5E57A99DF38D445C720

Function 00007FF764081E00 Relevance: 7.6, APIs: 5, Instructions: 137memoryCOMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,00000000,00007FF764064DF4), ref: 00007FF764081E87
MultiByteToWideChar.KERNEL32(?,?,?,?,?,?,?,?,00000000,00007FF764064DF4), ref: 00007FF764081F09
SysAllocString.OLEAUT32 ref: 00007FF764081F16

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ByteCharMultiWide$AllocString
String ID:
API String ID: 262959230-0
Opcode ID: 78e2e37474c2608188e0610e2bf8cd52de6089622287df06285a14f25de4e8db
Instruction ID: 45ef891c0d7e6a1adcde749b509bdb12a7741d4d7e246f209a11e555299debe7
Opcode Fuzzy Hash: 78e2e37474c2608188e0610e2bf8cd52de6089622287df06285a14f25de4e8db
Instruction Fuzzy Hash: E541E531A09756CDEF14AF279980378A691EF04BA4F944674EA7D8B7D6DF3CD0418320

Function 00007FF76408F414 Relevance: 7.6, APIs: 5, Instructions: 114libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32 ref: 00007FF76408F536

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: d8da239e760e4119be076ce5ae60c5d71a4e7276355522d8061e2664917ecd9d
Instruction ID: d6a1e1a0be628472c165762c5e1e35913fbf96e316fa6508f70c5d2060d1e7e2
Opcode Fuzzy Hash: d8da239e760e4119be076ce5ae60c5d71a4e7276355522d8061e2664917ecd9d
Instruction Fuzzy Hash: 1E412A22B19A61C5FE15BF236980675A39AFF04BD0F895576DE1D4B744EE3CE4408320

Function 00007FF7640956D8 Relevance: 7.6, APIs: 5, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF7640956FF
_set_statfp.LIBCMT ref: 00007FF76409571A
_set_statfp.LIBCMT ref: 00007FF764095736
_set_statfp.LIBCMT ref: 00007FF764095772

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _set_statfp
String ID:
API String ID: 1156100317-0
Opcode ID: f3bd3298a46f29c998dca386ec4adc9bd6d7efdfabb851da102e47160911a3a1
Instruction ID: e9d92ffffd240c1645dbea1948b04f0d2276393151644881481c8dd81d16d01b
Opcode Fuzzy Hash: f3bd3298a46f29c998dca386ec4adc9bd6d7efdfabb851da102e47160911a3a1
Instruction Fuzzy Hash: 5911B23FE1CA27C1F6583927FDC1779C1426F483A2EC862B0EA7D065DADE2CAD404129

Function 00007FF76408625C Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 163COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF764086286
abort.LIBCMT ref: 00007FF7640864EA

Strings

csm, xrefs: 00007FF7640862AB
csm, xrefs: 00007FF76408641A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: __except_validate_context_recordabort
String ID: csm$csm
API String ID: 746414643-3733052814
Opcode ID: 91fc108a1c492767e4bb41002f60c2920875b1ec76e01922ab372504797a4c8e
Instruction ID: d300902142aa5f97e4e2c01444096a5cd28778f70c90a02735a0088592367ddf
Opcode Fuzzy Hash: 91fc108a1c492767e4bb41002f60c2920875b1ec76e01922ab372504797a4c8e
Instruction Fuzzy Hash: 3B71B2725186A1CADB60AF26D29077DFBA0FB01B88F85A5B5DA4C07B85CF3CD491C750

Function 00007FF7640880F4 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 145COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF76408811B
_invalid_parameter_noinfo.LIBCMT ref: 00007FF7640882ED

Strings

*, xrefs: 00007FF764088221
, xrefs: 00007FF764088276

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: $*
API String ID: 3215553584-3982473090
Opcode ID: 42643a1ee39b50d27a50b926b179a62c0cdc4d381fe14b17104e750277292b9f
Instruction ID: 090efe84e0d83ce93636509d7b40e7ac4c7ee2318146ded1949a52cd20377cb7
Opcode Fuzzy Hash: 42643a1ee39b50d27a50b926b179a62c0cdc4d381fe14b17104e750277292b9f
Instruction Fuzzy Hash: C551467390C672CEEF68AE3A86C437CBBA1FB45B19F9411B5C64A41199CF3CD481C625

Function 00007FF764091758 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 126COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32 ref: 00007FF7640917CB
MultiByteToWideChar.KERNEL32 ref: 00007FF764091894
GetStringTypeW.KERNEL32 ref: 00007FF7640918AE

Strings

$%s, xrefs: 00007FF76409175A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ByteCharMultiWide$StringType
String ID: $%s
API String ID: 3586891840-3791308623
Opcode ID: 8174e861c2faa6f2f7f5292a0ee7474812abc1109b8acb2517e9a7bc716d8d39
Instruction ID: a8ae4a1daab285c9489e6def5ed007185b00a26cb0c90189c6a87bc5c097052a
Opcode Fuzzy Hash: 8174e861c2faa6f2f7f5292a0ee7474812abc1109b8acb2517e9a7bc716d8d39
Instruction Fuzzy Hash: 69419432B14B91CAFF10AF26D8802A9A695FF44BA8F881675DE1D077C5DF3CE8418310

Function 00007FF7640866A0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 117COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF764085210: abort.LIBCMT ref: 00007FF764085223

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF76408674A
_CreateFrameInfo.LIBVCRUNTIME ref: 00007FF764086776

Strings

csm, xrefs: 00007FF764086876

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CreateFrameInfo__except_validate_context_recordabort
String ID: csm
API String ID: 2466640111-1018135373
Opcode ID: ef48871438151390fa300b301edbe87f2aaf35895cd4fd9de5e2d21b12dcaab2
Instruction ID: e03b9d967b28b1334b59db67be4a69a3233f88708afc6922ad056e8108abeee9
Opcode Fuzzy Hash: ef48871438151390fa300b301edbe87f2aaf35895cd4fd9de5e2d21b12dcaab2
Instruction Fuzzy Hash: 05517136628B61CBDA20BF56E18026EB7A4FB89BA0F841575DF8D07B55DF38E050CB10

Function 00007FF764094360 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100fileCOMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 00007FF764094446
WriteFile.KERNEL32 ref: 00007FF764094479
GetLastError.KERNEL32 ref: 00007FF76409449B

Strings

U, xrefs: 00007FF764094424

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ByteCharErrorFileLastMultiWideWrite
String ID: U
API String ID: 2456169464-4171548499
Opcode ID: a3c4996b5397ae7c68c43f4944c85cd830f0b958292ccb38960a62bfe152ddee
Instruction ID: de7feb7ee0e8592901265ed0a0362d5976859c1b895c6dde0f6e80ecdd153202
Opcode Fuzzy Hash: a3c4996b5397ae7c68c43f4944c85cd830f0b958292ccb38960a62bfe152ddee
Instruction Fuzzy Hash: 7E41C522B19A91D2EB10DF26E8843BAB7A0FB88794F845131EE4D87794DF7CD441C720

Function 00007FF7640790B0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 83COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF7640790D9
GetObjectW.GDI32 ref: 00007FF764079107
ReleaseDC.USER32 ref: 00007FF7640791BB

Strings

, xrefs: 00007FF764079153

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ObjectRelease
String ID:
API String ID: 1429681911-3916222277
Opcode ID: 0b5772d91688d342ea342be5c9c3c9ea07a5ad9e93d570546deb1a9808731c40
Instruction ID: edd0dc08dadcbc2a4ba7567966f11218461750db2931386499c156189d19528e
Opcode Fuzzy Hash: 0b5772d91688d342ea342be5c9c3c9ea07a5ad9e93d570546deb1a9808731c40
Instruction Fuzzy Hash: 26316C35618B5286EB04AF13B85872AB7A0F788FD1F9044B5ED4B43B54CE3DE089CB94

Function 00007FF76406E870 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 53COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(?,?,?,00007FF76407317F,?,?,00001000,00007FF76405E51D), ref: 00007FF76406E8BB
CreateSemaphoreW.KERNEL32(?,?,?,00007FF76407317F,?,?,00001000,00007FF76405E51D), ref: 00007FF76406E8CB
CreateEventW.KERNEL32(?,?,?,00007FF76407317F,?,?,00001000,00007FF76405E51D), ref: 00007FF76406E8E4

Strings

Thread pool initialization failed., xrefs: 00007FF76406E900

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Create$CriticalEventInitializeSectionSemaphore
String ID: Thread pool initialization failed.
API String ID: 3340455307-2182114853
Opcode ID: 6610cce2f1ff4f40d78c24fcbab0d777ace7136147ab701da82aad1b7a389e44
Instruction ID: a7ef0e48d0c2fbe240e944e80edbb9e995829e27550fa9657fdb7a6b36058c75
Opcode Fuzzy Hash: 6610cce2f1ff4f40d78c24fcbab0d777ace7136147ab701da82aad1b7a389e44
Instruction Fuzzy Hash: CB21D532F19621C6F710AF26D8843B972A2EB84B08F988074CA0D4A295CF7E9845C7A4

Function 00007FF7640785E0 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF7640785EC
GetDeviceCaps.GDI32 ref: 00007FF7640785FD
ReleaseDC.USER32 ref: 00007FF76407860A

Strings

, xrefs: 00007FF764078610

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CapsDeviceRelease
String ID:
API String ID: 127614599-3916222277
Opcode ID: a42f7bf34e2550c06df92b4c4441a28b155cc5d7cfc3f2a0da00e80f490195b4
Instruction ID: 4727aaec0e766cbeec79a906203f2ae5c1ff002a7afb1314b11129a338ed336e
Opcode Fuzzy Hash: a42f7bf34e2550c06df92b4c4441a28b155cc5d7cfc3f2a0da00e80f490195b4
Instruction Fuzzy Hash: EFE0C230B08641C2FB086BB7F5CA23AA261AB4CBD0F5584B5DA1F43B94CE3DC4C54314

Function 00007FF76405D1A8 Relevance: 6.2, APIs: 4, Instructions: 238timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNEL32 ref: 00007FF76405D46C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405D554
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405D55A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405D560

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$FileTime
String ID:
API String ID: 1137671866-0
Opcode ID: 3e0de6b87fc756f79ac571a371d77b74ab10159eff9a06e36aa9ff194842a8ae
Instruction ID: 26237d206dc559f0627e37b2189e8556f952f5d1b7556869e5776bc80d682e21
Opcode Fuzzy Hash: 3e0de6b87fc756f79ac571a371d77b74ab10159eff9a06e36aa9ff194842a8ae
Instruction Fuzzy Hash: EBA1D362B18A92D1EA14FF66E9801EDA361FF85784FC05172EA8D07AE9DF3CE544C710

Function 00007FF764070548 Relevance: 6.1, APIs: 4, Instructions: 122COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF7640705FC
SetLastError.KERNEL32 ref: 00007FF764070697

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 542e5569473ef3da8fe1ce605206685b94c807f809cd942946f4ed9f56b8a8e3
Instruction ID: e9a70169e652803ea3a0b50816a3825d297b702d6ca916ac598439226d67cb3e
Opcode Fuzzy Hash: 542e5569473ef3da8fe1ce605206685b94c807f809cd942946f4ed9f56b8a8e3
Instruction Fuzzy Hash: DE51A072B14A56D9EB00BF76D8842FCA321FB85B98F804276DA5C57B9ADE2CD540C360

Function 00007FF764079D90 Relevance: 6.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00007FF764079DBC
GetLastError.KERNEL32 ref: 00007FF764079E08
CreateDirectoryW.KERNEL32 ref: 00007FF764079F10
LocalFree.KERNEL32 ref: 00007FF764079F20

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CreateCurrentDirectoryErrorFreeLastLocalProcess
String ID:
API String ID: 1077098981-0
Opcode ID: 3b698565756ad25c4425689a1d29b855ba2ab6589ff95071d83f0d5ba0ad07f7
Instruction ID: bfd5bf03a2042d6ba0ad7ef441abaf82933d49bb77e2e3fcef23e686c9a909e2
Opcode Fuzzy Hash: 3b698565756ad25c4425689a1d29b855ba2ab6589ff95071d83f0d5ba0ad07f7
Instruction Fuzzy Hash: 79515E32628B52C6EB509F22E4843AEB7A4FB84B84F901075EA4E57B54DF3DD444CB60

Function 00007FF76408DB5C Relevance: 6.1, APIs: 4, Instructions: 104COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF76408DBAF
WideCharToMultiByte.KERNEL32 ref: 00007FF76408DC81
GetLastError.KERNEL32 ref: 00007FF76408DCA4
_invalid_parameter_noinfo.LIBCMT ref: 00007FF76408DCD6

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo$ByteCharErrorLastMultiWide
String ID:
API String ID: 4141327611-0
Opcode ID: fdb879c7c344a6dcddabd48f24568e2f5e84c2dc3f6ceef9c32cec135b3ccbbf
Instruction ID: 3e78f3f5494d4743ec53f0d427ca571ec7b7e2cd76d828ba5bb5083544ba0ef2
Opcode Fuzzy Hash: fdb879c7c344a6dcddabd48f24568e2f5e84c2dc3f6ceef9c32cec135b3ccbbf
Instruction Fuzzy Hash: 6941A732A18663CAFF65BE1292D0379E690EFA0790F9442B2DB4D47AD5DF7CD8418720

Function 00007FF764063980 Relevance: 6.1, APIs: 4, Instructions: 101fileCOMMON

Download Yara Rule

APIs

MoveFileW.KERNEL32 ref: 00007FF7640639BD
MoveFileW.KERNEL32 ref: 00007FF764063A34
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764063AEB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF764063AF1

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FileMove_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3823481717-0
Opcode ID: 2b6e6cda77fd8470acf22c2ab4e7c3ce966b7b843ddf4af9049b565a023b9c35
Instruction ID: 6b2d8799a26a925e208ad3e7fea12fb2a43c27f5cdd7103c1c443839b5c5ecf3
Opcode Fuzzy Hash: 2b6e6cda77fd8470acf22c2ab4e7c3ce966b7b843ddf4af9049b565a023b9c35
Instruction Fuzzy Hash: B641B062F24B61D4FF00EF76E8841ACA371BB48B98B805275DE5E26A99DF7CD441C260

Function 00007FF764090B78 Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,?,?,?,?,?,?,00007FF76408C45B), ref: 00007FF764090B91
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,00007FF76408C45B), ref: 00007FF764090BF3
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,00007FF76408C45B), ref: 00007FF764090C2D
FreeEnvironmentStringsW.KERNEL32(?,?,?,?,?,?,?,00007FF76408C45B), ref: 00007FF764090C57

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ByteCharEnvironmentMultiStringsWide$Free
String ID:
API String ID: 1557788787-0
Opcode ID: 23704c5f87cc5d65a6a85ab0da0438508b9fc27f2b888927c3d6011bf25654c1
Instruction ID: fe63c52f8f3a926c8484aba9b1345b201cad67a037d63d1d5d854f060c6d7fd6
Opcode Fuzzy Hash: 23704c5f87cc5d65a6a85ab0da0438508b9fc27f2b888927c3d6011bf25654c1
Instruction Fuzzy Hash: E3217531F2DB61C1E624AF136890029F6A5FF55BD0B885275DE8E63BA4DF3CE8528314

Function 00007FF76408D440 Relevance: 6.0, APIs: 4, Instructions: 43COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00007FF764087F28,?,?,?,00007FF764089D35), ref: 00007FF76408D44A
SetLastError.KERNEL32(?,?,?,00007FF764087F28,?,?,?,00007FF764089D35), ref: 00007FF76408D4B2
SetLastError.KERNEL32(?,?,?,00007FF764087F28,?,?,?,00007FF764089D35), ref: 00007FF76408D4C8
abort.LIBCMT ref: 00007FF76408D4CE

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorLast$abort
String ID:
API String ID: 1447195878-0
Opcode ID: df247b5a3948333368795c339682862bf84e23f7c025c70b8dad3e7beb060077
Instruction ID: d90b10da6befb75063bfcec01c9e1458bb5396922a1171b94d04aacf842f2b0b
Opcode Fuzzy Hash: df247b5a3948333368795c339682862bf84e23f7c025c70b8dad3e7beb060077
Instruction Fuzzy Hash: 35018011B0D626CAFE58BF3367D513891A1DF94790F8416B9D91E467D6ED2CF8504230

Function 00007FF764078590 Relevance: 6.0, APIs: 4, Instructions: 21COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF764078598
GetDeviceCaps.GDI32 ref: 00007FF7640785AE
GetDeviceCaps.GDI32 ref: 00007FF7640785C2
ReleaseDC.USER32 ref: 00007FF7640785D3

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: CapsDevice$Release
String ID:
API String ID: 1035833867-0
Opcode ID: de15d0a72ac65e47349a1b4cc9ca260558533dfe27db70e7b1e031f833f09c6c
Instruction ID: 0ec4023bf39c146954d8aad9a757e857bb149d36ad61a1606fc0de58c6860389
Opcode Fuzzy Hash: de15d0a72ac65e47349a1b4cc9ca260558533dfe27db70e7b1e031f833f09c6c
Instruction Fuzzy Hash: 29E0ED60E19A12C2FF097F73A8D9236A190AF48741F8844BDC81F47750DD3EE0858628

Function 00007FF76405E34C Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 176COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76405E549

Strings

DXGIDebug.dll, xrefs: 00007FF76405E35A

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: DXGIDebug.dll
API String ID: 3668304517-540382549
Opcode ID: 959b456e8a22be6a5b0903782329af9a84473569178788a0c59be25aa0c6c2c3
Instruction ID: 02b89397619e38b973deb8101cfbf83d19d8e07d9ee043fdbc78f58451de9a01
Opcode Fuzzy Hash: 959b456e8a22be6a5b0903782329af9a84473569178788a0c59be25aa0c6c2c3
Instruction Fuzzy Hash: AB71BB72A14B81C6EB14DF26E9803ADB3A8FB54794F804225DFAD07B99DF38D061C310

Function 00007FF76408E1F4 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 138COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF76408E237

Strings

e+000, xrefs: 00007FF76408E2DF
gfff, xrefs: 00007FF76408E362

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: e+000$gfff
API String ID: 3215553584-3030954782
Opcode ID: ffbcb58cc87a1110f60409a8afde5d08377aab6ce8cf060c3284a5669936e3c2
Instruction ID: 2714a51f8370b7bcce99e57d5ece065fe04af11bba9c4bcbe08d92b0a78f7961
Opcode Fuzzy Hash: ffbcb58cc87a1110f60409a8afde5d08377aab6ce8cf060c3284a5669936e3c2
Instruction Fuzzy Hash: 7B510C62B187E1CAEB25AF369A81369AB91E781B90F489271C69C87BD5CF2CD444C710

Function 00007FF764069408 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7640695A8: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7640695E6

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF76406959C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7640695A2

Strings

SIZE, xrefs: 00007FF764069443

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$swprintf
String ID: SIZE
API String ID: 449872665-3243624926
Opcode ID: 049592b23eccf18b91a3e94430bb7a89aa9f7458b84fc95e0ae4febadba54acb
Instruction ID: a0ef8b83a19791a0ac419f13fb8d18f0fd35fbbf535448ee6b75ddd3162200e4
Opcode Fuzzy Hash: 049592b23eccf18b91a3e94430bb7a89aa9f7458b84fc95e0ae4febadba54acb
Instruction Fuzzy Hash: DE41E472B28692D5EE10FF56E4813BDA751FF85790F804271EA9E06AD6EE3CD580C710

Function 00007FF76408C2C0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF76408C2EA
GetModuleFileNameA.KERNEL32(?,?,?,?,?,00007FF764082CD5), ref: 00007FF76408C30B

Strings

C:\Users\user\Desktop\cbIcBAgY5W.exe, xrefs: 00007FF76408C2F9

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FileModuleName_invalid_parameter_noinfo
String ID: C:\Users\user\Desktop\cbIcBAgY5W.exe
API String ID: 3307058713-1194001138
Opcode ID: 2b307fc7043d57580c2760bc14d10e66149d3294dbd6a1f00798eb6953a6f573
Instruction ID: 7f8a06c05c934109034e21098653ac67aa0a4594a27cb78b8878ffd331c371ee
Opcode Fuzzy Hash: 2b307fc7043d57580c2760bc14d10e66149d3294dbd6a1f00798eb6953a6f573
Instruction Fuzzy Hash: 9E417F32A0CA66CAEB14BF27A9801BCB7A4EF447D4B944176E94D47B45DE3DE4818720

Function 00007FF764079B40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 104COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF76405255C: GetDlgItem.USER32 ref: 00007FF7640525AC
Part of subcall function 00007FF76405255C: SetDlgItemTextW.USER32 ref: 00007FF7640525C8

EndDialog.USER32 ref: 00007FF764079C24
SetDlgItemTextW.USER32 ref: 00007FF764079CAA

Strings

ASKNEXTVOL, xrefs: 00007FF764079B72

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: Item$Text$Dialog
String ID: ASKNEXTVOL
API String ID: 2638039312-3402441367
Opcode ID: df6f41e9741c0f8996d893104ea931d078e3acc76589f579c23b9fdb6368dbb8
Instruction ID: d8695e7c600c62093d0ec617be5e166ccf7418b8d6df7c9a07397a65a89a7b10
Opcode Fuzzy Hash: df6f41e9741c0f8996d893104ea931d078e3acc76589f579c23b9fdb6368dbb8
Instruction Fuzzy Hash: 28416F62B186A2C1FA14BF17E5D02B9A7A1FF89BC0F9400B5DE4D17795CE3DE4418361

Function 00007FF764069638 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 84COMMON

Download Yara Rule

APIs

_snwprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7640696EA

Part of subcall function 00007FF764070F68: WideCharToMultiByte.KERNEL32 ref: 00007FF764070F99

Strings

$%s, xrefs: 00007FF7640696D7
@%s, xrefs: 00007FF7640696CE

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ByteCharMultiWide_snwprintf
String ID: $%s$@%s
API String ID: 2650857296-834177443
Opcode ID: 68d6d98aec82f67e7f26d78b4367655257a27e60e60eb814561ac576190adeba
Instruction ID: 982c2d6c7af8be4e4f7d399eb1cc6d0c58422f2f4fd233e55f4b54a4fb9b7a1f
Opcode Fuzzy Hash: 68d6d98aec82f67e7f26d78b4367655257a27e60e60eb814561ac576190adeba
Instruction Fuzzy Hash: 2B31C772B18A66D5EE10EF67E4806E9A3A0FB44784F901072EE0D17B95DE3DE545C710

Function 00007FF764080204 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 75windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32 ref: 00007FF76408026F
DialogBoxParamW.USER32 ref: 00007FF7640802A4

Strings

GETPASSWORD1, xrefs: 00007FF76408029D

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: DialogParamVisibleWindow
String ID: GETPASSWORD1
API String ID: 3157717868-3292211884
Opcode ID: 3689008c5ae976a1f3a242e5b1eb30ef9737a63c20829ff4d7ba5964f065d3d0
Instruction ID: e726ea0b8384d921a6cd773bf55494bf3318e02bb26b437623d615d40c78fc2e
Opcode Fuzzy Hash: 3689008c5ae976a1f3a242e5b1eb30ef9737a63c20829ff4d7ba5964f065d3d0
Instruction Fuzzy Hash: CD315E25A0D7A2C5EB00BF13A9802B5BB60EF56BC4FC814B6D94D17766CE6DE440C374

Function 00007FF76408EB04 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32 ref: 00007FF76408EB76
GetFileType.KERNEL32 ref: 00007FF76408EB8C

Strings

@, xrefs: 00007FF76408EBB7

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FileHandleType
String ID: @
API String ID: 3000768030-2766056989
Opcode ID: 01c4e23626c5bd34e0d32a71787dfe5976e9b76bf070a7e2fa99837352baeece
Instruction ID: 400e32360dd5b16ed396be86968da81f8d757aa3736301b1ca396e63b3def3e3
Opcode Fuzzy Hash: 01c4e23626c5bd34e0d32a71787dfe5976e9b76bf070a7e2fa99837352baeece
Instruction Fuzzy Hash: 7E21F722A087A2C9EF609F2699D013AA650EBC5774F680375D66F477D4CE3DE881C3A0

Function 00007FF764084078 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlPcToFileHeader.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF764081D3E), ref: 00007FF7640840BC
RaiseException.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF764081D3E), ref: 00007FF764084102

Strings

csm, xrefs: 00007FF7640840EF

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ExceptionFileHeaderRaise
String ID: csm
API String ID: 2573137834-1018135373
Opcode ID: 995ce70781ed1107fbe35a2df86b6ab92d82f2488d4e31342cdb9a65d606da21
Instruction ID: d95830ef99bbf6375eb8bd52df06461bad8b62f6f90fc8b764e3f546a1815a38
Opcode Fuzzy Hash: 995ce70781ed1107fbe35a2df86b6ab92d82f2488d4e31342cdb9a65d606da21
Instruction Fuzzy Hash: 7F113D32A18B5182EB209F16E58026AB7E5FB88B94F584271DF8D07755EF3CD955CB00

Function 00007FF76406EA5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,00007FF76406E95F,?,?,?,00007FF76406463A,?,?,?), ref: 00007FF76406EA63
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF76406E95F,?,?,?,00007FF76406463A,?,?,?), ref: 00007FF76406EA6E

Strings

WaitForMultipleObjects error %d, GetLastError %d, xrefs: 00007FF76406EA78

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: ErrorLastObjectSingleWait
String ID: WaitForMultipleObjects error %d, GetLastError %d
API String ID: 1211598281-2248577382
Opcode ID: 98ce5a6e9b01a49333d4d7b683bb298ff4a8e953ba0927a3bf2f7aa8eb90df55
Instruction ID: 4f37804bf8575abec90a37ed4611962e32d70aa978f494fb818f85ed5680e314
Opcode Fuzzy Hash: 98ce5a6e9b01a49333d4d7b683bb298ff4a8e953ba0927a3bf2f7aa8eb90df55
Instruction Fuzzy Hash: 9EE01A21E29822D1F600BF32DCC2578A220BFA1770FD013B0D13E812F19F2CA9498324

Function 00007FF76406A43C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF76406A447
FindResourceW.KERNEL32 ref: 00007FF76406A45D

Strings

RTL, xrefs: 00007FF76406A453

Memory Dump Source

Source File: 00000000.00000002.1371800968.00007FF764051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF764050000, based on PE: true

Associated: 00000000.00000002.1371783097.00007FF764050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371835875.00007FF764098000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640AB000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371857704.00007FF7640B4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BA000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1371898182.00007FF7640BE000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff764050000_cbIcBAgY5W.jbxd

Similarity

API ID: FindHandleModuleResource
String ID: RTL
API String ID: 3537982541-834975271
Opcode ID: e39cf6139d6c3c808756c827088780cb49cd2dd94430b396554b51375d39015a
Instruction ID: c21993b38da01667be5d6335463be05ccfade343a1e3b90f8d59e58ae315431c
Opcode Fuzzy Hash: e39cf6139d6c3c808756c827088780cb49cd2dd94430b396554b51375d39015a
Instruction Fuzzy Hash: 7CD05E92F19622C2FF196FB3AC8933452505F99B41FC860B9CD1E06390EE2CE898C760

Analysis Process: work.exePID: 7588, Parent PID: 7532COMMON

Execution Graph

Execution Coverage:	12.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	2000
Total number of Limit Nodes:	26

Executed Functions

Function 00007FF6E995B190 Relevance: 125.7, APIs: 61, Strings: 10, Instructions: 1421windowfilesleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E993255C: GetDlgItem.USER32 ref: 00007FF6E99325AC
Part of subcall function 00007FF6E993255C: SetDlgItemTextW.USER32 ref: 00007FF6E99325C8

EndDialog.USER32 ref: 00007FF6E995B2D0
SetDlgItemTextW.USER32 ref: 00007FF6E995B320
GetMessageW.USER32 ref: 00007FF6E995B350
IsDialogMessageW.USER32 ref: 00007FF6E995B369
TranslateMessage.USER32 ref: 00007FF6E995B37B
DispatchMessageW.USER32 ref: 00007FF6E995B389
EndDialog.USER32 ref: 00007FF6E995B3D3
GetDlgItem.USER32 ref: 00007FF6E995B410
IsDlgButtonChecked.USER32 ref: 00007FF6E995B431
IsDlgButtonChecked.USER32 ref: 00007FF6E995B449
SetFocus.USER32 ref: 00007FF6E995B452
GetLastError.KERNEL32 ref: 00007FF6E995B634
GetLastError.KERNEL32 ref: 00007FF6E995B665
GetTickCount.KERNEL32 ref: 00007FF6E995B68B
GetLastError.KERNEL32 ref: 00007FF6E995B6F5
GetCommandLineW.KERNEL32 ref: 00007FF6E995B841
CreateFileMappingW.KERNEL32 ref: 00007FF6E995B900
MapViewOfFile.KERNEL32 ref: 00007FF6E995B923
ShellExecuteExW.SHELL32 ref: 00007FF6E995B95B
Sleep.KERNEL32 ref: 00007FF6E995B9B6
UnmapViewOfFile.KERNEL32 ref: 00007FF6E995B9DF
CloseHandle.KERNEL32 ref: 00007FF6E995B9E8
SetDlgItemTextW.USER32 ref: 00007FF6E995BCDE
DialogBoxParamW.USER32 ref: 00007FF6E995C0D7
EndDialog.USER32 ref: 00007FF6E995C0EF
EnableWindow.USER32 ref: 00007FF6E995C2A6
IsDlgButtonChecked.USER32 ref: 00007FF6E995C2F8
WaitForInputIdle.USER32 ref: 00007FF6E995B9A3

Part of subcall function 00007FF6E994AAE0: LoadStringW.USER32 ref: 00007FF6E994AB67
Part of subcall function 00007FF6E994AAE0: LoadStringW.USER32 ref: 00007FF6E994AB80

IsDlgButtonChecked.USER32 ref: 00007FF6E995BEC3
SendDlgItemMessageW.USER32 ref: 00007FF6E995BEEA
GetDlgItem.USER32 ref: 00007FF6E995BEF8
IsDlgButtonChecked.USER32 ref: 00007FF6E995BF12
GetDlgItem.USER32 ref: 00007FF6E995BF4F
SetDlgItemTextW.USER32 ref: 00007FF6E995BFEC
SetDlgItemTextW.USER32 ref: 00007FF6E995C004
SetDlgItemTextW.USER32 ref: 00007FF6E995C321
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995C363
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995C369
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995C36F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995C375
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995C37B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995C381
SendDlgItemMessageW.USER32 ref: 00007FF6E995C449
EndDialog.USER32 ref: 00007FF6E995C463
GetDlgItem.USER32 ref: 00007FF6E995C491
SetFocus.USER32 ref: 00007FF6E995C49A
SendDlgItemMessageW.USER32 ref: 00007FF6E995C53E
FindFirstFileW.KERNEL32 ref: 00007FF6E995C562
FindClose.KERNEL32 ref: 00007FF6E995C68A
SendDlgItemMessageW.USER32 ref: 00007FF6E995C7AF

Part of subcall function 00007FF6E993129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E9931396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995CAA9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995CAAF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995CAB5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995CABB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995CAC1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995CAC7

Strings

LICENSEDLG, xrefs: 00007FF6E995C0C9
STARTDLG, xrefs: 00007FF6E995B1CA
p, xrefs: 00007FF6E995B7AB
REPLACEFILEDLG, xrefs: 00007FF6E995C3D3
%s %s, xrefs: 00007FF6E995C6D9, 00007FF6E995C946
winrarsfxmappingfile.tmp, xrefs: 00007FF6E995B8E0
-el -s2 "-d%s" "-sp%s", xrefs: 00007FF6E995B799
@, xrefs: 00007FF6E995B7B6
__tmp_rar_sfx_access_check_, xrefs: 00007FF6E995B6A9
runas, xrefs: 00007FF6E995B7C9

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Item$_invalid_parameter_noinfo_noreturn$Message$DialogText$ButtonChecked$FileSend$ErrorLast$CloseFindFocusLoadStringView$CommandConcurrency::cancel_current_taskCountCreateDispatchEnableExecuteFirstHandleIdleInputLineMappingParamShellSleepTickTranslateUnmapWaitWindow
String ID: %s %s$-el -s2 "-d%s" "-sp%s"$@$LICENSEDLG$REPLACEFILEDLG$STARTDLG$__tmp_rar_sfx_access_check_$p$runas$winrarsfxmappingfile.tmp
API String ID: 2128803032-2702805183
Opcode ID: f112f7a91d4f3f3926312605db9c3ae814b73ec399bc08ca6e831bd1d063eaba
Instruction ID: ee6626bce8e53fdec67ec2be82a19e7e3fcfae0db6476aeadc5695ca61111d7b
Opcode Fuzzy Hash: f112f7a91d4f3f3926312605db9c3ae814b73ec399bc08ca6e831bd1d063eaba
Instruction Fuzzy Hash: 87D2D163A0868296FB20DF25E8443FA2361EF86781F484135D94D876E7EF3EE544C71A

Function 00007FF6E995CE88 Relevance: 66.7, APIs: 27, Strings: 10, Instructions: 1963fileCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF6E995D5F3
IsDlgButtonChecked.USER32 ref: 00007FF6E995D626
IsDlgButtonChecked.USER32 ref: 00007FF6E995D655
SHFileOperationW.SHELL32 ref: 00007FF6E995D9BB
MoveFileW.KERNEL32 ref: 00007FF6E995DB4B
MoveFileExW.KERNEL32 ref: 00007FF6E995DB69
GetTempPathW.KERNEL32 ref: 00007FF6E995DC49

Part of subcall function 00007FF6E9931FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9931FFB

EndDialog.USER32 ref: 00007FF6E995DFCA
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E995EEE3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EEEF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF07
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF0D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF13
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF19
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF1F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF25
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF2B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF31
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF37
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF3D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF43
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF49
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF4F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF55
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995EF5B
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E995EF67
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E995EF73

Strings

@set:user, xrefs: 00007FF6E995DD96, 00007FF6E995DDA5
.tmp, xrefs: 00007FF6E995DA85
HIDE, xrefs: 00007FF6E995E9E5, 00007FF6E995E9F4
.lnk, xrefs: 00007FF6E995E406, 00007FF6E995E415
MIN, xrefs: 00007FF6E995EAE5, 00007FF6E995EAF4
ProgramFilesDir, xrefs: 00007FF6E995D4F0
Software\Microsoft\Windows\CurrentVersion, xrefs: 00007FF6E995D501
lnk, xrefs: 00007FF6E995E3CA, 00007FF6E995E3D9
<br>, xrefs: 00007FF6E995D6DA, 00007FF6E995D6E9
MAX, xrefs: 00007FF6E995EA82, 00007FF6E995EA91

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskFile$ButtonCheckedMove$DialogItemOperationPathTemp
String ID: .lnk$.tmp$<br>$@set:user$HIDE$MAX$MIN$ProgramFilesDir$Software\Microsoft\Windows\CurrentVersion$lnk
API String ID: 2285161090-3916287355
Opcode ID: e530fa976c247d03843a71bdcb8ea7d5b705ef19b124f0053bbcc44abdb5d3bc
Instruction ID: 69212c6d95d83b5dabd865edeb2703b32b311f7121f7b08a4a22f8cd1d5165f2
Opcode Fuzzy Hash: e530fa976c247d03843a71bdcb8ea7d5b705ef19b124f0053bbcc44abdb5d3bc
Instruction Fuzzy Hash: E313C063B04B8299EB10DF74D8443ED27A1EF40398F480135DA1D97AEADF3AE585C35A

Function 00007FF6E9960754 Relevance: 45.9, APIs: 21, Strings: 5, Instructions: 380
filesleeptimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E994DFD0: GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E018
Part of subcall function 00007FF6E994DFD0: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E030
Part of subcall function 00007FF6E994DFD0: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E05D

Part of subcall function 00007FF6E99462DC: GetCurrentDirectoryW.KERNEL32 ref: 00007FF6E99462F2
Part of subcall function 00007FF6E99462DC: GetCurrentDirectoryW.KERNEL32 ref: 00007FF6E994632C

Part of subcall function 00007FF6E995946C: OleInitialize.OLE32 ref: 00007FF6E9959486
Part of subcall function 00007FF6E995946C: SHGetMalloc.SHELL32 ref: 00007FF6E99594D4

GetCommandLineW.KERNEL32 ref: 00007FF6E996096E
OpenFileMappingW.KERNEL32 ref: 00007FF6E9960A07
MapViewOfFile.KERNEL32 ref: 00007FF6E9960A30
UnmapViewOfFile.KERNEL32 ref: 00007FF6E9960A46
MapViewOfFile.KERNEL32 ref: 00007FF6E9960A63
UnmapViewOfFile.KERNEL32 ref: 00007FF6E9960ACA
CloseHandle.KERNEL32 ref: 00007FF6E9960AD3
SetEnvironmentVariableW.KERNEL32 ref: 00007FF6E9960BAD
GetLocalTime.KERNEL32 ref: 00007FF6E9960BB8
swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF6E9960C13
SetEnvironmentVariableW.KERNEL32 ref: 00007FF6E9960C26
GetModuleHandleW.KERNEL32 ref: 00007FF6E9960C2E
LoadIconW.USER32 ref: 00007FF6E9960C4D
DialogBoxParamW.USER32 ref: 00007FF6E9960CB6
Sleep.KERNEL32 ref: 00007FF6E9960CE6
DeleteObject.GDI32 ref: 00007FF6E9960D0D
DeleteObject.GDI32 ref: 00007FF6E9960D1F
CloseHandle.KERNEL32 ref: 00007FF6E9960D67
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9960DD7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9960DDD
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9960DE3

Part of subcall function 00007FF6E995FD0C: SetEnvironmentVariableW.KERNEL32 ref: 00007FF6E995FD43
Part of subcall function 00007FF6E995FD0C: SetEnvironmentVariableW.KERNEL32 ref: 00007FF6E995FDBC

Strings

STARTDLG, xrefs: 00007FF6E9960CA5
sfxname, xrefs: 00007FF6E9960B9B
winrarsfxmappingfile.tmp, xrefs: 00007FF6E99609F9
sfxstime, xrefs: 00007FF6E9960C1F
%4d-%02d-%02d-%02d-%02d-%02d-%03d, xrefs: 00007FF6E9960C02

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: File$EnvironmentHandleVariableView$_invalid_parameter_noinfo_noreturn$AddressCloseCurrentDeleteDirectoryModuleObjectProcUnmap$CommandDialogIconInitializeLineLoadLocalMallocMappingOpenParamSleepTimeswprintf
String ID: %4d-%02d-%02d-%02d-%02d-%02d-%03d$STARTDLG$sfxname$sfxstime$winrarsfxmappingfile.tmp
API String ID: 1048086575-3710569615
Opcode ID: d5ff2d27d4a47c3e78c3dd13211a1c1de422b0d8b6c9155afaadc84a8e0932e8
Instruction ID: 06030f027345095f60585cd6a7292fdd39e1f8c144215909d19ef6afaed7553d
Opcode Fuzzy Hash: d5ff2d27d4a47c3e78c3dd13211a1c1de422b0d8b6c9155afaadc84a8e0932e8
Instruction Fuzzy Hash: 0312B863A18B8285FB10DF25E8853B96361FF84784F484235DA5D86AA7DF3EE140C74A

Function 00007FF6E994A4AC Relevance: 23.0, APIs: 11, Strings: 2, Instructions: 250
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF6E994A504

Part of subcall function 00007FF6E9950F68: WideCharToMultiByte.KERNEL32 ref: 00007FF6E9950F99

SetDlgItemTextW.USER32 ref: 00007FF6E994A573
GetWindowRect.USER32 ref: 00007FF6E994A5AD
GetClientRect.USER32 ref: 00007FF6E994A5BB
GetWindowLongPtrW.USER32 ref: 00007FF6E994A66C
GetWindowRect.USER32 ref: 00007FF6E994A6B2
SetDlgItemTextW.USER32 ref: 00007FF6E994A6EC
GetSystemMetrics.USER32 ref: 00007FF6E994A6F7
GetWindow.USER32 ref: 00007FF6E994A708
GetWindowRect.USER32 ref: 00007FF6E994A746
GetWindow.USER32 ref: 00007FF6E994A808

Strings

CAPTION, xrefs: 00007FF6E994A6CF
$%s:, xrefs: 00007FF6E994A4EF

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Window$Rect$ItemText$ByteCharClientLongMetricsMultiSystemWideswprintf
String ID: $%s:$CAPTION
API String ID: 1936833115-404845831
Opcode ID: 1224945cd41bf140f0dcf37f1b002595631e4f701a4b658f84a72e9da714e3d9
Instruction ID: 4e5c40dfd97760d8addd0a263a25f4dd0fd76c664d30dcc3d14d84207e2ef702
Opcode Fuzzy Hash: 1224945cd41bf140f0dcf37f1b002595631e4f701a4b658f84a72e9da714e3d9
Instruction Fuzzy Hash: 5291C533B186518AE718CF79A84076EA7A1FF84784F485535EE4D87B99CE3DE806CB04

Function 00007FF6E993F930 Relevance: 17.2, APIs: 8, Strings: 1, Instructions: 1417COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9941239
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994123F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9941245
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994124B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9941251
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9941257
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994125D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9941263

Strings

__tmp_reference_source_, xrefs: 00007FF6E993FCCF, 00007FF6E993FCDE

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: __tmp_reference_source_
API String ID: 3668304517-685763994
Opcode ID: 4624d0d2893f011b5be8b6ffca3faaddc15c8b957ce7a47abe3dcbca9120cf77
Instruction ID: a7b2a75798236a60e51103d47f190645aa49928cb3a5a9c5fe6c3f596f25a0ba
Opcode Fuzzy Hash: 4624d0d2893f011b5be8b6ffca3faaddc15c8b957ce7a47abe3dcbca9120cf77
Instruction Fuzzy Hash: 48E2A463A186C292EA65CF35D1843BE6761FF81744F484132CAAD836A7CF3EE455CB06

Function 00007FF6E9934840 Relevance: 12.1, APIs: 5, Strings: 1, Instructions: 1624COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993511E
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9935124
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993512A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9935E16
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9935E1C

Strings

CMT, xrefs: 00007FF6E99359B2

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: CMT
API String ID: 3668304517-2756464174
Opcode ID: 3e3ef2645bc48f2f268b551dc6196b380c912f1c7b9d048ccb2ab2083d35e596
Instruction ID: ac38da2eb41f37d5c00f1f6ef0ddfa21eb82ac63076498934535bd44ecfdfd7e
Opcode Fuzzy Hash: 3e3ef2645bc48f2f268b551dc6196b380c912f1c7b9d048ccb2ab2083d35e596
Instruction Fuzzy Hash: B6E2CC23B0868286EB28DF7594983FD67A1AF49784F480035DA5E83797DF3EE055C70A

Function 00007FF6E99440BC Relevance: 10.7, APIs: 7, Instructions: 153
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNELBASE ref: 00007FF6E994410B
FindFirstFileW.KERNEL32 ref: 00007FF6E994415E
GetLastError.KERNEL32 ref: 00007FF6E99441AF
FindNextFileW.KERNEL32 ref: 00007FF6E99441D7
GetLastError.KERNEL32 ref: 00007FF6E99441E5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994430F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9944315

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: FileFind$ErrorFirstLast_invalid_parameter_noinfo_noreturn$Next
String ID:
API String ID: 474548282-0
Opcode ID: 5b7a682f346ba33cc6e8113bf8bb974c5d06c867b30d63dc8f71ee7e42fd28a6
Instruction ID: 171e9b73fd9b69b6a55be416a4d304ab3ff841cfab74e962fd7018e81221b40f
Opcode Fuzzy Hash: 5b7a682f346ba33cc6e8113bf8bb974c5d06c867b30d63dc8f71ee7e42fd28a6
Instruction Fuzzy Hash: EF61C663A18A4281EA119F25E4803BD6361FF997A4F144331EABD837DADF3DD485CB05

Function 00007FF6E9935E24 Relevance: 7.6, APIs: 3, Strings: 1, Instructions: 586
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

CMT, xrefs: 00007FF6E99359B2, 00007FF6E993675B

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID:
String ID: CMT
API String ID: 0-2756464174
Opcode ID: b8fa635b894758bb4949fb57bddd48836ff0d2ecd2be86fe1bb2065c738ed5aa
Instruction ID: 26769e1c7a4c76d6ff00072bb6381d189eb2b26d100de78405267afaecb685bc
Opcode Fuzzy Hash: b8fa635b894758bb4949fb57bddd48836ff0d2ecd2be86fe1bb2065c738ed5aa
Instruction Fuzzy Hash: 2942CB23B086829AEB18DF75C1863FD67A1AF41388F480136CB1E93697DF39E519C706

Function 00007FF6E994DFD0 Relevance: 143.9, APIs: 16, Strings: 66, Instructions: 440
libraryfileloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E018
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E030
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E05D
CreateFileW.KERNEL32 ref: 00007FF6E994E3F0
SetFilePointer.KERNEL32 ref: 00007FF6E994E40E
ReadFile.KERNEL32 ref: 00007FF6E994E436

Part of subcall function 00007FF6E994DFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF6E994DDDF

CompareStringW.KERNELBASE ref: 00007FF6E994E559
CloseHandle.KERNEL32 ref: 00007FF6E994E4F3

Part of subcall function 00007FF6E9931FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9931FFB

Part of subcall function 00007FF6E99451A4: GetVersionExW.KERNEL32 ref: 00007FF6E99451D5

Part of subcall function 00007FF6E994DFD0: LoadLibraryW.KERNELBASE ref: 00007FF6E994DEFF
Part of subcall function 00007FF6E994DFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994DFB5
Part of subcall function 00007FF6E994DFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994DFBB
Part of subcall function 00007FF6E994DFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994DFC1
Part of subcall function 00007FF6E994DFD0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994DFC7

AllocConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E74B
GetCurrentProcessId.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E755
AttachConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E75D
GetStdHandle.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E780
WriteConsoleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E799
Sleep.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E7A4
FreeConsole.KERNEL32(?,?,?,00000000,?), ref: 00007FF6E994E7AA
ExitProcess.KERNEL32 ref: 00007FF6E994E7BB

Strings

cabinet.dll, xrefs: 00007FF6E994E1DB
userenv.dll, xrefs: 00007FF6E994E15D
profapi.dll, xrefs: 00007FF6E994E205
secur32.dll, xrefs: 00007FF6E994E1CD
shdocvw.dll, xrefs: 00007FF6E994E179
psapi.dll, xrefs: 00007FF6E994E115
shell32.dll, xrefs: 00007FF6E994E1BF
samlib.dll, xrefs: 00007FF6E994E2D7
linkinfo.dll, xrefs: 00007FF6E994E347
oleaccrc.dll, xrefs: 00007FF6E994E1E9
iphlpapi.DLL, xrefs: 00007FF6E994E267
wkscli.dll, xrefs: 00007FF6E994E2E5
cryptui.dll, xrefs: 00007FF6E994E1A3
dnsapi.DLL, xrefs: 00007FF6E994E259
ws2_32.dll, xrefs: 00007FF6E994E0FF
RpcRtRemote.dll, xrefs: 00007FF6E994E363
uxtheme.dll, xrefs: 00007FF6E994E66D
msasn1.dll, xrefs: 00007FF6E994E195
browcli.dll, xrefs: 00007FF6E994E301
mlang.dll, xrefs: 00007FF6E994E2BB
dhcpcsvc.dll, xrefs: 00007FF6E994E32B
SSPICLI.DLL, xrefs: 00007FF6E994E09C
XmlLite.dll, xrefs: 00007FF6E994E339
ntshrui.dll, xrefs: 00007FF6E994E12B
SetDllDirectoryW, xrefs: 00007FF6E994E026
rsaenh.dll, xrefs: 00007FF6E994E0A7
cryptsp.dll, xrefs: 00007FF6E994E355
WindowsCodecs.dll, xrefs: 00007FF6E994E213
WINNSI.DLL, xrefs: 00007FF6E994E275
atl.dll, xrefs: 00007FF6E994E136
cryptbase.dll, xrefs: 00007FF6E994E0C8
netapi32.dll, xrefs: 00007FF6E994E16B
ieframe.dll, xrefs: 00007FF6E994E120
kernel32, xrefs: 00007FF6E994E011
crypt32.dll, xrefs: 00007FF6E994E187
netutils.dll, xrefs: 00007FF6E994E283
srvcli.dll, xrefs: 00007FF6E994E221
ntmarta.dll, xrefs: 00007FF6E994E1F7
peerdist.dll, xrefs: 00007FF6E994E38D
rasadhlp.dll, xrefs: 00007FF6E994E30F
Please remove %s from %s folder. It is unsecure to run %s until it is done., xrefs: 00007FF6E994E73B
dwmapi.dll, xrefs: 00007FF6E994E0BD, 00007FF6E994E661
SetDefaultDllDirectories, xrefs: 00007FF6E994E053
dfscli.dll, xrefs: 00007FF6E994E2F3
dsrole.dll, xrefs: 00007FF6E994E37F
wintrust.dll, xrefs: 00007FF6E994E1B1
slc.dll, xrefs: 00007FF6E994E23D
comres.dll, xrefs: 00007FF6E994E0F4
cscapi.dll, xrefs: 00007FF6E994E22F
aclui.dll, xrefs: 00007FF6E994E371
devrtl.dll, xrefs: 00007FF6E994E29F
ws2help.dll, xrefs: 00007FF6E994E10A
UXTheme.dll, xrefs: 00007FF6E994E0B2
setupapi.dll, xrefs: 00007FF6E994E141
propsys.dll, xrefs: 00007FF6E994E2AD
DXGIDebug.dll, xrefs: 00007FF6E994E086, 00007FF6E994E5B6
clbcatq.dll, xrefs: 00007FF6E994E0E9
usp10.dll, xrefs: 00007FF6E994E0DE
sfc_os.dll, xrefs: 00007FF6E994E091
apphelp.dll, xrefs: 00007FF6E994E14F
dhcpcsvc6.dll, xrefs: 00007FF6E994E31D
mpr.dll, xrefs: 00007FF6E994E291
samcli.dll, xrefs: 00007FF6E994E2C9
version.dll, xrefs: 00007FF6E994E07B
lpk.dll, xrefs: 00007FF6E994E0D3
imageres.dll, xrefs: 00007FF6E994E24B

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Console$FileHandle$AddressProcProcess$AllocAttachCloseCompareCreateCurrentDirectoryExitFreeLibraryLoadModulePointerReadSleepStringSystemVersionWrite
String ID: DXGIDebug.dll$Please remove %s from %s folder. It is unsecure to run %s until it is done.$RpcRtRemote.dll$SSPICLI.DLL$SetDefaultDllDirectories$SetDllDirectoryW$UXTheme.dll$WINNSI.DLL$WindowsCodecs.dll$XmlLite.dll$aclui.dll$apphelp.dll$atl.dll$browcli.dll$cabinet.dll$clbcatq.dll$comres.dll$crypt32.dll$cryptbase.dll$cryptsp.dll$cryptui.dll$cscapi.dll$devrtl.dll$dfscli.dll$dhcpcsvc.dll$dhcpcsvc6.dll$dnsapi.DLL$dsrole.dll$dwmapi.dll$ieframe.dll$imageres.dll$iphlpapi.DLL$kernel32$linkinfo.dll$lpk.dll$mlang.dll$mpr.dll$msasn1.dll$netapi32.dll$netutils.dll$ntmarta.dll$ntshrui.dll$oleaccrc.dll$peerdist.dll$profapi.dll$propsys.dll$psapi.dll$rasadhlp.dll$rsaenh.dll$samcli.dll$samlib.dll$secur32.dll$setupapi.dll$sfc_os.dll$shdocvw.dll$shell32.dll$slc.dll$srvcli.dll$userenv.dll$usp10.dll$uxtheme.dll$version.dll$wintrust.dll$wkscli.dll$ws2_32.dll$ws2help.dll
API String ID: 1496594111-2013832382
Opcode ID: 652c747d7e630e86415ee3ad066f254a367a94a472fe2acd263d178260856de2
Instruction ID: b9069e9631e22fe13fa2d6540a910c44cf8d942ef8aee379eba77362181048b9
Opcode Fuzzy Hash: 652c747d7e630e86415ee3ad066f254a367a94a472fe2acd263d178260856de2
Instruction Fuzzy Hash: EA323033A09B8299EB119F60E8802E933B4FF44354F580236DA5D877A6EF3ED255C745

Function 00007FF6E99498DC Relevance: 25.2, APIs: 3, Strings: 11, Instructions: 702COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9948E58: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E9948F8D

_snwprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF6E9949F75
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994A42F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994A435

Part of subcall function 00007FF6E9950BBC: MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF6E9950B44), ref: 00007FF6E9950BE9

Strings

DIRECTION, xrefs: 00007FF6E9949DE5
*messages***, xrefs: 00007FF6E9949C04
RTL, xrefs: 00007FF6E9949F2E
$%s:, xrefs: 00007FF6E9949F50
*messages***, xrefs: 00007FF6E9949BC6
STRINGS, xrefs: 00007FF6E9949DC1
DIALOG, xrefs: 00007FF6E9949DCD
, xrefs: 00007FF6E9949DF9
,, xrefs: 00007FF6E9949FAA
MENU, xrefs: 00007FF6E9949DD9
@%s:, xrefs: 00007FF6E9949F57

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ByteCharConcurrency::cancel_current_taskMultiWide_snwprintf
String ID: $ ,$$%s:$*messages***$*messages***$@%s:$DIALOG$DIRECTION$MENU$RTL$STRINGS
API String ID: 3629253777-3268106645
Opcode ID: 789f2c465d95f0b5fb7cec132a24dad3ff94c3f7f58e61963b873022c14ab567
Instruction ID: d75c8aea0371d30a25f5a2f9e70f82b261366e89cc11b9e3a933f02b9dcfad7e
Opcode Fuzzy Hash: 789f2c465d95f0b5fb7cec132a24dad3ff94c3f7f58e61963b873022c14ab567
Instruction Fuzzy Hash: 2C62F323A1965295EB22DF24C4843BD2361FF44B84F484131DA2D8B6D7EF3EE546CB4A

Function 00007FF6E9961900 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 195
libraryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E9961558: DloadProtectSection.DELAYIMP ref: 00007FF6E99615C9

RaiseException.KERNEL32 ref: 00007FF6E99619A7
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF6E9961993

Part of subcall function 00007FF6E9961868: DloadProtectSection.DELAYIMP ref: 00007FF6E99618C7

LoadLibraryExA.KERNELBASE ref: 00007FF6E9961A46
GetLastError.KERNEL32 ref: 00007FF6E9961A54
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF6E9961A86
RaiseException.KERNEL32 ref: 00007FF6E9961A9A

Strings

H, xrefs: 00007FF6E9961974

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: DloadSection$AccessExceptionProtectRaiseReleaseWrite$ErrorLastLibraryLoad
String ID: H
API String ID: 3432403771-2852464175
Opcode ID: cf3fc932a6b7fb7fc9ef8320b4dd67bfc8d7ec91281715f792326570f1d4a57f
Instruction ID: c77b59f4d3f0bb863fab493a507b07c5e5d396a5c83cf04407403c2d9d82e674
Opcode Fuzzy Hash: cf3fc932a6b7fb7fc9ef8320b4dd67bfc8d7ec91281715f792326570f1d4a57f
Instruction Fuzzy Hash: D7914A33A15B528AEB50CF66D8843A833B1BF48B98B484435DE0D5779AEF3AE445C345

Function 00007FF6E995F4E0 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 285
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ShellExecuteExW.SHELL32 ref: 00007FF6E995F747
IsWindowVisible.USER32 ref: 00007FF6E995F777
ShowWindow.USER32 ref: 00007FF6E995F786
WaitForInputIdle.USER32 ref: 00007FF6E995F797
GetExitCodeProcess.KERNEL32 ref: 00007FF6E995F7BD
FindCloseChangeNotification.KERNELBASE ref: 00007FF6E995F7E7
ShowWindow.USER32 ref: 00007FF6E995F83F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995F8FB

Strings

.inf, xrefs: 00007FF6E995F675
.exe, xrefs: 00007FF6E995F7F2
p, xrefs: 00007FF6E995F529
Install, xrefs: 00007FF6E995F684

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Window$Show$ChangeCloseCodeExecuteExitFindIdleInputNotificationProcessShellVisibleWait_invalid_parameter_noinfo_noreturn
String ID: .exe$.inf$Install$p
API String ID: 3555946777-3607691742
Opcode ID: 1718da423bd7346896bcb56f91dbb63b3cffccde2402356a375081e8d016c4d6
Instruction ID: 0026bfce5a3c8f59389f44cedd4a395874822789ea1a1e9ef2dfcfd70a8620c4
Opcode Fuzzy Hash: 1718da423bd7346896bcb56f91dbb63b3cffccde2402356a375081e8d016c4d6
Instruction Fuzzy Hash: FFC1A063F196029AFB10CF65D94437E23A1AF85B95F084031DA4E877A6DF3EE491C31A

Function 00007FF6E9958624 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 101
memorywindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindResourceW.KERNELBASE ref: 00007FF6E995863D
SizeofResource.KERNEL32 ref: 00007FF6E9958659
LoadResource.KERNEL32 ref: 00007FF6E9958673
LockResource.KERNEL32 ref: 00007FF6E9958685
GlobalAlloc.KERNELBASE ref: 00007FF6E99586A6
GlobalLock.KERNEL32 ref: 00007FF6E99586BB
GdipAlloc.GDIPLUS ref: 00007FF6E99586FE
GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF6E9958769
GlobalUnlock.KERNEL32 ref: 00007FF6E995878C
GlobalFree.KERNEL32 ref: 00007FF6E9958795

Strings

PNG, xrefs: 00007FF6E995862F

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: GlobalResource$AllocGdipLock$BitmapCreateFindFreeFromLoadSizeofUnlock
String ID: PNG
API String ID: 541704414-364855578
Opcode ID: c8606208415c3a11eb94d5df8c8f8595ea54109f2541637b646828bce78d4013
Instruction ID: 3782c1c11280f87ed6f5f77574f681e511304a85cad784609ca6b20a4c0eb949
Opcode Fuzzy Hash: c8606208415c3a11eb94d5df8c8f8595ea54109f2541637b646828bce78d4013
Instruction Fuzzy Hash: 0B411E26A19A0281EF049F17E4443B963A4AF88BD2F0C4435CE0D877A6EF7EE449C756

Function 00007FF6E995F0A4 Relevance: 16.6, APIs: 11, Instructions: 102
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E995AE1C: PeekMessageW.USER32 ref: 00007FF6E995AE32
Part of subcall function 00007FF6E995AE1C: GetMessageW.USER32 ref: 00007FF6E995AE49
Part of subcall function 00007FF6E995AE1C: IsDialogMessageW.USER32 ref: 00007FF6E995AE60
Part of subcall function 00007FF6E995AE1C: TranslateMessage.USER32 ref: 00007FF6E995AE6F
Part of subcall function 00007FF6E995AE1C: DispatchMessageW.USER32 ref: 00007FF6E995AE7A

GetDlgItem.USER32 ref: 00007FF6E995F0E3
ShowWindow.USER32 ref: 00007FF6E995F109
IsDlgButtonChecked.USER32 ref: 00007FF6E995F11E
IsDlgButtonChecked.USER32 ref: 00007FF6E995F136
IsDlgButtonChecked.USER32 ref: 00007FF6E995F157
IsDlgButtonChecked.USER32 ref: 00007FF6E995F173
IsDlgButtonChecked.USER32 ref: 00007FF6E995F1B6
IsDlgButtonChecked.USER32 ref: 00007FF6E995F1D4
IsDlgButtonChecked.USER32 ref: 00007FF6E995F1E8
IsDlgButtonChecked.USER32 ref: 00007FF6E995F212
IsDlgButtonChecked.USER32 ref: 00007FF6E995F22A

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: ButtonChecked$Message$DialogDispatchItemPeekShowTranslateWindow
String ID:
API String ID: 4119318379-0
Opcode ID: 6d17268858d6b6aed380ad60cc2cf8b16547cb3a0c40a3112c59011326a33119
Instruction ID: 5a45964af32007a9b345d51a1b4d7b6d5339507a91f0f4a289d19a5a75031a31
Opcode Fuzzy Hash: 6d17268858d6b6aed380ad60cc2cf8b16547cb3a0c40a3112c59011326a33119
Instruction Fuzzy Hash: EF41B432B146428AF710CFB1E815BAA2360EF45B98F485135DD0A87B9ACF3ED4858769

Function 00007FF6E994B9B4 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 84
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddressForCaller.KERNELBASE ref: 00007FF6E994BA12
GetProcAddress.KERNEL32 ref: 00007FF6E994BA2D
GetCurrentProcessId.KERNEL32 ref: 00007FF6E994BACA

Part of subcall function 00007FF6E994DFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF6E994DDDF

Strings

CryptUnprotectMemory failed, xrefs: 00007FF6E994BAC1
CryptProtectMemory failed, xrefs: 00007FF6E994BA80
CryptUnprotectMemory, xrefs: 00007FF6E994BA1F
CryptProtectMemory, xrefs: 00007FF6E994BA08
Crypt32.dll, xrefs: 00007FF6E994B9F0

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: AddressProc$CallerCurrentDirectoryProcessSystem
String ID: Crypt32.dll$CryptProtectMemory$CryptProtectMemory failed$CryptUnprotectMemory$CryptUnprotectMemory failed
API String ID: 1389829785-2207617598
Opcode ID: d2e93635ec338890dfe438c4789fcaf7e26687fbfe6c7ce53d5981307f2d6baa
Instruction ID: 881be338cf7a13a5604495c607e03685d778d069870ac529a2ef033553e55d22
Opcode Fuzzy Hash: d2e93635ec338890dfe438c4789fcaf7e26687fbfe6c7ce53d5981307f2d6baa
Instruction Fuzzy Hash: C0315036A09B0284FA158F16A89437927E0EF44B90F4C5135C85EC37A7DE3EE542871E

Function 00007FF6E993EF10 Relevance: 11.0, APIs: 7, Instructions: 453COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F542
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F548
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F554
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F55A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F560
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F56C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F572

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 2f1b3bdcd2581fc3eb11a20f3f8936e506afa36e288419d3eb12971ae08578fa
Instruction ID: 48678b97632ded9e89c2e7087ba67be2dc410c057e26ba8933b8c07856a41f54
Opcode Fuzzy Hash: 2f1b3bdcd2581fc3eb11a20f3f8936e506afa36e288419d3eb12971ae08578fa
Instruction Fuzzy Hash: B712CE63B18B4285FA10DF75D4483BD2361AF457A8F440236DA5C97AEBDF3AE089C349

Function 00007FF6E99424C0 Relevance: 9.2, APIs: 6, Instructions: 164
filetimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE ref: 00007FF6E994259B
GetLastError.KERNEL32 ref: 00007FF6E99425AE
CreateFileW.KERNEL32 ref: 00007FF6E994260E
GetLastError.KERNEL32 ref: 00007FF6E9942617
SetFileTime.KERNEL32 ref: 00007FF6E99426C9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9942736

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: File$CreateErrorLast$Time_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3536497005-0
Opcode ID: 7e74b88d639c8d570aa5cbccebcd9353285634c108726f52f9c563d03d833b9c
Instruction ID: 8ae36dca8c6c989b02af6463fbd5a6c142f2cb463fd3dc69ac6f9e792a90b4e5
Opcode Fuzzy Hash: 7e74b88d639c8d570aa5cbccebcd9353285634c108726f52f9c563d03d833b9c
Instruction Fuzzy Hash: 79610263A1864185E7218F29E48036E67A1FF857A8F140335CFAD47ADACF3ED055CB09

Function 00007FF6E995B014 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadBitmapW.USER32 ref: 00007FF6E995B02A
GetObjectW.GDI32 ref: 00007FF6E995B05B
DeleteObject.GDI32 ref: 00007FF6E995B095
DeleteObject.GDI32 ref: 00007FF6E995B0C5

Part of subcall function 00007FF6E9958624: FindResourceW.KERNELBASE ref: 00007FF6E995863D
Part of subcall function 00007FF6E9958624: SizeofResource.KERNEL32 ref: 00007FF6E9958659
Part of subcall function 00007FF6E9958624: LoadResource.KERNEL32 ref: 00007FF6E9958673
Part of subcall function 00007FF6E9958624: LockResource.KERNEL32 ref: 00007FF6E9958685
Part of subcall function 00007FF6E9958624: GlobalAlloc.KERNELBASE ref: 00007FF6E99586A6
Part of subcall function 00007FF6E9958624: GlobalLock.KERNEL32 ref: 00007FF6E99586BB
Part of subcall function 00007FF6E9958624: GdipAlloc.GDIPLUS ref: 00007FF6E99586FE
Part of subcall function 00007FF6E9958624: GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF6E9958769
Part of subcall function 00007FF6E9958624: GlobalUnlock.KERNEL32 ref: 00007FF6E995878C
Part of subcall function 00007FF6E9958624: GlobalFree.KERNEL32 ref: 00007FF6E9958795

Strings

], xrefs: 00007FF6E995B063

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: GlobalResource$Object$AllocBitmapDeleteGdipLoadLock$CreateFindFreeFromSizeofUnlock
String ID: ]
API String ID: 2347093688-3352871620
Opcode ID: 2f79d63664e457f963bfbd157e1c525b341384e02eb8e860e1f42d2dee528bbf
Instruction ID: 242fb385af3e63dc56da0d85769e772e056cdcc08d1b6d40a81fcecec5ac8a2a
Opcode Fuzzy Hash: 2f79d63664e457f963bfbd157e1c525b341384e02eb8e860e1f42d2dee528bbf
Instruction Fuzzy Hash: 6B119622B0D24246FB249F33A64437A5391AF88BC1F0C0434DD1D87B9BDE2EE804871A

Function 00007FF6E995FE24 Relevance: 7.5, APIs: 5, Instructions: 29
windowsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF6E995FE41
GetMessageW.USER32 ref: 00007FF6E995FE58
TranslateMessage.USER32 ref: 00007FF6E995FE63
DispatchMessageW.USER32 ref: 00007FF6E995FE6E
WaitForSingleObject.KERNEL32 ref: 00007FF6E995FE7C

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Message$DispatchObjectPeekSingleTranslateWait
String ID:
API String ID: 3621893840-0
Opcode ID: eb57a341668d454e4e6cd52f39bb1811463ddcab187ea95c48cb89abc8d18535
Instruction ID: 3f6447805ad5064f4efefa2526a37cd61174f6f0bff75cd39b80f15c00e65a5d
Opcode Fuzzy Hash: eb57a341668d454e4e6cd52f39bb1811463ddcab187ea95c48cb89abc8d18535
Instruction Fuzzy Hash: C2F04F23F2844693FB208F70E498B762211FFA4B05F485030E54E818969E2DD189C715

Function 00007FF6E995AE1C Relevance: 7.5, APIs: 5, Instructions: 27
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF6E995AE32
GetMessageW.USER32 ref: 00007FF6E995AE49
IsDialogMessageW.USER32 ref: 00007FF6E995AE60
TranslateMessage.USER32 ref: 00007FF6E995AE6F
DispatchMessageW.USER32 ref: 00007FF6E995AE7A

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Message$DialogDispatchPeekTranslate
String ID:
API String ID: 1266772231-0
Opcode ID: 8f901ab8bb575df3ccfb48a5cb3294f091b017f84468599a2020223c8e70b7dc
Instruction ID: 24ea14fbafc51f98fb76b5116ea8cd9791d4fd17f60300ec12d06c216cecc123
Opcode Fuzzy Hash: 8f901ab8bb575df3ccfb48a5cb3294f091b017f84468599a2020223c8e70b7dc
Instruction Fuzzy Hash: 0CF0EC27A3854296FB609F60F895B362361BFA0709F889431E54E82865DF2ED548CB09

Function 00007FF6E99591E8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 33
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetClassNameW.USER32 ref: 00007FF6E9959211
SHAutoComplete.SHLWAPI ref: 00007FF6E9959255

Part of subcall function 00007FF6E99513C4: CompareStringW.KERNEL32 ref: 00007FF6E99513E3

FindWindowExW.USER32 ref: 00007FF6E995923F

Strings

EDIT, xrefs: 00007FF6E995921B, 00007FF6E9959233

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: AutoClassCompareCompleteFindNameStringWindow
String ID: EDIT
API String ID: 4243998846-3080729518
Opcode ID: 5198dd27efd6ef2cfe81d4e1a42d30dc263c523227a297f5f4c02164b2b5e029
Instruction ID: 147ae39698657bc31916aac5f1958ae425c184c7f0fe843e6cb72fb12ca1de8f
Opcode Fuzzy Hash: 5198dd27efd6ef2cfe81d4e1a42d30dc263c523227a297f5f4c02164b2b5e029
Instruction Fuzzy Hash: A101D623B18A4381FB308F21E8103B62390AF99745F8C0031C80DCA697DE2EE148C655

Function 00007FF6E9942CE0 Relevance: 6.1, APIs: 4, Instructions: 136fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(00007FF6E9948C9A), ref: 00007FF6E9942D22
WriteFile.KERNEL32 ref: 00007FF6E9942D6C
WriteFile.KERNELBASE ref: 00007FF6E9942D9A

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: FileWrite$Handle
String ID:
API String ID: 4209713984-0
Opcode ID: 95d7fd16c8d926fcf5da752308064adee905e679e75eda990adbc5c1a1c917ca
Instruction ID: 24ca0f7860b80e019bf67f3505137a7eb2b8aeff3a653e6eb135c25838370245
Opcode Fuzzy Hash: 95d7fd16c8d926fcf5da752308064adee905e679e75eda990adbc5c1a1c917ca
Instruction Fuzzy Hash: 8B51E623B1964292EA51CF25D88477E2360FF55B94F580131EA1E87AD2DF3EE486C70A

Function 00007FF6E99603E0 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

SetDlgItemTextW.USER32 ref: 00007FF6E9960556
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99605C1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99605C7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99605CD

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ItemText
String ID:
API String ID: 3750147219-0
Opcode ID: dd20fbc03e7b4ed3df35e7997b11e4c7c519625834bd32e30ad2cbcd1638632d
Instruction ID: aab8777482db7d2e01cd3ef365688ee1b3f4ccfa231e33618cb078da42cf31d9
Opcode Fuzzy Hash: dd20fbc03e7b4ed3df35e7997b11e4c7c519625834bd32e30ad2cbcd1638632d
Instruction Fuzzy Hash: CA51A1A3F2475284FB009FA6D8853AD2322AF45BD4F480635DA1D96BD7DF6ED041C38A

Function 00007FF6E9943684 Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?,?,?,?,?,?,00000000,?,00007FF6E994309D), ref: 00007FF6E99436CE
CreateDirectoryW.KERNEL32 ref: 00007FF6E9943733
GetLastError.KERNEL32(?,?,?,?,?,?,?,00000000,?,00007FF6E994309D), ref: 00007FF6E9943791
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99437CE

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: CreateDirectory$ErrorLast_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2359106489-0
Opcode ID: 9d9d2995018f7f6f648ac6a5d97c5d37007cde808aee1d861722df7aa9659c46
Instruction ID: 5982b93a763ab79423ea708102cc3a122fa4b9d53771822af66b1d367469463f
Opcode Fuzzy Hash: 9d9d2995018f7f6f648ac6a5d97c5d37007cde808aee1d861722df7aa9659c46
Instruction Fuzzy Hash: E5310563A1C64241EA219F3595C63796351FF887A0F580230EEADC26D7EF3ED4428A0A

Function 00007FF6E9962D6C Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

__scrt_initialize_crt.LIBCMT ref: 00007FF6E9962D7B

Part of subcall function 00007FF6E99627FC: __scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FF6E996281E

__scrt_acquire_startup_lock.LIBCMT ref: 00007FF6E9962D90
__scrt_release_startup_lock.LIBCMT ref: 00007FF6E9962DFE
__scrt_get_show_window_mode.LIBCMT ref: 00007FF6E9962E51

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: __scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_get_show_window_mode__scrt_initialize_crt__scrt_release_startup_lock
String ID:
API String ID: 1452418845-0
Opcode ID: f380b52e8f95e6a0f24ce785192d8cb773bc143ddf3d62aee805abe4fb8ed354
Instruction ID: 157915bb2aa1951f0c3e144e338d7c30a449907c09a912527a176a466b730417
Opcode Fuzzy Hash: f380b52e8f95e6a0f24ce785192d8cb773bc143ddf3d62aee805abe4fb8ed354
Instruction Fuzzy Hash: 15311723E2924346FA55AF6595523BD2291AF51384F4C0474EA4ECB6D3DE2FA804C2DF

Function 00007FF6E9942320 Relevance: 6.1, APIs: 4, Instructions: 58fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32(?,?,?,?,00000000,00007FF6E9942927,?,00100000,?,00000001,00000000,00000000,?,00007FF6E99414C1), ref: 00007FF6E9942348
ReadFile.KERNELBASE ref: 00007FF6E9942367
GetLastError.KERNEL32 ref: 00007FF6E994239B
GetLastError.KERNEL32 ref: 00007FF6E99423BA

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: ErrorLast$FileHandleRead
String ID:
API String ID: 2244327787-0
Opcode ID: 5dece825d5be91adec6864fa12bb564f4e3b5809c08bfde6ef0babe01e3581d0
Instruction ID: c33329f8f5cdcf54fd8cb2122957413d5691cd67135e6d42507f13e8b04f53c0
Opcode Fuzzy Hash: 5dece825d5be91adec6864fa12bb564f4e3b5809c08bfde6ef0babe01e3581d0
Instruction Fuzzy Hash: F6219523A1C64281EA615F12A48037D63B0FF45FA4F1C4530DA6DC6686DF7ED8868F6A

Function 00007FF6E995946C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26comCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E994DFD0: GetSystemDirectoryW.KERNEL32 ref: 00007FF6E994DDDF

OleInitialize.OLE32 ref: 00007FF6E9959486
SHGetMalloc.SHELL32 ref: 00007FF6E99594D4

Strings

riched20.dll, xrefs: 00007FF6E9959475

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: DirectoryInitializeMallocSystem
String ID: riched20.dll
API String ID: 174490985-3360196438
Opcode ID: 0d85db053d286d1bd0fa19ead2840fc3f5149c6ee0f027e6ed6c33eb2c824e37
Instruction ID: 2253ddf566e1ab4c6112b014686917b8d1e59b9a58695119c15ce49cba39128b
Opcode Fuzzy Hash: 0d85db053d286d1bd0fa19ead2840fc3f5149c6ee0f027e6ed6c33eb2c824e37
Instruction Fuzzy Hash: F3F0AF32618A4196EB008F60F44436EB3A0FF88354F484131E98D82B56DF7DE189CB05

Function 00007FF6E995095C Relevance: 4.7, APIs: 3, Instructions: 152windowCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E995853C: GlobalMemoryStatusEx.KERNEL32 ref: 00007FF6E995856C

Part of subcall function 00007FF6E994AAE0: LoadStringW.USER32 ref: 00007FF6E994AB67
Part of subcall function 00007FF6E994AAE0: LoadStringW.USER32 ref: 00007FF6E994AB80

Part of subcall function 00007FF6E9931FA0: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9931FFB

Part of subcall function 00007FF6E993129C: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E9931396

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99601BB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99601C1
SendDlgItemMessageW.USER32 ref: 00007FF6E99601F2

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$LoadString$Concurrency::cancel_current_taskGlobalItemMemoryMessageSendStatus
String ID:
API String ID: 3106221260-0
Opcode ID: f59522d12ea67105d58c7d38a79467439e8b2bca94c98ae11b85d9bfed72e7d6
Instruction ID: 3637531613040743b0bdf43983a206085102ea245e5af6f0a9ef6e4d6ed1b7dd
Opcode Fuzzy Hash: f59522d12ea67105d58c7d38a79467439e8b2bca94c98ae11b85d9bfed72e7d6
Instruction Fuzzy Hash: 6451C063F156429AFB109FA1D4453FD2362AF85B88F480135DA0D9B7D7DE2DE441C389

Function 00007FF6E9959F4C Relevance: 4.6, APIs: 3, Instructions: 146COMMON

Download Yara Rule

APIs

SHFileOperationW.SHELL32 ref: 00007FF6E995A118
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995A184
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995A18A

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$FileOperation
String ID:
API String ID: 2032784890-0
Opcode ID: 425ddadb74c4bc10119aa1baa60ba7c5a4f73d54acf5c20dfc24dcb126184bbf
Instruction ID: a64a966a933c5d113746006df0601c6a9951a704fa3d5c43fb5949ff4b03e21c
Opcode Fuzzy Hash: 425ddadb74c4bc10119aa1baa60ba7c5a4f73d54acf5c20dfc24dcb126184bbf
Instruction Fuzzy Hash: 77619A23A15B41D9EB00CF74C8943AD3361EF49788F484635DA1CA7BAADF3AD585C309

Function 00007FF6E9942134 Relevance: 4.6, APIs: 3, Instructions: 114fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 00007FF6E99421CF
CreateFileW.KERNEL32 ref: 00007FF6E994223C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99422D8

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: CreateFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2272807158-0
Opcode ID: 4ce248ffffd21e537046429b603db88a9fd2a3d13b10b45fb751dcef003d6319
Instruction ID: ef1f48aeeb9cf3219b53fe3189ea91c129108b97ec02582535f4432f35a3a056
Opcode Fuzzy Hash: 4ce248ffffd21e537046429b603db88a9fd2a3d13b10b45fb751dcef003d6319
Instruction Fuzzy Hash: C941A163A1878182EB258F15E48436D63A1FF85BB4F185334DBBD43AD6CF3DE4918A09

Function 00007FF6E99323F8 Relevance: 4.6, APIs: 3, Instructions: 73COMMON

Download Yara Rule

APIs

GetWindowTextLengthW.USER32 ref: 00007FF6E993243E
GetWindowTextW.USER32 ref: 00007FF6E9932476
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9932505

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: TextWindow$Length_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2176759853-0
Opcode ID: 324ad9725680782466c8b9226039195d64c3332d7d8035b24254b52cca95445d
Instruction ID: 965aaad3d620a378840800d6c18b5ad02ed899fb747094cfc51940f7958aa20a
Opcode Fuzzy Hash: 324ad9725680782466c8b9226039195d64c3332d7d8035b24254b52cca95445d
Instruction Fuzzy Hash: EE21C263A28B8181EA20CF65A44427EA360FF89BD0F184235EB9D43B96CF3DD180C745

Function 00007FF6E9951F94 Relevance: 4.6, APIs: 3, Instructions: 68COMMON

Download Yara Rule

APIs

std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E995205B
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E9952077
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E9952093

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: std::bad_alloc::bad_alloc
String ID:
API String ID: 1875163511-0
Opcode ID: 473e069831e40b03067e3ac07c55198f41caec4ce5e3ab4939735fa524c57bef
Instruction ID: 4b1f6d23446fc7bd19310840c285ce059820375748d1e42ff9eee174bded0b6b
Opcode Fuzzy Hash: 473e069831e40b03067e3ac07c55198f41caec4ce5e3ab4939735fa524c57bef
Instruction Fuzzy Hash: CF318F23A0A68652FB349F64E4443BE63A0FF40B84F5C4031D64C866ABDF6EE946C317

Function 00007FF6E9943D34 Relevance: 4.6, APIs: 3, Instructions: 62COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE(?,?,?,?,?,?,00000000,00000001,?,00007FF6E99507E1), ref: 00007FF6E9943D5E
SetFileAttributesW.KERNEL32 ref: 00007FF6E9943DB0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9943E1A

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: 523e4a483c86c9ac9ee543cf6c476d9bf2e9d6353514affc3e0f4067b8c7bc61
Instruction ID: 6b79258b15a06edb746b4f44ed0192e020f77052ef855e4b0b142d070a7b6b4e
Opcode Fuzzy Hash: 523e4a483c86c9ac9ee543cf6c476d9bf2e9d6353514affc3e0f4067b8c7bc61
Instruction Fuzzy Hash: A921FB23A1878142EA219F25E4853AD6360FF84B94F084230EEAE836D6DF3DD541CA49

Function 00007FF6E99431BC Relevance: 4.6, APIs: 3, Instructions: 59fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(?,?,?,?,?,?,?,?,00000000,00007FF6E9950822), ref: 00007FF6E99431E7
DeleteFileW.KERNEL32 ref: 00007FF6E9943237
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99432A1

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: DeleteFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3118131910-0
Opcode ID: 9e0f12d03b62ccef14e62e4bf3878a3457daa81ed2db8d115c48a0739d4b379d
Instruction ID: c45ceda0c0afb7b89ccafaad2e0d502fba628571040523bec0a77aa0c360f9d1
Opcode Fuzzy Hash: 9e0f12d03b62ccef14e62e4bf3878a3457daa81ed2db8d115c48a0739d4b379d
Instruction Fuzzy Hash: BE21B623A1878181EA108F25F48536E7360FF88BD4F541234EEAE82ADADF3DD141CB49

Function 00007FF6E99432BC Relevance: 4.6, APIs: 3, Instructions: 57COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(?,?,?,?,00007FF6E994E5B1,?,?,?,00000000,?), ref: 00007FF6E99432E7
GetFileAttributesW.KERNELBASE ref: 00007FF6E9943334
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9943399

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: d981565e32c06465bb9ca9e6032df0ff87469bcd01ee0110978b6e45bf249536
Instruction ID: ca06d103d44598cb280b2d78ffa850bd79dbf99d3a91d39b5213801d47187499
Opcode Fuzzy Hash: d981565e32c06465bb9ca9e6032df0ff87469bcd01ee0110978b6e45bf249536
Instruction Fuzzy Hash: AA21A423A1878181EA108F29E48536D6361FF88BA4F580231EAAD83BD6DF3DD441CB49

Function 00007FF6E996BF64 Relevance: 4.5, APIs: 3, Instructions: 19COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,00007FF6E996BF48), ref: 00007FF6E996BF8C
TerminateProcess.KERNEL32(?,?,?,00007FF6E996BF48), ref: 00007FF6E996BF97
ExitProcess.KERNEL32 ref: 00007FF6E996BFA6

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 44b3a526fe0d15710854bc957cc7a82f9edee4cc7420f0560de4bec5ea2a17a0
Instruction ID: 14d1ac6d6e3e5aaff11b88610164c91b0f78efc5553680bcf8c1288ec4332140
Opcode Fuzzy Hash: 44b3a526fe0d15710854bc957cc7a82f9edee4cc7420f0560de4bec5ea2a17a0
Instruction Fuzzy Hash: 2BE01A26F1830546EA547F2698953B923526F88741F184438D80E823A7DE3EE4498796

Function 00007FF6E993F578 Relevance: 3.2, APIs: 2, Instructions: 193COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F895
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993F89B

Part of subcall function 00007FF6E9943EC8: FindClose.KERNELBASE(?,?,00000000,00007FF6E9950811), ref: 00007FF6E9943EFD

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseFind
String ID:
API String ID: 3587649625-0
Opcode ID: 23f630cba899342486ec3d5de318505faaaca4e13abb6a95497164dac5ca7356
Instruction ID: 17eb92d1077ee2e4888f2e90efc74a0051e7aa16804e9578a9a25282dd17b247
Opcode Fuzzy Hash: 23f630cba899342486ec3d5de318505faaaca4e13abb6a95497164dac5ca7356
Instruction Fuzzy Hash: 3091CE73A18B8190FB10EF34D4482AD2361FF84798F884235EA5D87AEADF79D581C305

Function 00007FF6E9933904 Relevance: 3.1, APIs: 2, Instructions: 124COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9933AB3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9933AB9

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 402f2d810e1efc6a759daaa5297bed4678b331cbcfb426b8061d29b6a9ebee63
Instruction ID: a2d3e2d0ffded29210e31271d45c522de0defba00e2159f6e0c853beefbdfa61
Opcode Fuzzy Hash: 402f2d810e1efc6a759daaa5297bed4678b331cbcfb426b8061d29b6a9ebee63
Instruction Fuzzy Hash: 9841E163F2865284FB00DFB1D4453AD2360AF44BD8F580235DE1DA7ADBCE3A9482C349

Function 00007FF6E9942778 Relevance: 3.1, APIs: 2, Instructions: 100COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(00000000,00000002,?,00000F99,?,00007FF6E994274D), ref: 00007FF6E99428A9
GetLastError.KERNEL32(?,00007FF6E994274D), ref: 00007FF6E99428B8

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 043a82e8aff847b2e282b78885e55c7214a93c585b530bdf19c19deffc600893
Instruction ID: a66fff4cddcbc3e94838eaf2e2fd85924beca381223b7b554e4ca700334c8de1
Opcode Fuzzy Hash: 043a82e8aff847b2e282b78885e55c7214a93c585b530bdf19c19deffc600893
Instruction Fuzzy Hash: 65317323B19A5282FA614F2AD9C07BD6350BF44BD4F1C0131DE2D97792DE2EE4439A47

Function 00007FF6E99322BC Relevance: 3.1, APIs: 2, Instructions: 83COMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF6E99322F1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99323F0

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Item_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1746051919-0
Opcode ID: 8763c555b957396376e96df864685bb2527d49eefc22d4d720e740779d29c564
Instruction ID: 0b6c2c43c09b6fef39c4b475953a680f3f751d073ac73fb42954eba5748bc498
Opcode Fuzzy Hash: 8763c555b957396376e96df864685bb2527d49eefc22d4d720e740779d29c564
Instruction Fuzzy Hash: 1831AE23A1874182EA148F25E4493AE7360EF84B90F484235EB9D47A97DF3DE040C749

Function 00007FF6E9942AD0 Relevance: 3.1, APIs: 2, Instructions: 76timeCOMMON

Download Yara Rule

APIs

FlushFileBuffers.KERNEL32 ref: 00007FF6E9942AFE
SetFileTime.KERNELBASE ref: 00007FF6E9942B9B

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: File$BuffersFlushTime
String ID:
API String ID: 1392018926-0
Opcode ID: 1f7bfd0f82637a6abdcd08aef8b442a865f6f50d97ba3a1fa7ef62b0e093425a
Instruction ID: 275932382332bc06957529d46e1239b1ba2f6802e6123c73459c4897959be46d
Opcode Fuzzy Hash: 1f7bfd0f82637a6abdcd08aef8b442a865f6f50d97ba3a1fa7ef62b0e093425a
Instruction Fuzzy Hash: 2721B263E09B4251EA638F51E4847BE5790BF02798F1D4031DE5C46296EE3ED887CB0A

Function 00007FF6E994AAE0 Relevance: 3.1, APIs: 2, Instructions: 52COMMON

Download Yara Rule

APIs

LoadStringW.USER32 ref: 00007FF6E994AB67
LoadStringW.USER32 ref: 00007FF6E994AB80

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: LoadString
String ID:
API String ID: 2948472770-0
Opcode ID: efc1550bd5bba1d5ac9face2304fa075ed5e4cb94ffc19493764f318ca00d951
Instruction ID: 4f1aa9f1cba99208261811b54a0ed8acb70cd7bfbcdb7a7326e14e39d1e4003f
Opcode Fuzzy Hash: efc1550bd5bba1d5ac9face2304fa075ed5e4cb94ffc19493764f318ca00d951
Instruction Fuzzy Hash: 73119072B0965189EA018F1AA88022877A1BF98FC0F5C4439CE2DD3722DF7DE541874D

Function 00007FF6E9942BB0 Relevance: 3.0, APIs: 2, Instructions: 47COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE ref: 00007FF6E9942C11
GetLastError.KERNEL32 ref: 00007FF6E9942C1E

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 5eda2cbf1ce6837a88d649c872729f31e823bc49095d59e5e9b193bf7b9166cd
Instruction ID: b5a61096f5589c72aaa81e4dfb8f094b94076c30f7c0c3aa660a4abafc6f6c91
Opcode Fuzzy Hash: 5eda2cbf1ce6837a88d649c872729f31e823bc49095d59e5e9b193bf7b9166cd
Instruction Fuzzy Hash: 80119D22A0864281EB618F25E88137D6260FF45BA9F5C0331DA7D862E6CF3ED593C706

Function 00007FF6E993255C Relevance: 3.0, APIs: 2, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E994A4AC: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF6E994A504
Part of subcall function 00007FF6E994A4AC: SetDlgItemTextW.USER32 ref: 00007FF6E994A573
Part of subcall function 00007FF6E994A4AC: GetWindowRect.USER32 ref: 00007FF6E994A5AD
Part of subcall function 00007FF6E994A4AC: GetClientRect.USER32 ref: 00007FF6E994A5BB

GetDlgItem.USER32 ref: 00007FF6E99325AC
SetDlgItemTextW.USER32 ref: 00007FF6E99325C8

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Item$RectText$ClientWindowswprintf
String ID:
API String ID: 402765569-0
Opcode ID: ad94589889145b650e3461eb84003e845283bd92425fc2a9221c8100a4e27e71
Instruction ID: 5ffb4b4cdb7b39216e818f4a2dbeef8a12c2df4121ddb65c0c36bd74e5c2ecac
Opcode Fuzzy Hash: ad94589889145b650e3461eb84003e845283bd92425fc2a9221c8100a4e27e71
Instruction Fuzzy Hash: 09018422E1D34A41FF599F62A4AC37D53916F85784F0C4034D84DC66DBDE2EE985C30A

Function 00007FF6E994EB58 Relevance: 3.0, APIs: 2, Instructions: 23COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,00007FF6E994EBAD,?,?,?,?,00007FF6E9945752,?,?,?,00007FF6E99456DE), ref: 00007FF6E994EB5C
GetProcessAffinityMask.KERNEL32 ref: 00007FF6E994EB6F

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: 444071b75e142e51b736d9fa504759652bc9944b894df1f8101a797a07211085
Instruction ID: 1483afc052554557f67885efa78c42dea2a86413c444998bb2f8e3d35684b7b9
Opcode Fuzzy Hash: 444071b75e142e51b736d9fa504759652bc9944b894df1f8101a797a07211085
Instruction Fuzzy Hash: 54E09B62F1458646DF598F67C4916E97392BFC8B40B8C8035D60BC3655EE2DE5458B01

Function 00007FF6E99621D0 Relevance: 3.0, APIs: 2, Instructions: 21COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E9962200

Part of subcall function 00007FF6E9962F7C: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E9962F85

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E9962206

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Concurrency::cancel_current_task$std::bad_alloc::bad_alloc
String ID:
API String ID: 1173176844-0
Opcode ID: ac554a43d54612151bc7e480101717375080be3004ee5b366f50feb51e7139dd
Instruction ID: 7d1a8992bb380377b0b145f36f253d579900d6362896ea6b03e02326d3383374
Opcode Fuzzy Hash: ac554a43d54612151bc7e480101717375080be3004ee5b366f50feb51e7139dd
Instruction Fuzzy Hash: 42E0EC42E2E20746FD286F7519253B801504F59370E5D1B70DA7EC82D3AE1EB4D1C19B

Function 00007FF6E996D90C Relevance: 3.0, APIs: 2, Instructions: 19threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlRestoreThreadPreferredUILanguages.NTDLL ref: 00007FF6E996D922
GetLastError.KERNEL32 ref: 00007FF6E996D934

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: ErrorLanguagesLastPreferredRestoreThread
String ID:
API String ID: 588628887-0
Opcode ID: 7829e02dcbd74b51c5e196648e5aad52518f68633834b7095f7e5950a32ae739
Instruction ID: 5b3a6bc2035fd65230ef44493fa89a1a97631b3e1d3dc427b8c63a6bb6d48e00
Opcode Fuzzy Hash: 7829e02dcbd74b51c5e196648e5aad52518f68633834b7095f7e5950a32ae739
Instruction Fuzzy Hash: 4CE0E652F1A60386FF186FB25C453B412D15F99751F0C4034C91DC7293DE2E9485C64A

Function 00007FF6E99333E4 Relevance: 1.8, APIs: 1, Instructions: 328COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993388C

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: db0f75601c8d953953658c1d14be6529ec917dbd1ad2d5887d518296e9f1c024
Instruction ID: 5a8c4c39e66420d0d709f0f45a9e8d63b7d74206e2a6d12f51cc40fc7c1c817b
Opcode Fuzzy Hash: db0f75601c8d953953658c1d14be6529ec917dbd1ad2d5887d518296e9f1c024
Instruction Fuzzy Hash: 90D1A163B4868256EB28CF35954A3B967A5FF05F84F484135CE1D877A6CF3EE4608306

Function 00007FF6E995CAD0 Relevance: 1.7, APIs: 1, Instructions: 196COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E995CDE4

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: e2460866a0684328410107459c6d972396d79668fc4668c3375d4f16519848c4
Instruction ID: 4ec86475e1266b9bf7687e76d79b161675412dd5bcc07c897d35be88c4c4c6c7
Opcode Fuzzy Hash: e2460866a0684328410107459c6d972396d79668fc4668c3375d4f16519848c4
Instruction Fuzzy Hash: 8F919323F1471289FB10CF64D8843AD2B71AF017A9F580635DE2D92ADAEF3AD485C319

Function 00007FF6E9951870 Relevance: 1.7, APIs: 1, Instructions: 172COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E994E948: ReleaseSemaphore.KERNEL32 ref: 00007FF6E994E974
Part of subcall function 00007FF6E994E948: CloseHandle.KERNEL32 ref: 00007FF6E994E993
Part of subcall function 00007FF6E994E948: DeleteCriticalSection.KERNEL32 ref: 00007FF6E994E9AA
Part of subcall function 00007FF6E994E948: CloseHandle.KERNEL32 ref: 00007FF6E994E9B7

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9951ACB

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: CloseHandle$CriticalDeleteReleaseSectionSemaphore_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 904680172-0
Opcode ID: 84549558681af96b4525e1e1ffe2288fe9035f316ab4ad669e4cf30d3a3af5a1
Instruction ID: 271a2dde02f2e3e45596abf4fd924ae74749e55ad22539156e955f8a0a7eca44
Opcode Fuzzy Hash: 84549558681af96b4525e1e1ffe2288fe9035f316ab4ad669e4cf30d3a3af5a1
Instruction Fuzzy Hash: 6C61CE63B15685A2EE18DF65D1942BD6366FF40FD0B184232E72D87AC7CF2AE461C309

Function 00007FF6E993EC9C Relevance: 1.6, APIs: 1, Instructions: 145COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993EEB8

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 69a943e656ee331f1661201cfe822fb8f69a168c4299475660200162fa714270
Instruction ID: e0f71fb561d5dc32d4ae0a5abcc6c58b76bb87f7d6ba6b0334ab6fce6ec54ec6
Opcode Fuzzy Hash: 69a943e656ee331f1661201cfe822fb8f69a168c4299475660200162fa714270
Instruction Fuzzy Hash: 8451C163A0868242EA24DF7594493AD2751FFA5BC4F4C0136EE5D87397CE3EE485C349

Function 00007FF6E993E7A8 Relevance: 1.6, APIs: 1, Instructions: 118COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9943EC8: FindClose.KERNELBASE(?,?,00000000,00007FF6E9950811), ref: 00007FF6E9943EFD

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E993E993

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: CloseFind_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1011579015-0
Opcode ID: e982e273b1865209a75a3cfd535ad9023e3388265a11ab7418cbf5dec2d39955
Instruction ID: 12e30cfd51347b59f81823e15fc54bd235555c68a0a3ea1069596aee3ff54d9c
Opcode Fuzzy Hash: e982e273b1865209a75a3cfd535ad9023e3388265a11ab7418cbf5dec2d39955
Instruction Fuzzy Hash: E2516123A1868582FA60CF75E48937D2361FF94B94F480236EA4D876A7CF2ED441C71A

Function 00007FF6E9941794 Relevance: 1.6, APIs: 1, Instructions: 115COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E994187D

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 36ab21be5ae6b1334c80ff39dfddb1a07eba1a258130a621a2ccd413e4dd0617
Instruction ID: 9660689f66703b521e39f7b7bcbe99c8ab849df976e66b8fd6962cd737ddcb4a
Opcode Fuzzy Hash: 36ab21be5ae6b1334c80ff39dfddb1a07eba1a258130a621a2ccd413e4dd0617
Instruction Fuzzy Hash: D2411563B18A8142EA258E13AA80379A251FF94FC0F488535EE5C87F8BDF7DD4928745

Function 00007FF6E9942F58 Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99430C8

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: c12ddbc590a903591de313708f19a8cb728d3d3f41945339a7b2dbf0642da7e2
Instruction ID: a78276e6c7f38e68f3516691e59ca58f855d17ca685e2c94fc9700fdbcb6dbea
Opcode Fuzzy Hash: c12ddbc590a903591de313708f19a8cb728d3d3f41945339a7b2dbf0642da7e2
Instruction Fuzzy Hash: 49411563A1870180EE159F25E28637D2360EF54BD8F180234EE6D8769BDF3EE042CA49

Function 00007FF6E996BDF8 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF6E996BE20

Part of subcall function 00007FF6E996BFB0: GetModuleHandleExW.KERNEL32 ref: 00007FF6E996BFD0
Part of subcall function 00007FF6E996BFB0: GetProcAddress.KERNEL32 ref: 00007FF6E996BFE6
Part of subcall function 00007FF6E996BFB0: FreeLibrary.KERNEL32 ref: 00007FF6E996C00B

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 5b4d6432c9ab27f48bf344f41163fa66ca8822e5b5ed34cf2c0174bd429b5c6d
Instruction ID: a44184294e77385c5626639b8075e1d7ceeeb5dcdda40108ef0e6a1cdc0c4fef
Opcode Fuzzy Hash: 5b4d6432c9ab27f48bf344f41163fa66ca8822e5b5ed34cf2c0174bd429b5c6d
Instruction Fuzzy Hash: 2E418313E2C64286FB559F1595503782261AF65B40F4C443ADA4DC76A3EE3FE841C7CA

Function 00007FF6E993129C Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF6E9931396

Part of subcall function 00007FF6E9931F80: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6E9931F89

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Concurrency::cancel_current_taskstd::bad_alloc::bad_alloc
String ID:
API String ID: 680105476-0
Opcode ID: fb4569e23469dfa57eec0626174c03e5963d7f6e26c3e18aa513be619ff1198f
Instruction ID: bbb64172a922f9951830d223499a1b126faaea54b4bec9122068a94ac7d12e9a
Opcode Fuzzy Hash: fb4569e23469dfa57eec0626174c03e5963d7f6e26c3e18aa513be619ff1198f
Instruction Fuzzy Hash: 9A217F23A08751C5EA249E62A4043796250EF05BF0F6C0B31DE7D87BE3DE7EE451834A

Function 00007FF6E9932C54 Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9932D77

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: febd97f69b4633085c38b8d7b3d390eb9c01e95c270f9ffcfe48760324ba941a
Instruction ID: 0afd04e2c9c5a704f6bc7697cdd7cd018bcb52ada9cb0dabaf14016f2b8d64ee
Opcode Fuzzy Hash: febd97f69b4633085c38b8d7b3d390eb9c01e95c270f9ffcfe48760324ba941a
Instruction Fuzzy Hash: F6213A23A28586A2EA08DF71D5593FC6315FF45B84F984431E71D876A3CF3EA4A5C30A

Function 00007FF6E997124C Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6E9971280

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 9dd5a9e84c18447e56e2265fa04046f11d37b96b7f5b774ce3305aa6458b3f00
Instruction ID: b4ac8fb3d9d630fc914ec74d6543ca965229c25e65f3dd8c7416d77e51582767
Opcode Fuzzy Hash: 9dd5a9e84c18447e56e2265fa04046f11d37b96b7f5b774ce3305aa6458b3f00
Instruction Fuzzy Hash: ED113433A1C68286E7209F51A88077962A4FF44388F5C0139EA8DC76D7DF2EE840C74A

Function 00007FF6E9933AD8 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9933B6C

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: dd833eb704b03c62a36fea145c0b0b4abee32047d89ef2e694e61e0216d7ee09
Instruction ID: adfa10e12aa9393201bf943ac26147aaa7db17c529c10dab5394884ed4ce2c65
Opcode Fuzzy Hash: dd833eb704b03c62a36fea145c0b0b4abee32047d89ef2e694e61e0216d7ee09
Instruction Fuzzy Hash: 8C01A563A1868581FA159F24E44637D7361FF85B90F885231EA9C47AA7DF2DD0408609

Function 00007FF6E9961558 Relevance: 1.5, APIs: 1, Instructions: 38COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00007FF6E9961604: GetModuleHandleW.KERNEL32(?,?,?,00007FF6E9961573,?,?,?,00007FF6E996192A), ref: 00007FF6E996162B

DloadProtectSection.DELAYIMP ref: 00007FF6E99615C9

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: DloadHandleModuleProtectSection
String ID:
API String ID: 2883838935-0
Opcode ID: 908f49ac33541a8240f4269ada82e733cc5c0c647bda27ab8868a2cee9a60ef3
Instruction ID: 010d2b7582e7d94db64cb899879a65092054f890d3de1559925f52832d3e5bca
Opcode Fuzzy Hash: 908f49ac33541a8240f4269ada82e733cc5c0c647bda27ab8868a2cee9a60ef3
Instruction Fuzzy Hash: E111C063D1C64786FB609F16A9413B05370AF18349F1C0479C90DCA2A3EF3EA499C64F

Function 00007FF6E996FA04 Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 00007FF6E996FA59

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c4d23aaef5024e3722ccbb242168b3e22d65bf63548bcaacbbf61b8d0a3ba7a1
Instruction ID: ff61f0debc5a8ee698c6fe0c1f15cff3e01edd7b5b6d8a0bbeae9873a2500ccf
Opcode Fuzzy Hash: c4d23aaef5024e3722ccbb242168b3e22d65bf63548bcaacbbf61b8d0a3ba7a1
Instruction Fuzzy Hash: 36F09A57B2A70749FE545F669A113B412819F99B80F4C5430CA0ECA3C3FE2EE6C1C29A

Function 00007FF6E9943EC8 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E99440BC: FindFirstFileW.KERNELBASE ref: 00007FF6E994410B
Part of subcall function 00007FF6E99440BC: FindFirstFileW.KERNEL32 ref: 00007FF6E994415E
Part of subcall function 00007FF6E99440BC: GetLastError.KERNEL32 ref: 00007FF6E99441AF

FindClose.KERNELBASE(?,?,00000000,00007FF6E9950811), ref: 00007FF6E9943EFD

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Find$FileFirst$CloseErrorLast
String ID:
API String ID: 1464966427-0
Opcode ID: 18fe74ab7ca813274cb64c08179860cc48efc587ad39327f0b25563dc18ddab5
Instruction ID: 52d61c0b88281e59a2678d57636031eabed0db5c1964b8ba8b95d8d3602bbcd2
Opcode Fuzzy Hash: 18fe74ab7ca813274cb64c08179860cc48efc587ad39327f0b25563dc18ddab5
Instruction Fuzzy Hash: A6F0F46350828285EA119FB1A6813B833609F05BB4F1C1374EE3D473C7CE2AD4468F5A

Function 00007FF6E996D94C Relevance: 1.5, APIs: 1, Instructions: 29memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 00007FF6E996D98A

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 5fa632deebd8181b9f3ea37834cf4eccbda839d7d0d6f948310c23224b4a93e7
Instruction ID: 4b394337b8635fefa9305bc296d7ed3809de0140781530ff1683d372d5655398
Opcode Fuzzy Hash: 5fa632deebd8181b9f3ea37834cf4eccbda839d7d0d6f948310c23224b4a93e7
Instruction Fuzzy Hash: 52F03452E2A34744FF146EB25C403B416905F897A1F0C1630D93ECB2C3EE2EA480C29A

Function 00007FF6E99420D0 Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?,?,00000001,00007FF6E994207E), ref: 00007FF6E99420F6

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: ccbd9008d2c4ce7168f8d058ff2f34620ae6bf54bfe45a0cbca9d6a6f1a7c065
Instruction ID: abaa1263955aeaac2df59a1d56ed166dfc53a443a93cc5bb505ef9922c9f73ff
Opcode Fuzzy Hash: ccbd9008d2c4ce7168f8d058ff2f34620ae6bf54bfe45a0cbca9d6a6f1a7c065
Instruction Fuzzy Hash: DFF08C23A0868285FF258F20E08137D2660EF18B7DF5C4334D73C815D6CE29D8D68B0A

Function 00007FF6E9942490 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE ref: 00007FF6E99424A2

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: df9a28314c6b6fddfb177ebf539387614dcb0363737e1ba4f38fe55c4f903e1a
Instruction ID: 17faa322f7efaa4ba6eb1a540c51a090bea2623c8592bf131bb5b47b5ed0019a
Opcode Fuzzy Hash: df9a28314c6b6fddfb177ebf539387614dcb0363737e1ba4f38fe55c4f903e1a
Instruction Fuzzy Hash: 78D01213E0944182DD109B3698D117C2350FF96735FA80730D63EC26E7CE1E9497A75A

Function 00007FF6E9977610 Relevance: 1.5, APIs: 1, Instructions: 10COMMON

Download Yara Rule

APIs

FreeLibrary.KERNELBASE ref: 00007FF6E9977620

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: d905035bd3ffed0fa3d42b0ba6c84558746c8bc0c2d9d26789c142ff972459f6
Instruction ID: ff24d3b7fb1236a732cf211e428e71a99bb01d5c0e4797f7f95fe05297b00955
Opcode Fuzzy Hash: d905035bd3ffed0fa3d42b0ba6c84558746c8bc0c2d9d26789c142ff972459f6
Instruction Fuzzy Hash: 3DD09E9BE1B90689F7449F01F89533412607F68719F4D0635C40EC55938F7E2094872F

Function 00007FF6E9947FC4 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNELBASE ref: 00007FF6E9947FD2

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: CurrentDirectory
String ID:
API String ID: 1611563598-0
Opcode ID: 176ab68ebee512dad0278907058cd855c5c44f8615b79807412a7d406b36e525
Instruction ID: 42deb76b8677e86be79a3b6dd641b8be177d4e4b86acd2000ee00ad49cf5c5be
Opcode Fuzzy Hash: 176ab68ebee512dad0278907058cd855c5c44f8615b79807412a7d406b36e525
Instruction Fuzzy Hash: 17C08C22F15502C1EA085F26C8C926813A4BF40B04B684034C10DC1160CE2EC4EA974A

Non-executed Functions

Function 00007FF6E9941A48 Relevance: 17.9, APIs: 9, Strings: 1, Instructions: 375fileCOMMON

Download Yara Rule

APIs

GetLongPathNameW.KERNEL32 ref: 00007FF6E9941A97
GetLongPathNameW.KERNEL32 ref: 00007FF6E9941AE0
GetShortPathNameW.KERNEL32 ref: 00007FF6E9941B21
GetShortPathNameW.KERNEL32 ref: 00007FF6E9941B6A

Part of subcall function 00007FF6E99513C4: CompareStringW.KERNEL32 ref: 00007FF6E99513E3

MoveFileW.KERNEL32 ref: 00007FF6E9941DFE
MoveFileW.KERNEL32 ref: 00007FF6E9941E65

Part of subcall function 00007FF6E9942134: CreateFileW.KERNEL32 ref: 00007FF6E994223C

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9941FE1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9941FE7
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9941FED

Strings

rtmp, xrefs: 00007FF6E9941CF4, 00007FF6E9941D03

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: NamePath$File_invalid_parameter_noinfo_noreturn$LongMoveShort$CompareCreateString
String ID: rtmp
API String ID: 3587137053-870060881
Opcode ID: 6f9f009cc68f79adfaa2d6c81f4dd6478a908af634b8d3a3b94ef6884c4367c6
Instruction ID: faa10d05c1c41ce85b75caaef4dd694a9ef1533ceb587dce5ca064449fe08e23
Opcode Fuzzy Hash: 6f9f009cc68f79adfaa2d6c81f4dd6478a908af634b8d3a3b94ef6884c4367c6
Instruction Fuzzy Hash: 5EF1C323B18A4281EB20CF65D8842ED6761EF957C4F580131EA5D83AAADF3DE485CB49

Function 00007FF6E9931AA4 Relevance: 6.3, APIs: 4, Instructions: 285COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9931EA9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9931EAF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9931EB5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9931EBB

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 64d25151ef3fe23f20685aee3441bda27b372bcb0863407ca166e54c625fc733
Instruction ID: 9d11dedd1afa07de86735c3ef837752454927cfca78b85a7daa5885e5a82f36e
Opcode Fuzzy Hash: 64d25151ef3fe23f20685aee3441bda27b372bcb0863407ca166e54c625fc733
Instruction Fuzzy Hash: 6DB1C063A1468686EA20DF75D8483ED2361FF86784F485231EA5D87BABDF3ED540C309

Function 00007FF6E996FA94 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 164COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6E996FAC4

Part of subcall function 00007FF6E9967934: GetCurrentProcess.KERNEL32(00007FF6E9970CCD), ref: 00007FF6E9967961

Strings

*?, xrefs: 00007FF6E996FAEB
., xrefs: 00007FF6E996FEE4

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: CurrentProcess_invalid_parameter_noinfo
String ID: *?$.
API String ID: 2518042432-3972193922
Opcode ID: f96344909874f118cd7fc652812aee2de17a0b901a5c412331694f6fbd6e8fc4
Instruction ID: e5bd08bb3d717607bc9905dfbc1e2bb1863e2f645fcabe3f7a202aecfac986d6
Opcode Fuzzy Hash: f96344909874f118cd7fc652812aee2de17a0b901a5c412331694f6fbd6e8fc4
Instruction Fuzzy Hash: 4451E363B25B9541EF10DFA298102B867A4FF88BD8B484535DE1D57B87EE3ED082C345

Function 00007FF6E9962A10 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 61libraryloaderCOMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF6E9962A26
GetModuleHandleW.KERNEL32 ref: 00007FF6E9962A33
GetModuleHandleW.KERNEL32 ref: 00007FF6E9962A48
GetProcAddress.KERNEL32 ref: 00007FF6E9962A60
GetProcAddress.KERNEL32 ref: 00007FF6E9962A73
CreateEventW.KERNEL32 ref: 00007FF6E9962A9F
DeleteCriticalSection.KERNEL32 ref: 00007FF6E9962AEB
CloseHandle.KERNEL32 ref: 00007FF6E9962AFD

Strings

WakeAllConditionVariable, xrefs: 00007FF6E9962A66
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00007FF6E9962A2C
kernel32.dll, xrefs: 00007FF6E9962A41
SleepConditionVariableCS, xrefs: 00007FF6E9962A56

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Handle$AddressCriticalModuleProcSection$CloseCountCreateDeleteEventInitializeSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2565136772-3242537097
Opcode ID: 6e1e709f092c3aabc6fb1c9db3d7c09c3ef1a4a7bf2af41e7ac9402dec2f511f
Instruction ID: 03fadf4553eaa80888a08961fc93c596de92b433ae43a7b5544fb3bf4b571ee8
Opcode Fuzzy Hash: 6e1e709f092c3aabc6fb1c9db3d7c09c3ef1a4a7bf2af41e7ac9402dec2f511f
Instruction Fuzzy Hash: 6F210162E2EB0385FE559F52E8953B823A0AF44790F4C0475C90EC26E7DE3EE485C35A

Function 00007FF6E9946A0C Relevance: 16.2, APIs: 6, Strings: 3, Instructions: 444COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99470A6

Part of subcall function 00007FF6E9932004: std::_Xinvalid_argument.LIBCPMT ref: 00007FF6E993200F

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99470B2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99470B8
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99470C4
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99470D6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E99470DC

Strings

DXGIDebug.dll, xrefs: 00007FF6E9946A18
\\?\, xrefs: 00007FF6E9946A57, 00007FF6E9946A66
UNC, xrefs: 00007FF6E9946BBF

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Xinvalid_argumentstd::_
String ID: DXGIDebug.dll$UNC$\\?\
API String ID: 4097890229-4048004291
Opcode ID: caeda946b173b290eeb0eea351584ffd7bcd35d17f0c3fb79cdbd079912c01be
Instruction ID: 8c9dea8b60f9f272aad93cd2ad464da4168ba9809bf80118aacd0f874d7074a5
Opcode Fuzzy Hash: caeda946b173b290eeb0eea351584ffd7bcd35d17f0c3fb79cdbd079912c01be
Instruction Fuzzy Hash: 7412DE63B09A4280EF10CF65D4842AD6371EF81B88F544135DB6D87AEADF3ED44AC74A

Function 00007FF6E99672EC Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 88libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,?,00000000,00007FF6E99674F3,?,?,?,00007FF6E996525E,?,?,?,00007FF6E9965219), ref: 00007FF6E9967371
GetLastError.KERNEL32(?,?,00000000,00007FF6E99674F3,?,?,?,00007FF6E996525E,?,?,?,00007FF6E9965219), ref: 00007FF6E996737F
LoadLibraryExW.KERNEL32(?,?,00000000,00007FF6E99674F3,?,?,?,00007FF6E996525E,?,?,?,00007FF6E9965219), ref: 00007FF6E99673A9
FreeLibrary.KERNEL32(?,?,00000000,00007FF6E99674F3,?,?,?,00007FF6E996525E,?,?,?,00007FF6E9965219), ref: 00007FF6E99673EF
GetProcAddress.KERNEL32(?,?,00000000,00007FF6E99674F3,?,?,?,00007FF6E996525E,?,?,?,00007FF6E9965219), ref: 00007FF6E99673FB

Strings

api-ms-, xrefs: 00007FF6E9967391

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProc
String ID: api-ms-
API String ID: 2559590344-2084034818
Opcode ID: eedfc97f7024c66fbeb39a7219499b253e22696fd1fdab2c5f769bf1fd383016
Instruction ID: 4f57150a2779491b149ec5c1c42054e8032406f5d09c4e67e9c360010ea075e9
Opcode Fuzzy Hash: eedfc97f7024c66fbeb39a7219499b253e22696fd1fdab2c5f769bf1fd383016
Instruction Fuzzy Hash: 2531B423A2A74291EE119F16A804B792395FF08BA0F1D4535DD1E87783DF3DE040C76A

Function 00007FF6E9957B28 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

ShowWindow.USER32 ref: 00007FF6E9957B6F
GetWindowRect.USER32 ref: 00007FF6E9957BC0
ShowWindow.USER32 ref: 00007FF6E9957C96
ShowWindow.USER32 ref: 00007FF6E9957CC3

Strings

RarHtmlClassName, xrefs: 00007FF6E9957C4B

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Window$Show$Rect
String ID: RarHtmlClassName
API String ID: 2396740005-1658105358
Opcode ID: 7e152e90957d1346e93cce3b53dfbd480fa38e990bdf0b518984ba75781cfd03
Instruction ID: 311950e7d675516259cc4b48dabb56074d98648f2295bd2881cd1138d0e265d3
Opcode Fuzzy Hash: 7e152e90957d1346e93cce3b53dfbd480fa38e990bdf0b518984ba75781cfd03
Instruction Fuzzy Hash: C1518123A09B828AEB24DF21E45437E63A0FF85B81F084435DE8E87B56DF3EE5458715

Function 00007FF6E9943AF8 Relevance: 7.7, APIs: 5, Instructions: 164filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 00007FF6E9943BBB
CreateFileW.KERNEL32 ref: 00007FF6E9943C24
SetFileTime.KERNEL32 ref: 00007FF6E9943CEC
CloseHandle.KERNEL32 ref: 00007FF6E9943CF6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF6E9943D2C

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: File$Create$CloseHandleTime_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2398171386-0
Opcode ID: 14fdea18fdcf977c61dce6ecaccc8aa35300d093acc7d7c713630260d7cb0aba
Instruction ID: e6cbfc732a3fb8a34dd8e9f3a0c8359194ed7c78443f6f11630792edc31ff940
Opcode Fuzzy Hash: 14fdea18fdcf977c61dce6ecaccc8aa35300d093acc7d7c713630260d7cb0aba
Instruction Fuzzy Hash: 2851F423B04A0249FB51DFB5E9813BD23B1AF447A8F084635EE2D867D6DE3D9406C709

Function 00007FF6E996625C Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 163COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF6E9966286
abort.LIBCMT ref: 00007FF6E99664EA

Strings

csm, xrefs: 00007FF6E996641A
csm, xrefs: 00007FF6E99662AB

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: __except_validate_context_recordabort
String ID: csm$csm
API String ID: 746414643-3733052814
Opcode ID: 91fc108a1c492767e4bb41002f60c2920875b1ec76e01922ab372504797a4c8e
Instruction ID: bc7353c638cd0a995244e5742b24a4f7d17cadba271def92662d5a8429305553
Opcode Fuzzy Hash: 91fc108a1c492767e4bb41002f60c2920875b1ec76e01922ab372504797a4c8e
Instruction Fuzzy Hash: 517192B361869186DB608F25905077D7BA0EF45B89F188136DA8C87B87CF3DE491C78A

Function 00007FF6E996E1F4 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 138COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6E996E237

Strings

gfff, xrefs: 00007FF6E996E362
e+000, xrefs: 00007FF6E996E2DF

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: e+000$gfff
API String ID: 3215553584-3030954782
Opcode ID: ffbcb58cc87a1110f60409a8afde5d08377aab6ce8cf060c3284a5669936e3c2
Instruction ID: 3472a26fb390c6168c7e9c382554ea903ac361b4380317990e9aaa042b043b43
Opcode Fuzzy Hash: ffbcb58cc87a1110f60409a8afde5d08377aab6ce8cf060c3284a5669936e3c2
Instruction Fuzzy Hash: 65515663B287C146E7258F7598417696B92AF80B90F0C8235CAACC7BD7CE2ED454C746

Function 00007FF6E996C2C0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6E996C2EA
GetModuleFileNameA.KERNEL32(?,?,?,?,?,00007FF6E9962CD5), ref: 00007FF6E996C30B

Strings

C:\Users\user~1\AppData\Local\Temp\RarSFX0\work.exe, xrefs: 00007FF6E996C2F9

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: FileModuleName_invalid_parameter_noinfo
String ID: C:\Users\user~1\AppData\Local\Temp\RarSFX0\work.exe
API String ID: 3307058713-1397153546
Opcode ID: 2b307fc7043d57580c2760bc14d10e66149d3294dbd6a1f00798eb6953a6f573
Instruction ID: 42acbce6e58851f1b67a6fc6db8fd4b8cba807fcf0ffd2fe04477a6ed36df8eb
Opcode Fuzzy Hash: 2b307fc7043d57580c2760bc14d10e66149d3294dbd6a1f00798eb6953a6f573
Instruction Fuzzy Hash: 5A415233A187528AEB14DF25A8412BC7794EF487D4B484036FA4E87B47EE3EE441C399

Function 00007FF6E9960204 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 75windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32 ref: 00007FF6E996026F
DialogBoxParamW.USER32 ref: 00007FF6E99602A4

Strings

GETPASSWORD1, xrefs: 00007FF6E996029D

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: DialogParamVisibleWindow
String ID: GETPASSWORD1
API String ID: 3157717868-3292211884
Opcode ID: 3689008c5ae976a1f3a242e5b1eb30ef9737a63c20829ff4d7ba5964f065d3d0
Instruction ID: c3a132b21915577f742dfaee4ad5d985bec704cbe893815cc8c6112c16336c00
Opcode Fuzzy Hash: 3689008c5ae976a1f3a242e5b1eb30ef9737a63c20829ff4d7ba5964f065d3d0
Instruction Fuzzy Hash: 56317367A1D7C2CAEB00CF22A8403B92B60AF55B84F4C4035D94D87767CE2EE544C39A

Function 00007FF6E996EB04 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32 ref: 00007FF6E996EB76
GetFileType.KERNEL32 ref: 00007FF6E996EB8C

Strings

@, xrefs: 00007FF6E996EBB7

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: FileHandleType
String ID: @
API String ID: 3000768030-2766056989
Opcode ID: 01c4e23626c5bd34e0d32a71787dfe5976e9b76bf070a7e2fa99837352baeece
Instruction ID: 82e61bb513754a5d9b3b1b3642cc186401d540d49c30585211eaa61a128d2048
Opcode Fuzzy Hash: 01c4e23626c5bd34e0d32a71787dfe5976e9b76bf070a7e2fa99837352baeece
Instruction Fuzzy Hash: E2218123E28A8241EB608F7694902792651EF85774F2C0335D66F877D6CE3ED891C38A

Function 00007FF6E994EAA4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32 ref: 00007FF6E994EAE0
SetThreadPriority.KERNEL32 ref: 00007FF6E994EB36

Strings

CreateThread failed, xrefs: 00007FF6E994EAEE

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: Thread$CreatePriority
String ID: CreateThread failed
API String ID: 2610526550-3849766595
Opcode ID: cf4f3858e1c5421656891f758a667cd72a6f2059ba57d4f8d940dbc9b5e0f540
Instruction ID: c8bc3929ff614c042dd6e228285bbaa07e3a996d1f9da4939f9e1a8d12e60114
Opcode Fuzzy Hash: cf4f3858e1c5421656891f758a667cd72a6f2059ba57d4f8d940dbc9b5e0f540
Instruction Fuzzy Hash: 6D119433A08A4281E715DF25E8813B97360FF84794F5C4531D65D8266ADF3EE582CB09

Function 00007FF6E994EA5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,?,00007FF6E994E95F,?,?,?,00007FF6E994463A,?,?,?), ref: 00007FF6E994EA63
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF6E994E95F,?,?,?,00007FF6E994463A,?,?,?), ref: 00007FF6E994EA6E

Strings

WaitForMultipleObjects error %d, GetLastError %d, xrefs: 00007FF6E994EA78

Memory Dump Source

Source File: 00000004.00000002.1368842338.00007FF6E9931000.00000020.00000001.01000000.00000009.sdmp, Offset: 00007FF6E9930000, based on PE: true

Associated: 00000004.00000002.1368597456.00007FF6E9930000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1368969270.00007FF6E9978000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E998B000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369006211.00007FF6E9994000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999A000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000004.00000002.1369121906.00007FF6E999E000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6e9930000_work.jbxd

Similarity

API ID: ErrorLastObjectSingleWait
String ID: WaitForMultipleObjects error %d, GetLastError %d
API String ID: 1211598281-2248577382
Opcode ID: 98ce5a6e9b01a49333d4d7b683bb298ff4a8e953ba0927a3bf2f7aa8eb90df55
Instruction ID: 8c94b36d228ceae09a5736d8e66817df4d91d15ad3b7fa0896513c96313966ed
Opcode Fuzzy Hash: 98ce5a6e9b01a49333d4d7b683bb298ff4a8e953ba0927a3bf2f7aa8eb90df55
Instruction Fuzzy Hash: 13E0BF67E1984281F610AF359C867B82611BFA5775FAC4331D03EC15F39F2EA985870B

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. Security constructs such as permission levels will often hinder access to information and use of certain techniques, so adversaries will likely need to perform privilege escalation to include use of software exploitation to circumvent those restrictions.
Tactics:	Privilege Escalation
Data Sources:	Driver: Driver Load, Process: Process Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report cbIcBAgY5W.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: SystemBC

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\ooxxi\ealfvjp.exe

C:\Users\user\AppData\Local\Temp\RarSFX0\1.bat

C:\Users\user\AppData\Local\Temp\RarSFX0\work.exe

C:\Users\user\AppData\Local\Temp\RarSFX1\jergs.exe

C:\Windows\Tasks\ealfvjp.job

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Windows Analysis Report
cbIcBAgY5W.exe

Function 00007FF764080754 Relevance: 45.9, APIs: 21, Strings: 5, Instructions: 380
filetimewindowCOMMON

Function 00007FF76406A4AC Relevance: 23.0, APIs: 11, Strings: 2, Instructions: 250
COMMON

Function 00007FF764078624 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 101
memorywindowCOMMON

Function 00007FF7640640BC Relevance: 10.7, APIs: 7, Instructions: 153
fileCOMMON

Function 00007FF764055E24 Relevance: 7.6, APIs: 3, Strings: 1, Instructions: 586
COMMON

Function 00007FF76406DFD0 Relevance: 143.9, APIs: 16, Strings: 66, Instructions: 440
libraryfileloaderCOMMON

Function 00007FF764081900 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 195
libraryCOMMONLIBRARYCODE

Function 00007FF76407F4E0 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 285
windowCOMMON

Function 00007FF76407F0A4 Relevance: 16.6, APIs: 11, Instructions: 102
COMMON

Function 00007FF7640624C0 Relevance: 9.2, APIs: 6, Instructions: 164
filetimeCOMMON

Function 00007FF76407B014 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54
windowCOMMON

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre