Edit tour

Windows Analysis Report
gBYz86HSwI.msi

Overview

General Information

Sample name:	gBYz86HSwI.msi renamed because original name is a hash value
Original sample name:	a1faae4e2b695c7df3846179192f4e67bd8dd05e7e5c6d0b4b72db175f629076(1).msi
Analysis ID:	1544717
MD5:	0c88f651eea7ebd95df08f6a492fcb38
SHA1:	93e622bb18056bb61dd11805d91ab1f9267cbd67
SHA256:	a1faae4e2b695c7df3846179192f4e67bd8dd05e7e5c6d0b4b72db175f629076
Tags:	873901msiuser-JAMESWT_MHT
Infos:

Detection

Score:	45
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Changes security center settings (notifications, updates, antivirus, firewall)

Connects to many ports of the same IP (likely port scanning)

Enables network access during safeboot for specific services

Enables remote desktop connection

Query firmware table information (likely to detect VMs)

AV process strings found (often used to terminate AV products)

Checks for available system drives (often done to infect USB drives)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates or modifies windows services

Deletes files inside the Windows folder

Detected TCP or UDP traffic on non-standard ports

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Launches processes in debugging mode, may be used to hinder debugging

May sleep (evasive loops) to hinder dynamic analysis

Modifies existing windows services

PE file contains executable resources (Code or Archives)

PE file contains more sections than normal

PE file contains sections with non-standard names

PE file contains strange resources

Queries disk information (often used to detect virtual machines)

Queries the installation date of Windows

Queries the product ID of Windows

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Suspicious Outbound SMTP Connections

Stores files to the Windows start menu directory

Stores large binary data to the registry

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

msiexec.exe (PID: 360 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\gBYz86HSwI.msi" MD5: E5DA170027542E25EDE42FC54C929077)

ROMFUSClient.exe (PID: 7996 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /start MD5: 63D0964168B927D00064AA684E79A300)

ROMServer.exe (PID: 8036 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /start MD5: F3D74B072B9697CF64B0B8445FDC8128)

msiexec.exe (PID: 3664 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

ROMFUSClient.exe (PID: 7788 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /msiinstall /silentinstall /SETSECURITY MD5: 63D0964168B927D00064AA684E79A300)

ROMServer.exe (PID: 7880 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /msiinstall /silentinstall /SETSECURITY MD5: F3D74B072B9697CF64B0B8445FDC8128)

ROMFUSClient.exe (PID: 7944 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray /config MD5: 63D0964168B927D00064AA684E79A300)

svchost.exe (PID: 6644 cmdline: C:\Windows\System32\svchost.exe -k NetworkService -p MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

SgrmBroker.exe (PID: 5372 cmdline: C:\Windows\system32\SgrmBroker.exe MD5: 3BA1A18A0DC30A0545E7765CB97D8E63)

sppsvc.exe (PID: 4040 cmdline: C:\Windows\system32\sppsvc.exe MD5: 320823F03672CEB82CC3A169989ABD12)

svchost.exe (PID: 5260 cmdline: C:\Windows\system32\svchost.exe -k UnistackSvcGroup MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 4296 cmdline: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 6468 cmdline: C:\Windows\System32\svchost.exe -k wsappx -p -s ClipSVC MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 6516 cmdline: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s wscsvc MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

MpCmdRun.exe (PID: 6696 cmdline: "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable MD5: B3676839B2EE96983F9ED735CD044159)

conhost.exe (PID: 3132 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchost.exe (PID: 7256 cmdline: C:\Windows\system32\svchost.exe -k LocalService -s W32Time MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

ROMServer.exe (PID: 8052 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" MD5: F3D74B072B9697CF64B0B8445FDC8128)

ROMFUSClient.exe (PID: 8148 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" MD5: 63D0964168B927D00064AA684E79A300)

ROMFUSClient.exe (PID: 8156 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray MD5: 63D0964168B927D00064AA684E79A300)

ROMFUSClient.exe (PID: 2120 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray MD5: 63D0964168B927D00064AA684E79A300)

ROMFUSClient.exe (PID: 1652 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray MD5: 63D0964168B927D00064AA684E79A300)

ROMFUSClient.exe (PID: 896 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray MD5: 63D0964168B927D00064AA684E79A300)

ROMFUSClient.exe (PID: 3672 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray MD5: 63D0964168B927D00064AA684E79A300)

ROMFUSClient.exe (PID: 1004 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray MD5: 63D0964168B927D00064AA684E79A300)

ROMFUSClient.exe (PID: 7504 cmdline: "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray MD5: 63D0964168B927D00064AA684E79A300)

svchost.exe (PID: 5688 cmdline: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author
C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
13.0.ROMFUSClient.exe.400000.0.unpack	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
14.0.ROMServer.exe.400000.0.unpack	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Sigma Signatures

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 111.90.140.76, DestinationIsIpv6: false, DestinationPort: 465, EventID: 3, Image: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe, Initiated: true, ProcessId: 8052, Protocol: tcp, SourceIp: 192.168.2.7, SourceIsIpv6: false, SourcePort: 49725

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k NetworkService -p, CommandLine: C:\Windows\System32\svchost.exe -k NetworkService -p, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 624, ProcessCommandLine: C:\Windows\System32\svchost.exe -k NetworkService -p, ProcessId: 6644, ProcessName: svchost.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: C:\Windows\System32\msiexec.exe

File created: C:\Program Files (x86)\LiteManager Pro - Server\EULA.rtf

Jump to behavior

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File opened: d:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\SysWOW64\wininet.dll
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\SysWOW64\winspool.drv
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984\COMCTL32.dll
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\SysWOW64\
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\SysWOW64\winmm.dll

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 111.90.140.76 ports 5651,8080,1,465,5,6,80

Enables network access during safeboot for specific services

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Registry value created: NULL Service

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.7:49722 -> 111.90.140.76:5651
Source: global traffic	TCP traffic: 192.168.2.7:49727 -> 65.21.245.7:5555

Source: Joe Sandbox View

IP Address: 65.21.245.7 65.21.245.7

Source: Joe Sandbox View

ASN Name: SHINJIRU-MY-AS-APShinjiruTechnologySdnBhdMY SHINJIRU-MY-AS-APShinjiruTechnologySdnBhdMY

Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 65.21.245.7
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76
Source: unknown	TCP traffic detected without corresponding DNS query: 111.90.140.76

Source: global traffic

DNS traffic detected: DNS query: time.windows.com

Source: ROMwln.dll.2.dr	String found in binary or memory: http://crl.comodoca.com/COMODORSACodeSigningCA.crl0t
Source: ROMServer.exe0.2.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: ROMServer.exe0.2.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: ROMServer.exe0.2.dr	String found in binary or memory: http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: ROMServer.exe0.2.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: ROMServer.exe0.2.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: ROMServer.exe0.2.dr	String found in binary or memory: http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
Source: 6a346b.rbs.2.dr, ROMServer.exe0.2.dr	String found in binary or memory: http://litemanager.com/
Source: ROMServer.exe, 00000012.00000002.3730666753.000000000180C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://litemanager.com/03
Source: ROMFUSClient.exe, 00000014.00000002.3730828904.00000000027A3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://litemanager.com/03z
Source: ROMServer.exe, 0000000E.00000003.1500982103.0000000002C33000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://litemanager.com/QK
Source: ROMServer.exe, 0000000E.00000003.1500982103.0000000002C2C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://litemanager.com/Y
Source: ROMFUSClient.exe, 0000000D.00000000.1483802950.00000000008E4000.00000002.00000001.01000000.00000004.sdmp, ROMServer.exe, 0000000E.00000000.1493027307.00000000009FE000.00000002.00000001.01000000.00000005.sdmp, ROMServer.exe0.2.dr, Ukrainian.lg.2.dr, Russian.lg.2.dr	String found in binary or memory: http://litemanager.ru/
Source: Ukrainian.lg.2.dr	String found in binary or memory: http://litemanager.ru/forum/ru/memberlist.php?mode=viewprofile&u=977.
Source: ROMServer.exe, 0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp, ROMServer.exe0.2.dr	String found in binary or memory: http://litemanager.ru/noip.txtU
Source: ROMwln.dll.2.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: ROMServer.exe0.2.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://s2.symcb.com0
Source: svchost.exe, 00000008.00000002.3729409884.000001CE4ED18000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000008.00000002.3728537191.000001CE4E487000.00000004.00000020.00020000.00000000.sdmp, regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.8.dr	String found in binary or memory: http://standards.iso.org/iso/19770/-2/2009/schema.xsd
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://sv.symcb.com/sv.crl0f
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://sv.symcb.com/sv.crt0
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://sv.symcd.com0&
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: 6a346b.rbs.2.dr	String found in binary or memory: http://www.LiteManagerTeam.com
Source: svchost.exe, 00000003.00000002.1365525224.000001BB97213000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.bingmapsportal.com
Source: ROMFUSClient.exe, 0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp, ROMFUSClient.exe, 0000000D.00000003.1504394447.00000000028C7000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe, 0000000E.00000003.1500982103.0000000002B97000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe, 0000000E.00000000.1491178939.0000000000951000.00000020.00000001.01000000.00000005.sdmp, ROMFUSClient.exe, 0000000F.00000002.3729672765.00000000027B7000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000010.00000003.1573048277.0000000002877000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe, 00000011.00000003.1564243883.00000000029E7000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe, 00000012.00000002.3730666753.0000000001770000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000013.00000002.3730266458.00000000028D7000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000014.00000002.3730828904.0000000002707000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000015.00000003.1566667276.00000000026C7000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000016.00000003.1576067519.0000000002857000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 0000001E.00000003.2496712728.0000000002807000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 0000001F.00000003.3007956255.0000000002837000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe0.2.dr	String found in binary or memory: http://www.indyproject.org/
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://www.symauth.com/cps0(
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: http://www.symauth.com/rpa00
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://appexmapsappupdate.blob.core.windows.net
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/V1/MapControlConfiguration/native/
Source: svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365051046.000001BB9726D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365672449.000001BB97270000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365173754.000001BB9725A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365186784.000001BB97243000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Locations
Source: svchost.exe, 00000003.00000002.1365656581.000001BB97268000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Routes/
Source: svchost.exe, 00000003.00000003.1365051046.000001BB9726D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365672449.000001BB97270000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/REST/v1/Transit/Stops/
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.ditu.live.com/mapcontrol/logging.ashx
Source: svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365559285.000001BB9722B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365173754.000001BB9725A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Imagery/Copyright/
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Locations
Source: svchost.exe, 00000003.00000003.1365068071.000001BB97267000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365656581.000001BB97268000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365559285.000001BB9722B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Driving
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Transit
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Routes/Walking
Source: svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Traffic/Incidents/
Source: svchost.exe, 00000003.00000002.1365587205.000001BB97241000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Transit/Schedules/
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/mapcontrol/logging.ashx
Source: svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365186784.000001BB97243000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
Source: svchost.exe, 00000003.00000003.1365020122.000001BB97234000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
Source: svchost.exe, 00000003.00000002.1365587205.000001BB97241000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
Source: svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
Source: svchost.exe, 00000003.00000003.1365186784.000001BB97243000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365129594.000001BB9725E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.api.tiles.ditu.live.com/odvs/gri?pv=1&r=
Source: svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.t
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
Source: svchost.exe, 00000003.00000003.1365020122.000001BB97234000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ecn.dev.virtualearth.net/REST/V1/MapControlConfiguration/native/
Source: svchost.exe, 00000003.00000003.1365068071.000001BB97267000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365656581.000001BB97268000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365559285.000001BB9722B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
Source: ROMFUSClient.exe, 0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp, ROMServer.exe, 0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp, ROMServer.exe0.2.dr	String found in binary or memory: https://litemanager.com/romversion.txt
Source: ROMFUSClient.exe, 0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp, ROMServer.exe, 0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp, ROMServer.exe0.2.dr	String found in binary or memory: https://litemanager.com/soft/pro/ROMServer.zip
Source: ROMServer.exe0.2.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: svchost.exe, 00000003.00000003.1365186784.000001BB97243000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
Source: svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
Source: svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
Source: svchost.exe, 00000003.00000003.1365142382.000001BB9725D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
Source: svchost.exe, 00000003.00000002.1365559285.000001BB9722B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
Source: svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tiles.virtualearth.net/tiles/cmd/StreetSideBubbleMetaData?north=

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6a346a.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{71FFA475-24D5-44FB-A51F-39B699E3D82C}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI36AC.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ARPPRODUCTICON.exe	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ROMServer.exe_9D09B2BC25A2414CBD848E2B75898676.exe	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\UNINST_Uninstall_L_78AA5B6662514D94A847D6C603AF0895.exe	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\stop_server_51B516B87C64408FA3C56354EA2277C2.exe	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\config_server_B6BD2967C67B44649764F06ADFFD6458.exe	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6a346c.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\6a346c.msi	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\6a346c.msi

Jump to behavior

Source: ROMViewer.exe.2.dr	Static PE information: Resource name: RT_VERSION type: Intel ia64 COFF executable, no relocation info, not stripped, 52 sections, symbol offset=0x5f0053, 4522070 symbols, optional header size 82, created Sat Mar 7 05:34:56 1970
Source: ROMServer.exe.2.dr	Static PE information: Resource name: RT_VERSION type: Intel ia64 COFF executable, no relocation info, not stripped, 52 sections, symbol offset=0x5f0053, 4522070 symbols, optional header size 82, created Sat Mar 7 05:34:56 1970
Source: ROMServer.exe0.2.dr	Static PE information: Resource name: RT_VERSION type: Intel ia64 COFF executable, no relocation info, not stripped, 52 sections, symbol offset=0x5f0053, 4522070 symbols, optional header size 82, created Sat Mar 7 05:34:56 1970

Source: ROMServer.exe0.2.dr	Static PE information: Number of sections : 11 > 10
Source: ROMServer.exe.2.dr	Static PE information: Number of sections : 11 > 10
Source: ROMViewer.exe.2.dr	Static PE information: Number of sections : 11 > 10
Source: ROMFUSClient.exe.2.dr	Static PE information: Number of sections : 11 > 10

Source: ROMViewer.exe.2.dr

Static PE information: Resource name: RT_RCDATA type: Delphi compiled form 'TfmEditBinaryValue'

Source: gBYz86HSwI.msi	Binary or memory string: OriginalFilename_IsIcoRes.exe< vs gBYz86HSwI.msi
Source: gBYz86HSwI.msi	Binary or memory string: OriginalFilenameSetAllUsers.dll< vs gBYz86HSwI.msi
Source: gBYz86HSwI.msi	Binary or memory string: OriginalFilenameISRegSvr.dll vs gBYz86HSwI.msi

Source: classification engine

Classification label: mal45.troj.evad.winMSI@39/43@1/2

Source: C:\Windows\System32\msiexec.exe

File created: C:\Program Files (x86)\LiteManager Pro - Server

Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ROMFUSLocal
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:3132:120:WilError_03
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ROMFUSTrayConfig
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ROMFUSTray
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Mutant created: \Sessions\1\BaseNamedObjects\ROMServerConfig

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\TEMP\~DF59E0510B109E847E.TMP

Jump to behavior

Source: Yara match	File source: 13.0.ROMFUSClient.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.0.ROMServer.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe, type: DROPPED
Source: Yara match	File source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe, type: DROPPED
Source: Yara match	File source: C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe, type: DROPPED

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key opened: HKEY_USERS.DEFAULT\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key opened: HKEY_USERS.DEFAULT\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_USERS.DEFAULT\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_USERS.DEFAULT\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales

Source: C:\Windows\System32\msiexec.exe

File read: C:\Windows\win.ini

Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\gBYz86HSwI.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k NetworkService -p
Source: unknown	Process created: C:\Windows\System32\SgrmBroker.exe C:\Windows\system32\SgrmBroker.exe
Source: unknown	Process created: C:\Windows\System32\sppsvc.exe C:\Windows\system32\sppsvc.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k wsappx -p -s ClipSVC
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s wscsvc
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k LocalService -s W32Time
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /msiinstall /silentinstall /SETSECURITY
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /msiinstall /silentinstall /SETSECURITY
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray /config
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /start
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /start
Source: unknown	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe"
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe"
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Defender\MpCmdRun.exe "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /start	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /msiinstall /silentinstall /SETSECURITY	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Program Files\Windows Defender\MpCmdRun.exe "C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /msiinstall /silentinstall /SETSECURITY	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray /config	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /start	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe"	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srclient.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: dlnashext.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wpdshext.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: moshost.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mapsbtsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mosstorage.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ztrace_maps.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ztrace_maps.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mapconfiguration.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ztrace_maps.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: aphostservice.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: networkhelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userdataplatformhelperutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mccspal.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: syncutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: syncutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dmcfgutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dmcmnutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dmxmlhelputils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: inproclogger.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: synccontroller.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pimstore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: aphostclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: accountaccessor.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: systemeventsbrokerclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userdatalanguageutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mccsengineshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cemapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userdatatypehelperutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: phoneutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: storsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fltlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bcd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wer.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: storageusage.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: w32time.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vmictimeprovider.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dsound.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: security.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: avifil32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: dsound.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: security.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msxml6.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dsound.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: security.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dsound.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: security.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: avifil32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: dsound.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: security.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: avifil32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: dsound.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: security.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msxml6.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iccvid.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msrle32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvidc32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: tsbyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iccvid.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msrle32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvidc32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: tsbyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iccvid.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msrle32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvidc32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: tsbyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iccvid.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msrle32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvidc32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: tsbyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iccvid.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msrle32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvidc32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: tsbyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iccvid.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msrle32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvidc32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: tsbyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iccvid.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: iyuv_32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msrle32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msvidc32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: tsbyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: msyuv.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dsound.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: security.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: dsound.dll	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Section loaded: msvfw32.dll	Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: Start LM-Server.lnk.2.dr	LNK file: ..\..\..\..\..\..\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe
Source: Uninstall LiteManager - Server.lnk.2.dr	LNK file: ..\..\..\..\..\..\Windows\SysWOW64\msiexec.exe
Source: Stop LM-Server.lnk.2.dr	LNK file: ..\..\..\..\..\..\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe
Source: Settings for LM-Server.lnk.2.dr	LNK file: ..\..\..\..\..\..\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Source: C:\Windows\System32\msiexec.exe	Automated click: Next >
Source: C:\Windows\System32\msiexec.exe	Automated click: I accept the terms in the license agreement
Source: C:\Windows\System32\msiexec.exe	Automated click: Next >
Source: C:\Windows\System32\msiexec.exe	Automated click: Next >
Source: C:\Windows\System32\msiexec.exe	Automated click: Next >
Source: C:\Windows\System32\msiexec.exe	Automated click: Install

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: gBYz86HSwI.msi

Static file information: File size 11554816 > 1048576

Source: ROMViewer.exe.2.dr	Static PE information: section name: .didata
Source: ROMFUSClient.exe.2.dr	Static PE information: section name: .didata
Source: ROMwln.dll.2.dr	Static PE information: section name: .didata
Source: ROMServer.exe.2.dr	Static PE information: section name: .didata
Source: HookDrv.dll.2.dr	Static PE information: section name: .didata
Source: ROMServer.exe0.2.dr	Static PE information: section name: .didata

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Code function: 18_2_023FFC43 push eax; ret

18_2_023FFC45

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\config_server_B6BD2967C67B44649764F06ADFFD6458.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\stop_server_51B516B87C64408FA3C56354EA2277C2.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\LiteManager Pro - Server\files\ROMServer.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ARPPRODUCTICON.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\LiteManager Pro - Server\HookDrv.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\UNINST_Uninstall_L_78AA5B6662514D94A847D6C603AF0895.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\LiteManager Pro - Server\ROMwln.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\LiteManager Pro - Server\AledensoftIpcServer.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ROMServer.exe_9D09B2BC25A2414CBD848E2B75898676.exe	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\config_server_B6BD2967C67B44649764F06ADFFD6458.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\stop_server_51B516B87C64408FA3C56354EA2277C2.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ARPPRODUCTICON.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\UNINST_Uninstall_L_78AA5B6662514D94A847D6C603AF0895.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ROMServer.exe_9D09B2BC25A2414CBD848E2B75898676.exe	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe

File created: C:\Program Files (x86)\LiteManager Pro - Server\EULA.rtf

Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application\romserver.exe

Jump to behavior

Source: C:\Windows\System32\svchost.exe

Registry key value modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\W32Time\Config

Jump to behavior

Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Start LM-Server.lnk	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Uninstall LiteManager - Server.lnk	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Stop LM-Server.lnk	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Settings for LM-Server.lnk	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SYSTEM\LiteManager\v3.4\Server\Parameters NoIPSettings

Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Windows\System32\svchost.exe

System information queried: FirmwareTableInformation

Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened / queried: SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Window / User API: threadDelayed 467	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Window / User API: threadDelayed 3731	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Window / User API: threadDelayed 6103	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\config_server_B6BD2967C67B44649764F06ADFFD6458.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\stop_server_51B516B87C64408FA3C56354EA2277C2.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\LiteManager Pro - Server\files\ROMServer.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ARPPRODUCTICON.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\LiteManager Pro - Server\HookDrv.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\UNINST_Uninstall_L_78AA5B6662514D94A847D6C603AF0895.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\LiteManager Pro - Server\ROMwln.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\LiteManager Pro - Server\AledensoftIpcServer.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ROMServer.exe_9D09B2BC25A2414CBD848E2B75898676.exe	Jump to dropped file

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe TID: 8056	Thread sleep count: 467 > 30	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe TID: 4536	Thread sleep count: 39 > 30	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe TID: 5852	Thread sleep time: -1865500s >= -30000s	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe TID: 5852	Thread sleep time: -3051500s >= -30000s	Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	File Volume queried: C:\Windows\System32 FullSizeInformation	Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\SysWOW64\wininet.dll
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\SysWOW64\winspool.drv
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984\COMCTL32.dll
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\SysWOW64\
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	File opened: C:\Windows\SysWOW64\winmm.dll

Source: svchost.exe, 00000007.00000002.3728087921.0000023B62E64000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: #disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: svchost.exe, 00000007.00000002.3727725498.0000023B62E55000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: ROMServer.exe, 0000000E.00000002.1503059736.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\20
Source: ROMFUSClient.exe, 0000000D.00000002.1506153862.0000000000C38000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: svchost.exe, 00000007.00000002.3727141758.0000023B62E00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HvHostWdiSystemHostScDeviceEnumWiaRpctrkwksAudioEndpointBuilderhidservdot3svcUmRdpServiceDsSvcfhsvcvmickvpexchangevmicshutdownvmicguestinterfacevmicvmsessionsvsvcStorSvcWwanSvcvmicvssDevQueryBrokerNgcSvcsysmainNetmanTabletInputServicePcaSvcDisplayEnhancementServiceIPxlatCfgSvcDeviceAssociationServiceNcbServiceEmbeddedModeSensorServicewlansvcCscServiceWPDBusEnumMixedRealityOpenXRSvc
Source: ROMFUSClient.exe, 0000000D.00000002.1506153862.0000000000C38000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}Y
Source: ROMFUSClient.exe, 0000001E.00000002.2498627902.0000000000DE8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll+
Source: svchost.exe, 00000007.00000002.3728263272.0000023B62E87000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: ROMServer.exe, 0000000E.00000002.1503059736.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}neUs
Source: svchost.exe, 00000007.00000002.3728087921.0000023B62E64000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: (@SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000
Source: ROMFUSClient.exe, 00000014.00000002.3729271382.0000000000C68000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll]
Source: svchost.exe, 00000007.00000002.3728087921.0000023B62E64000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: #Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: ROMFUSClient.exe, 0000000F.00000002.3728649940.0000000000B78000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllB
Source: svchost.exe, 0000000A.00000002.3727919707.0000017B7F62B000.00000004.00000020.00020000.00000000.sdmp, ROMServer.exe, 0000000E.00000002.1503059736.0000000000F22000.00000004.00000020.00020000.00000000.sdmp, ROMServer.exe, 00000012.00000002.3729062541.0000000000DD8000.00000004.00000020.00020000.00000000.sdmp, ROMFUSClient.exe, 00000013.00000002.3729409124.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, ROMFUSClient.exe, 00000015.00000002.1573011481.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp, ROMFUSClient.exe, 00000016.00000002.1578665679.0000000000BD8000.00000004.00000020.00020000.00000000.sdmp, ROMFUSClient.exe, 00000017.00000002.1588187326.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, ROMFUSClient.exe, 00000018.00000002.1599930706.0000000000AC8000.00000004.00000020.00020000.00000000.sdmp, ROMFUSClient.exe, 0000001F.00000002.3009291670.0000000000B38000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\sppsvc.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\sppsvc.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\System32\sppsvc.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /start

Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /msiinstall /silentinstall /SETSECURITY	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray /config	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Process created: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe "C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /start	Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId	Jump to behavior
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId
Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C: VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C: VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C: VolumeInformation	Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Changes security center settings (notifications, updates, antivirus, firewall)

Source: C:\Windows\System32\svchost.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{D68DDC3A-831F-4fae-9E44-DA132C1ACF46} STATE

Jump to behavior

Source: svchost.exe, 00000009.00000002.3729475011.000001C68AB02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: gramFiles%\Windows Defender\MsMpeng.exe
Source: svchost.exe, 00000009.00000002.3729475011.000001C68AB02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\System32\svchost.exe	WMI Queries: IWbemServices::ExecNotificationQuery - ROOT\SecurityCenter : SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'AntiVirusProduct' OR TargetInstance ISA 'FirewallProduct' OR TargetInstance ISA 'AntiSpywareProduct'
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct
Source: C:\Program Files\Windows Defender\MpCmdRun.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\SecurityCenter2 : AntiVirusProduct

Remote Access Functionality

Enables remote desktop connection

Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Registry key created or modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server AllowRemoteRPC

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Windows Management Instrumentation	2 Windows Service	2 Windows Service	21 Masquerading	OS Credential Dumping	151 Security Software Discovery	1 Remote Desktop Protocol	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	11 Process Injection	1 Modify Registry	LSASS Memory	14 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	11 Disable or Modify Tools	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	14 Virtualization/Sandbox Evasion	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Process Injection	LSA Secrets	11 Peripheral Device Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	2 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	42 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 File Deletion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
gBYz86HSwI.msi	0%	ReversingLabs

Dropped Files

Source	Detection	Scanner
C:\Program Files (x86)\LiteManager Pro - Server\AledensoftIpcServer.dll	0%	ReversingLabs
C:\Program Files (x86)\LiteManager Pro - Server\HookDrv.dll	0%	ReversingLabs
C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	3%	ReversingLabs
C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe	3%	ReversingLabs
C:\Program Files (x86)\LiteManager Pro - Server\ROMwln.dll	0%	ReversingLabs
C:\Program Files (x86)\LiteManager Pro - Server\files\ROMServer.exe	3%	ReversingLabs
C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe	3%	ReversingLabs
C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ARPPRODUCTICON.exe	0%	ReversingLabs
C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ROMServer.exe_9D09B2BC25A2414CBD848E2B75898676.exe	0%	ReversingLabs
C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\UNINST_Uninstall_L_78AA5B6662514D94A847D6C603AF0895.exe	0%	ReversingLabs
C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\config_server_B6BD2967C67B44649764F06ADFFD6458.exe	0%	ReversingLabs
C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\stop_server_51B516B87C64408FA3C56354EA2277C2.exe	0%	ReversingLabs

Source	Detection	Scanner	Label
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://www.indyproject.org/	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#	0%	URL Reputation	safe
http://crl.thawte.com/ThawteTimestampingCA.crl0	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://ocsp.thawte.com0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s	0%	URL Reputation	safe
http://www.symauth.com/cps0(	0%	URL Reputation	safe
http://www.symauth.com/rpa00	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
time.windows.com	unknown	unknown	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://litemanager.ru/	ROMFUSClient.exe, 0000000D.00000000.1483802950.00000000008E4000.00000002.00000001.01000000.00000004.sdmp, ROMServer.exe, 0000000E.00000000.1493027307.00000000009FE000.00000002.00000001.01000000.00000005.sdmp, ROMServer.exe0.2.dr, Ukrainian.lg.2.dr, Russian.lg.2.dr	false		unknown
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	ROMServer.exe0.2.dr	false		unknown
https://litemanager.com/romversion.txt	ROMFUSClient.exe, 0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp, ROMServer.exe, 0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp, ROMServer.exe0.2.dr	false		unknown
http://ocsp.sectigo.com0	ROMServer.exe0.2.dr	false	URL Reputation: safe	unknown
https://dev.ditu.live.com/REST/v1/Routes/	svchost.exe, 00000003.00000002.1365656581.000001BB97268000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://litemanager.com/Y	ROMServer.exe, 0000000E.00000003.1500982103.0000000002C2C000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://dev.virtualearth.net/REST/v1/Routes/Driving	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx	svchost.exe, 00000003.00000003.1365186784.000001BB97243000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://litemanager.ru/noip.txtU	ROMServer.exe, 0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp, ROMServer.exe0.2.dr	false		unknown
https://dev.virtualearth.net/REST/v1/Routes/Walking	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.indyproject.org/	ROMFUSClient.exe, 0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp, ROMFUSClient.exe, 0000000D.00000003.1504394447.00000000028C7000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe, 0000000E.00000003.1500982103.0000000002B97000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe, 0000000E.00000000.1491178939.0000000000951000.00000020.00000001.01000000.00000005.sdmp, ROMFUSClient.exe, 0000000F.00000002.3729672765.00000000027B7000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000010.00000003.1573048277.0000000002877000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe, 00000011.00000003.1564243883.00000000029E7000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe, 00000012.00000002.3730666753.0000000001770000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000013.00000002.3730266458.00000000028D7000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000014.00000002.3730828904.0000000002707000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000015.00000003.1566667276.00000000026C7000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 00000016.00000003.1576067519.0000000002857000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 0000001E.00000003.2496712728.0000000002807000.00000004.00001000.00020000.00000000.sdmp, ROMFUSClient.exe, 0000001F.00000003.3007956255.0000000002837000.00000004.00001000.00020000.00000000.sdmp, ROMServer.exe0.2.dr	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#	ROMServer.exe0.2.dr	false	URL Reputation: safe	unknown
http://standards.iso.org/iso/19770/-2/2009/schema.xsd	svchost.exe, 00000008.00000002.3729409884.000001CE4ED18000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000008.00000002.3728537191.000001CE4E487000.00000004.00000020.00020000.00000000.sdmp, regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.8.dr	false		unknown
https://dev.ditu.live.com/mapcontrol/logging.ashx	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/	svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365051046.000001BB9726D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365672449.000001BB97270000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365173754.000001BB9725A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365186784.000001BB97243000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=	svchost.exe, 00000003.00000002.1365559285.000001BB9722B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	ROMServer.exe0.2.dr	false		unknown
https://litemanager.com/soft/pro/ROMServer.zip	ROMFUSClient.exe, 0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp, ROMServer.exe, 0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp, ROMServer.exe0.2.dr	false		unknown
http://litemanager.com/03	ROMServer.exe, 00000012.00000002.3730666753.000000000180C000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://dev.virtualearth.net/REST/v1/Transit/Schedules/	svchost.exe, 00000003.00000002.1365587205.000001BB97241000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	false	URL Reputation: safe	unknown
http://litemanager.com/	6a346b.rbs.2.dr, ROMServer.exe0.2.dr	false		unknown
http://litemanager.com/03z	ROMFUSClient.exe, 00000014.00000002.3730828904.00000000027A3000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.bingmapsportal.com	svchost.exe, 00000003.00000002.1365525224.000001BB97213000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dev.virtualearth.net/REST/v1/Imagery/Copyright/	svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365559285.000001BB9722B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365173754.000001BB9725A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/	svchost.exe, 00000003.00000003.1365068071.000001BB97267000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365656581.000001BB97268000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365559285.000001BB9722B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	ROMServer.exe0.2.dr	false		unknown
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sectigo.com/CPS0	ROMServer.exe0.2.dr	false	URL Reputation: safe	unknown
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=	svchost.exe, 00000003.00000003.1365142382.000001BB9725D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://litemanager.ru/forum/ru/memberlist.php?mode=viewprofile&u=977.	Ukrainian.lg.2.dr	false		unknown
https://dev.ditu.live.com/REST/v1/Transit/Stops/	svchost.exe, 00000003.00000003.1365051046.000001BB9726D000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365672449.000001BB97270000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.thawte.com0	gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/v1/Routes/	svchost.exe, 00000003.00000003.1365068071.000001BB97267000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365656581.000001BB97268000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365559285.000001BB9722B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dev.virtualearth.net/REST/v1/Traffic/Incidents/	svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=	svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dynamic.api.tiles.ditu.live.com/odvs/gri?pv=1&r=	svchost.exe, 00000003.00000003.1365186784.000001BB97243000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365129594.000001BB9725E000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?	svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365186784.000001BB97243000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s	ROMServer.exe0.2.dr	false	URL Reputation: safe	unknown
http://www.LiteManagerTeam.com	6a346b.rbs.2.dr	false		unknown
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=	svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ecn.dev.virtualearth.net/REST/V1/MapControlConfiguration/native/	svchost.exe, 00000003.00000003.1365020122.000001BB97234000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.symauth.com/cps0(	gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/v1/Locations	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dev.ditu.live.com/REST/V1/MapControlConfiguration/native/	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dev.virtualearth.net/mapcontrol/logging.ashx	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://litemanager.com/QK	ROMServer.exe, 0000000E.00000003.1500982103.0000000002C33000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=	svchost.exe, 00000003.00000002.1365587205.000001BB97241000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dynamic.t	svchost.exe, 00000003.00000002.1365598972.000001BB97244000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.symauth.com/rpa00	gBYz86HSwI.msi, 6a346c.msi.2.dr, 6a346a.msi.2.dr	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	ROMServer.exe0.2.dr	false		unknown
https://dev.virtualearth.net/REST/v1/Routes/Transit	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://tiles.virtualearth.net/tiles/cmd/StreetSideBubbleMetaData?north=	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=	svchost.exe, 00000003.00000002.1365643010.000001BB97263000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365081087.000001BB97262000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dev.ditu.live.com/REST/v1/Locations	svchost.exe, 00000003.00000002.1365611234.000001BB97258000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000003.00000003.1365201619.000001BB97257000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=	svchost.exe, 00000003.00000003.1365020122.000001BB97234000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
111.90.140.76	unknown	Malaysia		45839	SHINJIRU-MY-AS-APShinjiruTechnologySdnBhdMY	true
65.21.245.7	unknown	United States		199592	CP-ASDE	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544717
Start date and time:	2024-10-29 16:44:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	33
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	gBYz86HSwI.msi renamed because original name is a hash value
Original Sample Name:	a1faae4e2b695c7df3846179192f4e67bd8dd05e7e5c6d0b4b72db175f629076(1).msi
Detection:	MAL
Classification:	mal45.troj.evad.winMSI@39/43@1/2
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .msi Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe
Excluded IPs from analysis (whitelisted): 20.101.57.9
Excluded domains from analysis (whitelisted): www.bing.com, otelrules.azureedge.net, slscr.update.microsoft.com, twc.trafficmanager.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target ROMServer.exe, PID 8052 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: gBYz86HSwI.msi

Simulations

Behavior and APIs

Time	Type	Description
13:39:11	API Interceptor	31x Sleep call for process: ROMServer.exe modified
13:39:14	API Interceptor	876039x Sleep call for process: ROMFUSClient.exe modified
13:39:50	API Interceptor	1x Sleep call for process: MpCmdRun.exe modified
16:45:02	Task Scheduler	Run new task: {6F8CCE05-16E3-4521-8744-5551E401F8A4} path:

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
111.90.140.76	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
65.21.245.7	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	044f.pdf.scr	Get hash	malicious	RMSRemoteAdmin	Browse
	3e#U043c.scr	Get hash	malicious	RMSRemoteAdmin	Browse
	3e#U043c.scr	Get hash	malicious	RMSRemoteAdmin	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SHINJIRU-MY-AS-APShinjiruTechnologySdnBhdMY	0438.pdf.exe	Get hash	malicious	Unknown	Browse	111.90.140.76
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	111.90.140.76
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	111.90.140.76
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	111.90.140.76
	b.cmd	Get hash	malicious	Unknown	Browse	101.99.92.203
	rrwzOU7A9F.exe	Get hash	malicious	XWorm	Browse	101.99.92.203
	3xlcP3DFLm.exe	Get hash	malicious	XWorm	Browse	101.99.92.203
	JruZmEO5Dm.exe	Get hash	malicious	XWorm	Browse	101.99.92.203
	zVlbADkNqu.exe	Get hash	malicious	XWorm	Browse	101.99.92.203
	vqUuq8t2Uc.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	101.99.92.203
CP-ASDE	SALARY OF OCT 2024.exe	Get hash	malicious	FormBook	Browse	65.21.196.90
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	65.21.245.7
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	65.21.245.7
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	65.21.245.7
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	65.21.245.7
	iQPxJrxxaj.exe	Get hash	malicious	PikaBot	Browse	65.20.66.218
	iQPxJrxxaj.exe	Get hash	malicious	PikaBot	Browse	65.20.66.218
	http://www.thegioimoicau.com/	Get hash	malicious	Unknown	Browse	65.21.45.74
	Bill Of Lading_MEDUVB935991.pdf.exe	Get hash	malicious	FormBook	Browse	65.21.196.90
	arm.elf	Get hash	malicious	Unknown	Browse	65.21.50.224

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Program Files (x86)\LiteManager Pro - Server\HookDrv.dll	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
C:\Program Files (x86)\LiteManager Pro - Server\AledensoftIpcServer.dll	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Config.Msi\6a346b.rbs

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	modified
Size (bytes):	25196
Entropy (8bit):	5.1371282802771345
Encrypted:	false
SSDEEP:	384:ei75t8t+CqZ+oNbynfBytjj3IEgggVOVh:ei1t8t+CqZ+oNbynfEtIEnOMh
MD5:	AF52D9EA55B4B5A5696D322D385B1576
SHA1:	78EBE0071203D2F65641F262E2DEFFB7D73341C8
SHA-256:	9C06833D58F78FD0A92424862BD88581E160B8D308004B73285D687AAEEEE749
SHA-512:	36C97B9A1B4EB23B18480EAF024E8055485BB2EC6F61C10DCBBC86A8A3B147049BC017A7BA9CFD4897834DEE114B623D6EA4674CC2DF1C238EDD26D6BC5DD5C1
Malicious:	false
Preview:	...@IXOS.@.....@.]]Y.@.....@.....@.....@.....@.....@......&.{71FFA475-24D5-44FB-A51F-39B699E3D82C}..LiteManager Pro - Server..gBYz86HSwI.msi.@.....@.....@.....@......ARPPRODUCTICON.exe..&.{9EF586E9-112B-4AAE-B439-5B62B7A0B1DE}.....@.....@.....@.....@.......@.....@.....@.......@......LiteManager Pro - Server......Rollback..Rolling back action:..[1]..RollbackCleanup..Removing backup files..File: [1]....ProcessComponents..Updating component registration..&.{3244CDE6-6414-4399-B0D5-424562747210}&.{71FFA475-24D5-44FB-A51F-39B699E3D82C}.@......&.{4D4D18AA-F74D-4291-B5A9-93C3CC48B75F}&.{71FFA475-24D5-44FB-A51F-39B699E3D82C}.@......&.{641F154A-FEEF-4FA7-B5BF-414DB1DB8390}&.{71FFA475-24D5-44FB-A51F-39B699E3D82C}.@......&.{26EAB54E-4659-47E8-86F9-4CB74F7E03BE}&.{71FFA475-24D5-44FB-A51F-39B699E3D82C}.@......&.{596F4636-5D51-49F5-B3B4-F3C366E9DC23}&.{71FFA475-24D5-44FB-A51F-39B699E3D82C}.@......&.{596F4636-5D51-49F5-B3B4-F3C366E9DC23}&.{00000000-0000-0000-0000-000000000000}.@......&.{A3DC5A2F-2249

C:\Program Files (x86)\LiteManager Pro - Server\AledensoftIpcServer.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	132032
Entropy (8bit):	6.10195829980833
Encrypted:	false
SSDEEP:	3072:sh/1J7RYdzZU4Z5tegH1q888888888888W888888888882zgP:sh/jIZPZ5tJ8888888888888W888888s
MD5:	C40455A478E0B76521130D9DAAAADC4B
SHA1:	42DE923D5E36A9F56B002DD66DB245BC44480089
SHA-256:	308085BC357BF3A3BEE0D662FCC01628E9EE2FFD478AE0F1E7140939AD99B892
SHA-512:	76ED6D763F603BCAA7FE186C0A7449E614DCDB18036F7587C6E5A11C3F3269E400E3D2062856CC280AC20C094617924783B6C360F25AF66767DCC53C2F3045C9
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 0438.pdf.exe, Detection: malicious, Browse Filename: 0438.pdf.exe, Detection: malicious, Browse Filename: 0438.pdf.exe, Detection: malicious, Browse
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....xK............................p........ ..........................................................................\.......\...............................x#...................................................................................text...$........................... ..`.itext.............................. ..`.data...0.... ......................@....bss....xN...@...........................idata..\...........................@....edata..\............&..............@..@.reloc..x#.......$...(..............@..B.rsrc................L..............@..@....................................@..@........................................................................................................................................

C:\Program Files (x86)\LiteManager Pro - Server\EULA.rtf

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Rich Text Format data, version 1, ANSI, code page 1251, default language ID 1049
Category:	dropped
Size (bytes):	58679
Entropy (8bit):	4.738446173390891
Encrypted:	false
SSDEEP:	768:bkJC7UF9eVWSlBY8Aq9CBGDtD8gX1ZDCZjewbAsCw1vPDQuJPQzusxxeCNHnPPsT:htwqueMZYU
MD5:	BAED4E7AF33F77350D454B69317EE63B
SHA1:	2B598774F0C73850A36117F29EA8DAC57BE1C138
SHA-256:	671D65183C39E53FC1759C45B105A0FBE2D3A216E4099B66D5FCF274EA625E07
SHA-512:	E740997BDECB8F907A000D01BF3E823898A1289D1DBFAE5BF342D4BCB6FF09D258317955F4FD858FF6B239E5BA08E49E90CDEC06E24DABDB18C1CF2D8943590C
Malicious:	false
Preview:	{\rtf1\ansi\ansicpg1251\uc1\deff0\stshfdbch0\stshfloch37\stshfhich37\stshfbi37\deflang1049\deflangfe1049{\fonttbl{\f0\froman\fcharset204\fprq2{\\panose 02020603050405020304}Times New Roman{\\falt Times New Roman};}..{\f1\fswiss\fcharset204\fprq2{\\panose 020b0604020202020204}Arial;}{\f2\fmodern\fcharset204\fprq1{\\panose 02070309020205020404}Courier New;}{\f3\froman\fcharset2\fprq2{\\panose 05050102010706020507}Symbol;}..{\f10\fnil\fcharset2\fprq2{\\panose 05000000000000000000}Wingdings;}{\f37\fswiss\fcharset204\fprq2{\\panose 020f0502020204030204}Calibri;}{\f211\froman\fcharset0\fprq2 Times New Roman{\\falt Times New Roman};}..{\f209\froman\fcharset238\fprq2 Times New Roman CE{\\falt Times New Roman};}{\f212\froman\fcharset161\fprq2 Times New Roman Greek{\\falt Times New Roman};}{\f213\froman\fcharset162\fprq2 Times New Roman Tur{\\falt Times New Roman};}..{\f214\froman\fcharset177\fprq2 Times New Roman (Hebrew){\\falt Times New Roman};}{\f215\froman\fcharset178\fprq2 Time

C:\Program Files (x86)\LiteManager Pro - Server\English.lg

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	89220
Entropy (8bit):	3.469297258214741
Encrypted:	false
SSDEEP:	768:YvozCzKUNNfMnuQhgdXT0Z2BPshK+4aCWpQJ3OEInKDcbztlXnpQbbMv3PI:Yvoz4TXTI2pQCWOJvgXnpQbS3PI
MD5:	B1C96EF24061BF294CAC6C4C9CBF7757
SHA1:	5D1B1934091E257B5F1C69B13F5FC1E424348584
SHA-256:	20DB884523DA62C20F80B8A3BB71E11091B90A443B83C06D8FE2A1BBC00C1C33
SHA-512:	6E90562FD804F91DDADEF2310551063D34B859FF1CC6E58A41667E9CDA062DCA851C8455882EF47CF3E1A8EC21EBD9F0761F15E54174CC4A95427238CB39BA14
Malicious:	false
Preview:	..[._.s.y.s.t.e.m.].....l.a.n.g.u.a.g.e._.i.d.=.1.0.3.3.........[._.m.e.s.s.a.g.e.s.].....w.e.b._.s.i.t.e. .=. .h.t.t.p.:././.l.i.t.e.m.a.n.a.g.e.r...c.o.m./.....q.u.e.s.t.i.o.n. .=. .Q.u.e.s.t.i.o.n.....e.r.r.o.r. .=. .E.r.r.o.r.....i.n.f.o.r.m.a.t.i.o.n. .=. .I.n.f.o.r.m.a.t.i.o.n.....n.o.t.i.f.i.c.a.t.i.o.n. .=. .N.o.t.i.f.i.c.a.t.i.o.n.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.r.e.a.d._.c.o.n.f.i.g.u.r.a.t.i.o.n. .=. .C.a.n. .n.o.t. .r.e.a.d. .s.e.r.v.i.c.e. .c.o.n.f.i.g.u.r.a.t.i.o.n...\.n.;.R.e.i.n.s.t.a.l.l. .L.i.t.e.M.a.n.a.g.e.r. .s.e.r.v.i.c.e.?.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e. .=. .C.a.n. .n.o.t. .s.e.t. .L.i.t.e.M.a.n.a.g.e.r. .S.e.r.v.e.r. .s.e.r.v.i.c.e. .s.t.a.r.t.u.p. .m.o.d.e.......f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e._.r.e.s.t.a.r.t. .=. .C.a.n. .n.o.t. .s.e.t. .L.i.t.e.M.a.n.a.g.e.r. .S.e.r.v.e.r. .s.e.r.v.i.c.e. .s.t.a.r.t.u.p. .m.o.d.e...\.n.;.R.e.b.o.o.t. .s.y.s.t.e.m.,. .p.l.e.a.s.e.......

C:\Program Files (x86)\LiteManager Pro - Server\HookDrv.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	201728
Entropy (8bit):	6.3607488106285075
Encrypted:	false
SSDEEP:	3072:rmqdVRkbN1G3OKtVLqKc3IuQquARCASmShKJ:rmyTmNw3zqKcFLRs
MD5:	1D4F8CFC7BBF374CCC3AAE6045B2133D
SHA1:	802EDF0B0ED1D0305BCD6688EE3301366FEC1337
SHA-256:	C04885562F17BAEEFBCD2D4FC29F054EB8A66C44BD015750498C69A912D94C1F
SHA-512:	68643A30FEA87B2B61AF546F42BF32A25459152C1BCCE5A8A881714139CE828DFE4237874FF1E9CC3B78D6CDBEF7DD45C9F3459C3337D83693C704C274AFFF3E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 0438.pdf.exe, Detection: malicious, Browse Filename: 0438.pdf.exe, Detection: malicious, Browse Filename: 0438.pdf.exe, Detection: malicious, Browse
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L...\|..[.................\...........v............@.................................................................. ...................@...................@...G..................................................$................................text....S.......T.................. ..`.itext..D....p.......X.............. ..`.data...<............`..............@....bss....<Y...............................idata...............z..............@....didata.............................@....edata....... ......................@..@.rdata..E....0......................@..@.reloc...G...@...H..................@..B.rsrc....@.......@..................@..@....................................@..@........................................................

C:\Program Files (x86)\LiteManager Pro - Server\Lang\Taiwan.lg

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	61034
Entropy (8bit):	4.429529654892776
Encrypted:	false
SSDEEP:	768:nebbtdP4XFsh6HWiIZTYp7JtMLG54ttg2kGPyWtvQTznCKDMlV2f:ne3KOhTTocL8HnMlV2f
MD5:	7303B5AE0B8911CEB238DC01419695BE
SHA1:	22B89BDB8FAEC62BA3E66639E38E6271B593944A
SHA-256:	88155FB3F0E198AA4A24F9CFECBB83C5A4E081C6EA362BC50294410CB2FB5C50
SHA-512:	8AE802616AF60BAF214E254F6A55D312DC46B6E3F8BEE5F50E30E372FF38103776278B5FB07A562C2149EEA58107CB427A03B1629F72044AB69D3507E5DFAB15
Malicious:	false
Preview:	[._.s.y.s.t.e.m.].....l.a.n.g.u.a.g.e._.i.d.=.1.0.2.8.........[._.m.e.s.s.a.g.e.s.].....w.e.b._.s.i.t.e. .=. .h.t.t.p.:././.l.i.t.e.m.a.n.a.g.e.r...c.o.m./.....q.u.e.s.t.i.o.n. .=. .OUL.....e.r.r.o.r. .=. ./.......i.n.f.o.r.m.a.t.i.o.n. .=. ........n.o.t.i.f.i.c.a.t.i.o.n. .=. ....w....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.r.e.a.d._.c.o.n.f.i.g.u.r.a.t.i.o.n. .=. .!q.l...S.g.RD}Ka.0\.n.;...e.[. .L.i.t.e.M.a.n.a.g.e.r. ..g.R?.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e. .=. .!q.l-..[ .L.i.t.e.M.a.n.a.g.e.r. .:O.ghV.g.R_U.R!j._.0....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e._.r.e.s.t.a.r.t. .=. .!q.l-..[ .L.i.t.e.M.a.n.a.g.e.r. .:O.ghV.g.R_U.R!j._.0\.n.;....e.._j.\|q}.0....f.m._.s.e.t.t.i.n.g.s._.r.e.s.t.a.r.t._.s.e.r.v.i.c.e._.t.o._.a.p.p.l.y. .=. ....e_U.R .L.M. .:O.ghV.a(u.z._.NWY(u...f.0....f.m._.s.e.c.u.r.i.t.y._.f.o.r.c.e._.g.u.e.s.t. .=. .7_6R.O.(Wdk.\|q}.N-..[.....asTW.@b.g.}..O(u.....S.g.O.X[.S.kP..0 .!q.l.O(u.07_

C:\Program Files (x86)\LiteManager Pro - Server\Lang\Turkish.lg

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	58794
Entropy (8bit):	3.642324420313977
Encrypted:	false
SSDEEP:	768:D+XPobz4qFlRiiXc0HwgHSSxnrKT7nke7GShFBy/x97fuTLY57aC7I/Fj:yPQMw1ZOT7kef1y/X7fuTq4j
MD5:	606DC375E898D7221CCB7CEB8F7C686B
SHA1:	26DCF93876C89283623B8150C1B79EDB24B6A7EC
SHA-256:	F442E440580EA35040E35BF1D85A118E7C182FDE0B9BA2A3C1816DEAB5F822BB
SHA-512:	9FBC42165B51A2020D2DA2FFE33287A4F3AA33639126813B290D329D47C4F4DA8F297A47AF3C1F63AF6F9E1BA47ACE840BC1660D603E17589E5DB6DDA0E1E5B1
Malicious:	false
Preview:	..[._.s.y.s.t.e.m.].....l.a.n.g.u.a.g.e._.i.d.=.1.0.5.5.........[._.m.e.s.s.a.g.e.s.].....w.e.b._.s.i.t.e. .=. .h.t.t.p.:././.l.i.t.e.m.a.n.a.g.e.r...c.o.m./.....q.u.e.s.t.i.o.n. .=. .S.o.r.u.....e.r.r.o.r. .=. .H.a.t.a.....i.n.f.o.r.m.a.t.i.o.n. .=. .B.i.l.g.i.....n.o.t.i.f.i.c.a.t.i.o.n. .=. .B.i.l.d.i.r.i.m.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.r.e.a.d._.c.o.n.f.i.g.u.r.a.t.i.o.n. .=. .H.i.z.m.e.t. .y.a.p.1.l.a.n.d.1.r.m.a.s.1. .o.k.u.n.a.m.1.y.o.r...\.n.;.L.i.t.e.M.a.n.a.g.e.r. .h.i.z.m.e.t.i.n.i. .y.e.n.i.d.e.n. .y...k.l.e.m.e.k. .m.i. .i.s.t.i.y.o.r.s.u.n.u.z.?.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e. .=. .L.i.t.e.M.a.n.a.g.e.r. .h.i.z.m.e.t. .b.a._.l.a.n.g.1... .m.o.d.u.n.u. .a.y.a.r.l.a.y.a.m.1.y.o.r.......f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e._.r.e.s.t.a.r.t. .=. .L.i.t.e.M.a.n.a.g.e.r. .h.i.z.m.e.t. .b.a._.l.a.n.g.1... .m.o.d.u.n.u. .a.y.a.r.l.a.y.a.m.1.y.o.r...\.n.;.S.i.s.t.e.m.i. .y.e.n.i.d.e.n. .b.a._.l.

C:\Program Files (x86)\LiteManager Pro - Server\Lang\Ukrainian.lg

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (305), with CRLF line terminators
Category:	dropped
Size (bytes):	87912
Entropy (8bit):	4.303374267443204
Encrypted:	false
SSDEEP:	768:VUlHxa/yEOYEJNHWjlUu1pZ26ER2nkUTbfk74Q:aNxWREb4lUu1P29R2JbfC4Q
MD5:	3FC082E8F516EAD9FC26AC01E737F9EF
SHA1:	3B67EBCE4400DDCF6B228E5668F3008561FB8F21
SHA-256:	3DC0CEAE11F445B57B17B7C35A90B5133E313CF6B61550AB418252C5B8089C99
SHA-512:	9A9D20AF2F8C27056F58AB5A9C687F5124CE5F6D563E396C9558331FB8BE48E88E148B1FDC548A5EBDEDB451E3D89F2F96856F3BBFD695691D5687599F376421
Malicious:	false
Preview:	..[._.s.y.s.t.e.m.].....l.a.n.g.u.a.g.e._.i.d. .=. .1.0.5.8.........[._.m.e.s.s.a.g.e.s.].....w.e.b._.s.i.t.e. .=. .h.t.t.p.:././.l.i.t.e.m.a.n.a.g.e.r...r.u./.....q.u.e.s.t.i.o.n. .=. ...8.B.0.=.=.O.....e.r.r.o.r. .=. ...>.<.8.;.:.0.....i.n.f.o.r.m.a.t.i.o.n. .=. ...=.D.>.@.<.0.F.V.O.....n.o.t.i.f.i.c.a.t.i.o.n. .=. ...>.2.V.4.>.<.;.5.=.=.O.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.r.e.a.d._.c.o.n.f.i.g.u.r.a.t.i.o.n. .=. ...5.<.>.6.;.8.2.>. .?.@.>.G.8.B.0.B.8. .:.>.=.D.V.3.C.@.0.F.V.N. .A.;.C.6.1.8...\.n.;...5.@.5.2.A.B.0.=.>.2.8.B.8. .L.i.t.e.M.a.n.a.g.e.r. .S.e.r.v.e.r.?.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e. .=. ...5.<.>.6.;.8.2.>. .2.A.B.0.=.>.2.8.B.8. .@.5.6.8.<. .7.0.?.C.A.:.C. .A.;.C.6.1.8. .L.i.t.e.M.a.n.a.g.e.r. .S.e.r.v.e.r.......f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e._.r.e.s.t.a.r.t. .=. ...5.<.>.6.;.8.2.>. .2.A.B.0.=.>.2.8.B.8. .@.5.6.8.<. .7.0.?.C.A.:.C. .A.;.C.6.1.8. .L.i.t.e.M.a.n.a.g.e.r. .S.e.r.v.e.r.

C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	6307408
Entropy (8bit):	6.5944937257467116
Encrypted:	false
SSDEEP:	98304:NwiA/GmKEt3LQ7V8z3uHWkd49GMdqOxaB:NOGmKEt31kd2dqwaB
MD5:	63D0964168B927D00064AA684E79A300
SHA1:	B4B9B0E3D92E8A3CBE0A95221B5512DED14EFB64
SHA-256:	33D1A34FEC88CE59BEB756F5A274FF451CAF171A755AAE12B047E678929E8023
SHA-512:	894D8A25E9DB3165E0DAAE521F36BBD6F9575D4F46A2597D13DEC8612705634EFEA636A3C4165BA1F7CA3CDC4DC7D4542D0EA9987DE10D2BC5A6ED9D6E05AECB
Malicious:	false
Yara Hits:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Joe Sandbox View:	Filename: 0438.pdf.exe, Detection: malicious, Browse Filename: 0438.pdf.exe, Detection: malicious, Browse Filename: 0438.pdf.exe, Detection: malicious, Browse
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......f..................C..F........C.......C...@.......................... i.......`..........@................... N.......M..A...@T...............`.P"...PN.<............................@N.......................M.......N......................text.....C.......C................. ..`.itext...0....C..2....C............. ..`.data... 3....C..4....C.............@....bss........0E..........................idata...A....M..B....E.............@....didata.......N......LE.............@....edata....... N......ZE.............@..@.tls....X....0N..........................rdata..]....@N......\E.............@..@.reloc..<....PN......^E.............@..B.rsrc........@T......DK.............@..@............. i.......`.............@..@................

C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	7753808
Entropy (8bit):	6.615075046955521
Encrypted:	false
SSDEEP:	98304:D4/WZQ7lc63BJGS1VFeIEll251o7+YcMBk2VVyN/RTfCAFIqOx9N:DXQ7SIEXeMBk2V4N/Nq2Iqw9N
MD5:	F3D74B072B9697CF64B0B8445FDC8128
SHA1:	8408DA5AF9F257D12A8B8C93914614E9E725F54C
SHA-256:	70186F0710D1402371CE2E6194B03D8A153443CEA5DDB9FC57E7433CCE96AE02
SHA-512:	004054EF8CDB9E2FEFC3B7783574BFF57D6D5BF9A4624AD88CB7ECCAE29D4DFD2240A0DC60A14480E6722657132082332A3EC3A7C49D37437644A31E59F551AF
Malicious:	true
Yara Hits:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L...w#.f.................ZU... ......qU.......U...@.......................... ........v..........@...................._......`_..K....g.. ............v.P"...._.4............................._..................... m_.\|....._......................text....&U......(U................. ..`.itext..$1...@U..2...,U............. ..`.data....@....U..B...^U.............@....bss....0.....V..........................idata...K...`_..L....V.............@....didata......._.......V.............@....edata........_.......V.............@..@.tls....`....._..........................rdata..]....._.......V.............@..@.reloc..4....._.......V.............@..B.rsrc.... ....g.. ....^.............@..@............. ........v.............@..@................

C:\Program Files (x86)\LiteManager Pro - Server\ROMwln.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	999944
Entropy (8bit):	6.626732213066839
Encrypted:	false
SSDEEP:	12288:SA9+TVJdg0YMgqAahyv0jKdTq4lrBhqSq/rt8VwGFrt:SRho0lgqA6yvnrBhq/rQDt
MD5:	ED32E23322D816C3FE2FC3D05972689E
SHA1:	5EEA702C9F2AC0A1AADAE25B09E7983DA8C82344
SHA-256:	7F33398B98E225F56CD287060BEFF6773ABB92404AFC21436B0A20124919FE05
SHA-512:	E505265DD9D88B3199EB0D4B7D8B81B2F4577FABD4271B3C286366F3C1A58479B4DC40CCB8F0045C7CD08FD8BF198029345EEF9D2D2407306B73E5957AD59EDF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L...`.-\.................J...........X.......`....@.................................................................. ...................@...........0.......@.. O...................................................................................text...0?.......@.................. ..`.itext..8....P.......D.............. ..`.data....:...`...<...N..............@....bss.....]...............................idata..............................@....didata.............................@....edata....... ......................@..@.rdata..E....0......................@..@.reloc.. O...@...P..................@..B.rsrc....@.......@..................@..@.....................0..............@..@........................................................

C:\Program Files (x86)\LiteManager Pro - Server\Russian.lg

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	94772
Entropy (8bit):	4.284840986247552
Encrypted:	false
SSDEEP:	768:r1kyTyZFOTb6QeZGJXYbFAMrKARuZk7FRwZoFTa2n:rn+2iZGhYbK4KARpAoFTa2n
MD5:	0E204FABE68B4B65ED5E0834651FB732
SHA1:	B338A6E54AA18F3F8A573580520F16C74A51F3D2
SHA-256:	302373D81F0AE15589206420CB01A266804C9FD1C1FF0D6E09CE6BA3FEF92B64
SHA-512:	AAD76F6A76DC693D959389CE471BC585D0DA72737FED99F42F219FDC7C71617C00E8003A467092E12820A359D672C6FB80D99772F3F6433923B2ABB7EEA40F08
Malicious:	false
Preview:	..[._.s.y.s.t.e.m.].....l.a.n.g.u.a.g.e._.i.d.=.1.0.4.9.........[._.m.e.s.s.a.g.e.s.].....w.e.b._.s.i.t.e. .=. .h.t.t.p.:././.l.i.t.e.m.a.n.a.g.e.r...r.u./.....q.u.e.s.t.i.o.n. .=. ...>.?.@.>.A.....e.r.r.o.r. .=. ...H.8.1.:.0.....i.n.f.o.r.m.a.t.i.o.n. .=. ...=.D.>.@.<.0.F.8.O.....n.o.t.i.f.i.c.a.t.i.o.n. .=. ...?.>.2.5.I.5.=.8.5.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.r.e.a.d._.c.o.n.f.i.g.u.r.a.t.i.o.n. .=. ...5.2.>.7.<.>.6.=.>. .?.@.>.G.8.B.0.B.L. .:.>.=.D.8.3.C.@.0.F.8.N. .A.;.C.6.1.K...\.n.;...5.@.5.C.A.B.0.=.>.2.8.B.L. .L.i.t.e.M.a.n.a.g.e.r. .S.e.r.v.e.r.?.....f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e. .=. ...5.2.>.7.<.>.6.=.>. .C.A.B.0.=.>.2.8.B.L. .@.5.6.8.<. .7.0.?.C.A.:.0. .A.;.C.6.1.K. .L.i.t.e.M.a.n.a.g.e.r. .S.e.r.v.e.r.......f.m._.s.e.t.t.i.n.g.s._.u.n.a.b.l.e._.s.e.t._.s.t.a.r.t.u.p._.m.o.d.e._.r.e.s.t.a.r.t. .=. ...5.2.>.7.<.>.6.=.>. .C.A.B.0.=.>.2.8.B.L. .@.5.6.8.<. .7.0.?.C.A.:.0. .A.;.C.6.1.K. .L.i.t.e.M.a.n.a.g.e.r. .S.e.r.v.e.r...\.n.

C:\Program Files (x86)\LiteManager Pro - Server\files\ROMServer.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	7752272
Entropy (8bit):	6.615186281886958
Encrypted:	false
SSDEEP:	98304:y4/WZQ7lc63BJGS1VFeIEll251o7+YcMBk2VVyN/RTfCEFIqOxJn:yXQ7SIEXeMBk2V4N/NqiIqwJn
MD5:	84FB34E529BEDE393A3F604EAA8137B2
SHA1:	195EA03B7BD086454A13C0D8357E0A9E447D9EC9
SHA-256:	1E396C4066AC8F421A54893442A0D76C4F8D4146E63825D67DFC0DA782E73EE5
SHA-512:	A48A80D62E588667B4C891CDED279BABFFA5FB4FDF092F345212F81D29A9ACAA06E6DB27B49DC601909409A3C82AA9272BCDF90D0AE1738E83E80D9FCA4D93E6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......f.................ZU... ......qU.......U...@.......................... ........v..........@...................._......`_..K....g..............(v.P"...._.4............................._..................... m_.\|....._......................text....&U......(U................. ..`.itext..$1...@U..2...,U............. ..`.data....@....U..B...^U.............@....bss....0.....V..........................idata...K...`_..L....V.............@....didata......._.......V.............@....edata........_.......V.............@..@.tls....`....._..........................rdata..]....._.......V.............@..@.reloc..4....._.......V.............@..B.rsrc.........g.......^.............@..@............. .......(v.............@..@................

C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	11361360
Entropy (8bit):	6.496049600782297
Encrypted:	false
SSDEEP:	98304:AshiRp5hPI7N9sSA5wbZXJOu/0uOXZYfmQYanSjS+cWuNOlQpgfYLyPsd+QgBBP5:Al5hPwgvyAjDjS+igfgym+bHJxmK
MD5:	B0E355EC3453C8FFAEE08CD4257E96F2
SHA1:	0FA023CA8F1C1ECDADDE3DD3BD551870C2D965E2
SHA-256:	60248BA026064B116E4F94020DABB74DF519F5B4C41379CA19A38D725692CA8E
SHA-512:	B6004F83FD78EED84BF21611EFA45F2FFADF3625E0A2FDCDAE531B4734A4B886EBFE5EBE990DA42302B7368282D83DFFEF19E71DA8EC4C155EE5C8619AD028DD
Malicious:	false
Yara Hits:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......f..................v..67.......v...... v...@..........................0...................@...................p...........L...p....+..........:..P"...................................................................`.......................text.....u.......u................. ..`.itext...6....u..8....u............. ..`.data....R... v..T....v.............@....bss.........w..........................idata...L.......N...Xw.............@....didata......`........w.............@....edata.......p........w.............@..@.tls....`................................rdata..].............w.............@..@.reloc................w.............@..B.rsrc.....+..p....+.................@..@.............0.......:..............@..@................

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Settings for LM-Server.lnk

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Thu Aug 22 17:41:10 2024, mtime=Tue Oct 29 16:39:09 2024, atime=Thu Aug 22 17:41:10 2024, length=7753808, window=hide
Category:	dropped
Size (bytes):	2167
Entropy (8bit):	3.9205268293697877
Encrypted:	false
SSDEEP:	48:8/2DMdOkcWqZd5Y+d5YsP5qoZkmrSUp8JWqoZkmtVJCJh:8/NcO9O5qoZbcJWqoZbt
MD5:	41C057FDEDC87B8F222F9AC3DA71CB9B
SHA1:	1829880FBDA0698F9EC434B3AC0883BCBA1D4AD4
SHA-256:	1E71D566BE0B09A4D78CE5EAD848DC8536B866BD5223F30AA53F8FA7AA34F520
SHA-512:	8BF8A070EF948840205AA49F2604387BA221F3DEAB9D9C9DED6C145CA5AD0E40C86916BD43D5535B3F482A001321132EE7FE29ACC424360FD6C1E67C41BF3C7E
Malicious:	false
Preview:	L..................F.@.. .....>.....U..u)*....>.....PPv..........................P.O. .:i.....+00.../C:\.....................1.....]Y.}..PROGRA~2.........O.I]Y.....................V.......A.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....z.1.....]Y...LITEMA~1..b......]Y.}]Y.....J......................X].L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r.....h.2.PPv..Y%. .ROMSER~1.EXE..L.......Y%.]Y...............................R.O.M.S.e.r.v.e.r...e.x.e.......l...............-.......k............!.p.....C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe..L.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r.\.R.O.M.S.e.r.v.e.r...e.x.e.0.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r.\.../.c.o.n.f.i.g.n.C.:.\.W.i.n.d.o.w.s.\.I.n.s.t.a.l.l.e.r.\.{.7.1.F.F.A.4.7.5.-.2.4.D.5.-.4.4.F.B.-.A.5.1.F.-.3.9.B.6.9.9.E.3.D.8.2.C.}.\

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Start LM-Server.lnk

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, ctime=Sun Dec 31 23:25:52 1600, mtime=Sun Dec 31 23:25:52 1600, atime=Sun Dec 31 23:25:52 1600, length=0, window=hide
Category:	dropped
Size (bytes):	1890
Entropy (8bit):	3.1573107695942624
Encrypted:	false
SSDEEP:	48:8ddOEPLqd5Y+d5YcCP5q2DT2S0Wq2DTKX7:85LJ9cM5qUoWqUE
MD5:	5FC67E19699B3F0B2AB7B4B89B0B3F1A
SHA1:	6F6380DF2EB8C5D30452A846864F001A8B0E473A
SHA-256:	45451F933B472FA53301D46B7C072AF67E51EC60172E6E9C01E0B308DF78A2F4
SHA-512:	81C7A9F5683DB54893BD26A6EC1BCBDB17983037668CD996E03934E7708331594195DBF2CCE9EB2B0C0567A9E8B24DD629D40866D49E55C9DF77A864D15744E5
Malicious:	false
Preview:	L..................F.@...........................................................P.O. .:i.....+00.../C:\...................z.1...........Program Files (x86).X............................................P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)..."...1...........LiteManager Pro - Server..b............................................L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r...(.h.2...........ROMServer.exe.L............................................R.O.M.S.e.r.v.e.r...e.x.e.......L.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r.\.R.O.M.S.e.r.v.e.r...e.x.e.0.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r.\.../.s.t.a.r.t.n.C.:.\.W.i.n.d.o.w.s.\.I.n.s.t.a.l.l.e.r.\.{.7.1.F.F.A.4.7.5.-.2.4.D.5.-.4.4.F.B.-.A.5.1.F.-.3.9.B.6.9.9.E.3.D.8.2.C.}.\.R.O.M.S.e.r.v.e.r...e.x.e._.9.D.0.9.B.2.B.C.2.5.A.2.4.1.4.C.B.D.8.4.8.E.2.B.7.5.8.9.8.6.7.6...e.x.e.........%SystemRoot%\In

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Stop LM-Server.lnk

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Thu Aug 22 17:41:10 2024, mtime=Tue Oct 29 16:39:09 2024, atime=Thu Aug 22 17:41:10 2024, length=7753808, window=hide
Category:	dropped
Size (bytes):	2159
Entropy (8bit):	3.907940221189726
Encrypted:	false
SSDEEP:	48:812DMdOzwWqZd5Y+d5Ys5qcxFWT84SslWqcxFWT8cVJCJh:81mwO9s5qcxYT8SWqcxYT8c
MD5:	4689BFA595A83519053A89206D694205
SHA1:	E563654D47E9346C9C996B033D3110B2BC4B36B5
SHA-256:	B22ECAA71CC07B3E9C4722E7DBF56F8A7365B92F1715E12EB601F922E44889AF
SHA-512:	F956D20426B90A2501066F66C5C3A31FFA37F213BB4867F9C660D06AC7996AA3E23D4BC16C69E4D265BB5F5F382A980AEF54AF2AE43D5BF413FDD45144D6F66C
Malicious:	false
Preview:	L..................F.@.. .....>........u)*....>.....PPv..........................P.O. .:i.....+00.../C:\.....................1.....]Y.}..PROGRA~2.........O.I]Y.....................V.......A.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.)...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.7.....z.1.....]Y.}..LITEMA~1..b......]Y.}]Y.}....J.......................s.L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r.....h.2.PPv..Y%. .ROMSER~1.EXE..L.......Y%.]Y...............................R.O.M.S.e.r.v.e.r...e.x.e.......l...............-.......k............!.p.....C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe..L.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r.\.R.O.M.S.e.r.v.e.r...e.x.e.0.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.L.i.t.e.M.a.n.a.g.e.r. .P.r.o. .-. .S.e.r.v.e.r.\.../.s.t.o.p.l.C.:.\.W.i.n.d.o.w.s.\.I.n.s.t.a.l.l.e.r.\.{.7.1.F.F.A.4.7.5.-.2.4.D.5.-.4.4.F.B.-.A.5.1.F.-.3.9.B.6.9.9.E.3.D.8.2.C.}.\.s.t

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Uninstall LiteManager - Server.lnk

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has command line arguments, Icon number=0, Archive, ctime=Sat Dec 7 08:10:02 2019, mtime=Tue Oct 29 14:45:11 2024, atime=Sat Dec 7 08:10:02 2019, length=59904, window=hide
Category:	dropped
Size (bytes):	1953
Entropy (8bit):	3.8853323085367304
Encrypted:	false
SSDEEP:	48:8Wt//kH0bZLu3HOn5qmjlt6ScWqmjltZVJhJh:8i/kg9jn5qmjlmWqmjl
MD5:	6159BDD3F39E3035DDD43F6F468E8B50
SHA1:	E6B2BF78885513D02200316BBCFC810FA9ABC770
SHA-256:	352E506C9B155618C9AF57C42A22FE17A6F354EFF782B98D901EE64C1C82932E
SHA-512:	3BE2F00255FC6284B99E7780F4A1166F5F52DAB53A69D1674EC9256B6B8C81F2BE9E1489CAB8CF096C386224E90CBD0CBE83D76EB0271CF92EBDF3F6EC57A162
Malicious:	false
Preview:	L..................F.@.. ...25......%..*..25.............................A....P.O. .:i.....+00.../C:\...................V.1.....EW.>..Windows.@......OwH]Y.}....3....................._.$.W.i.n.d.o.w.s.....Z.1.....]Y.}..SysWOW64..B......O.I]Y.}....Y......................D..S.y.s.W.O.W.6.4.....b.2......OBI .msiexec.exe.H......OBI]Y.}................\|.............m.s.i.e.x.e.c...e.x.e.......N...............-.......M............!.p.....C:\Windows\SysWOW64\msiexec.exe........\.....\.....\.....\.....\.....\.W.i.n.d.o.w.s.\.S.y.s.W.O.W.6.4.\.m.s.i.e.x.e.c...e.x.e.)./.x. .{.7.1.F.F.A.4.7.5.-.2.4.D.5.-.4.4.F.B.-.A.5.1.F.-.3.9.B.6.9.9.E.3.D.8.2.C.}.s.C.:.\.W.i.n.d.o.w.s.\.I.n.s.t.a.l.l.e.r.\.{.7.1.F.F.A.4.7.5.-.2.4.D.5.-.4.4.F.B.-.A.5.1.F.-.3.9.B.6.9.9.E.3.D.8.2.C.}.\.U.N.I.N.S.T._.U.n.i.n.s.t.a.l.l._.L._.7.8.A.A.5.B.6.6.6.2.5.1.4.D.9.4.A.8.4.7.D.6.C.6.0.3.A.F.0.8.9.5...e.x.e.........%SystemRoot%\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\UNINST_Uninstall_L_78AA5B6662514D94A847D6C6

C:\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	999
Entropy (8bit):	4.966299883488245
Encrypted:	false
SSDEEP:	24:Jd4T7gw4TchTGBLtKEHcHGuDyeHRuDye6MGFiP6euDyRtz:34T53VGLv8HGuDyeHRuDye6MGFiP6euy
MD5:	24567B9212F806F6E3E27CDEB07728C0
SHA1:	371AE77042FFF52327BF4B929495D5603404107D
SHA-256:	82F352AD3C9B3E58ECD3207EDC38D5F01B14D968DA908406BD60FD93230B69F6
SHA-512:	5D5E65FCD9061DADC760C9B3124547F2BABEB49FD56A2FD2FE2AD2211A1CB15436DB24308A0B5A87DA24EC6AB2A9B0C5242D828BE85BD1B2683F9468CE310904
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<software_identification_tag xmlns="http://standards.iso.org/iso/19770/-2/2009/schema.xsd">...<entitlement_required_indicator>true</entitlement_required_indicator>...<product_title>Windows 10 Pro</product_title>...<product_version>....<name>10.0.19041.1865</name>....<numeric>.....<major>10</major>.....<minor>0</minor>.....<build>19041</build>.....<review>1865</review>....</numeric>...</product_version>...<software_creator>....<name>Microsoft Corporation</name>....<regid>regid.1991-06.com.microsoft</regid>...</software_creator>...<software_licensor>....<name>Microsoft Corporation</name>....<regid>regid.1991-06.com.microsoft</regid>...</software_licensor>...<software_id>....<unique_id>Windows-10-Pro</unique_id>....<tag_creator_regid>regid.1991-06.com.microsoft</tag_creator_regid>...</software_id>...<tag_creator>....<name>Microsoft Corporation</name>....<regid>regid.1991-06.com.microsoft</regid>...</tag_creator>..</software_identification_tag>..

C:\Windows\Installer\6a346a.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Number of Characters: 0, Last Saved By: InstallShield, Number of Words: 0, Title: LiteManager - Server 5.0 installation package, Comments: This installer contains the logic and data to install LiteManager Pro - Server 5.0, Keywords: Installer,MSI,Database, Subject: LiteManager Pro - Server, Author: LiteManagerTeam, Security: 1, Number of Pages: 200, Name of Creating Application: InstallShield 2015 - Premier Edition with Virtualization Pack 22, Last Saved Time/Date: Thu Aug 22 15:43:08 2024, Create Time/Date: Thu Aug 22 15:43:08 2024, Last Printed: Thu Aug 22 15:43:08 2024, Revision Number: {9EF586E9-112B-4AAE-B439-5B62B7A0B1DE}, Code page: 0, Template: Intel;0,1033,1049
Category:	dropped
Size (bytes):	11554816
Entropy (8bit):	7.9382387394429115
Encrypted:	false
SSDEEP:	196608:9Jg0ovdgTGOk/J1yr/A9ODMlWyFISx8/191nYHiT88o8En03yEoH8WkJDFa:bAJoLA9OIlWy58/19J+iYNPEoHg0
MD5:	0C88F651EEA7EBD95DF08F6A492FCB38
SHA1:	93E622BB18056BB61DD11805D91AB1F9267CBD67
SHA-256:	A1FAAE4E2B695C7DF3846179192F4E67BD8DD05E7E5C6D0B4B72DB175F629076
SHA-512:	41F69CFCDA6EBB6DD6984D21B19E952BA25C78404B138FF25A8E16283D9080B5E2A85AF4973EC25A4F45F8D402163CCE96906F06F3FBA2068571F1F1ACBEA86C
Malicious:	false
Preview:	......................>...................................8........6..................}.................................................................................................................................................................................................................................................... ... ...!...!..."..."...#...#...$...$...%...%...&...&...'...'...(...(...)...).........+...+...,...,...-...-.........../.../...0...0...1...1...2...2...3...3...4...4...5...5...6..........<................................................................................................................... ...!..."...#...$...%...&...'...(...)...*...+...,...-......./...0...1...2...3...4...5...6...7...@...M...:...;...=...........?...N...A...B...C...D...E...F...G...H...I...J...O...L...N...D.......P...Q...R...S...T...Z...V...W...X...Y....X..[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Windows\Installer\6a346c.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Number of Characters: 0, Last Saved By: InstallShield, Number of Words: 0, Title: LiteManager - Server 5.0 installation package, Comments: This installer contains the logic and data to install LiteManager Pro - Server 5.0, Keywords: Installer,MSI,Database, Subject: LiteManager Pro - Server, Author: LiteManagerTeam, Security: 1, Number of Pages: 200, Name of Creating Application: InstallShield 2015 - Premier Edition with Virtualization Pack 22, Last Saved Time/Date: Thu Aug 22 15:43:08 2024, Create Time/Date: Thu Aug 22 15:43:08 2024, Last Printed: Thu Aug 22 15:43:08 2024, Revision Number: {9EF586E9-112B-4AAE-B439-5B62B7A0B1DE}, Code page: 0, Template: Intel;0,1033,1049
Category:	dropped
Size (bytes):	11554816
Entropy (8bit):	7.9382387394429115
Encrypted:	false
SSDEEP:	196608:9Jg0ovdgTGOk/J1yr/A9ODMlWyFISx8/191nYHiT88o8En03yEoH8WkJDFa:bAJoLA9OIlWy58/19J+iYNPEoHg0
MD5:	0C88F651EEA7EBD95DF08F6A492FCB38
SHA1:	93E622BB18056BB61DD11805D91AB1F9267CBD67
SHA-256:	A1FAAE4E2B695C7DF3846179192F4E67BD8DD05E7E5C6D0B4B72DB175F629076
SHA-512:	41F69CFCDA6EBB6DD6984D21B19E952BA25C78404B138FF25A8E16283D9080B5E2A85AF4973EC25A4F45F8D402163CCE96906F06F3FBA2068571F1F1ACBEA86C
Malicious:	false
Preview:	......................>...................................8........6..................}.................................................................................................................................................................................................................................................... ... ...!...!..."..."...#...#...$...$...%...%...&...&...'...'...(...(...)...).........+...+...,...,...-...-.........../.../...0...0...1...1...2...2...3...3...4...4...5...5...6..........<................................................................................................................... ...!..."...#...$...%...&...'...(...)...*...+...,...-......./...0...1...2...3...4...5...6...7...@...M...:...;...=...........?...N...A...B...C...D...E...F...G...H...I...J...O...L...N...D.......P...Q...R...S...T...Z...V...W...X...Y....X..[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Windows\Installer\MSI36AC.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	294202
Entropy (8bit):	4.850647619075845
Encrypted:	false
SSDEEP:	3072:Rpoy2KjcC2jcmFDX/vjcJGUjcmFDX/rjcmFDX/dZ+oNbynf4:Rpoy25DXmNDXLDXX+oNbynf4
MD5:	FDFA7EA4ADF40EABA7021786C396E88E
SHA1:	8492F22A3CE58387B98BB4742DDE1C6B49DC1F8E
SHA-256:	E5542CC8760955CFA60F706FD63390A26D47DB3C7B4448568BC1610A5A16E041
SHA-512:	AAEBF620D90DE99D50797EE51F103F831F6789A6F9245161FCEA46C714E761F8F3412EFDF2D7D0846CDD907BCC9489B8882996DB40E2D3CE6571F1DB51AFC9BA
Malicious:	false
Preview:	...@IXOS.@.....@.]]Y.@.....@.....@.....@.....@.....@......&.{71FFA475-24D5-44FB-A51F-39B699E3D82C}..LiteManager Pro - Server..gBYz86HSwI.msi.@.....@.....@.....@......ARPPRODUCTICON.exe..&.{9EF586E9-112B-4AAE-B439-5B62B7A0B1DE}.....@.....@.....@.....@.......@.....@.....@.......@......LiteManager Pro - Server......Rollback..Rolling back action:..[1]..RollbackCleanup..Removing backup files..File: [1]...@.......@........ProcessComponents..Updating component registration...@.....@.....@.]....&.{3244CDE6-6414-4399-B0D5-424562747210}0.C:\Program Files (x86)\LiteManager Pro - Server\.@.......@.....@.....@......&.{4D4D18AA-F74D-4291-B5A9-93C3CC48B75F}5.C:\Program Files (x86)\LiteManager Pro - Server\Lang\.@.......@.....@.....@......&.{641F154A-FEEF-4FA7-B5BF-414DB1DB8390}C.C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe.@.......@.....@.....@......&.{26EAB54E-4659-47E8-86F9-4CB74F7E03BE}0.C:\Program Files (x86)\LiteManager Pro - Server\.@.......@.....@.....@......&.{596F4636-

C:\Windows\Installer\SourceHash{71FFA475-24D5-44FB-A51F-39B699E3D82C}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1651399046306254
Encrypted:	false
SSDEEP:	12:JSbX72Fja+aAGiLIlHVRpZh/7777777777777777777777777vDHFh9it/l0i8Q:Js+aQI5tUiF
MD5:	EB62169D6954FB4184BE454F5ADAE0DD
SHA1:	F5D24FF7CC3F54F0DE49F8C48AB308028E863FD2
SHA-256:	1A79EBED57D09492E5D717FBA0AE740CA3A44303AB779717A2A920B921654F82
SHA-512:	F7748E0014ED144CBFDE53C9E70309266AE83855F3A7462637F312BCEB6D70FC3925C8DAB438805D7C46D886E577F52C868367B83DE26A6392D817543CAF4905
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.8174009032898466
Encrypted:	false
SSDEEP:	96:r6hx1vjTlOPBu0WlfEtBJucqqm0WlfED7c/:rG1rEt/q
MD5:	D72DBE10352D66DE6F0B99D52C428AE2
SHA1:	721985626BE0C02E61D7E131D8A35ECD6058A2CA
SHA-256:	9489B8BFA0FB9219ACC5CC3082E0ADEAEB01128E0D67498599FE50DD9A6F8058
SHA-512:	BB5F6A493BE530F2B85311142F91986960BDEAD20C45C50A2B5F0C37EF6779897637BC06907DDD3E5E538F0EEFD07AC7AE78E12DF8C00CA2894E6C805CB466B2
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ARPPRODUCTICON.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	53248
Entropy (8bit):	4.351781833522881
Encrypted:	false
SSDEEP:	384:AvFMAyDNOdTdFCxfrwntajXjDWLi9Y+C5vy/Q1nDcZUNeLNek+vDFNe+TNy:+MAyYdTmPJbgqcnDcCNy
MD5:	CA680899D9330BEB85E6351E6DC0D27B
SHA1:	41E89E582F58FB2A4ED06FA3BF796A1DAAC5CB6C
SHA-256:	EAB5DC45781E92CD5CF953016757B1E6F2ED7A0B5A97CC0945B19A8FBC1A85F2
SHA-512:	3817BD6EC345F96631E6CBF6C8DD384ACB17D912B1EC69D959F3AA15C05226D5FE3B5E9807D42D0E63589AABCEADFBE8BD5F293D8069DF689D12498E05842286
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............C...C...C...C...CD..C...C...C...C=..C...C...C...C...C...CRich...C........................PE..L...J&uU.................@...................P....@.........................................................................4T..(........0...........................................................................P...............................text....5.......@.................. ..`.rdata.......P.......P..............@..@.data....)...`...0...`..............@....rsrc....0.......@..................@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\ROMServer.exe_9D09B2BC25A2414CBD848E2B75898676.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	4.774504587732323
Encrypted:	false
SSDEEP:	768:SMAyYdTmPJbgqcnDcZTw0gpEeO4tZZz+0pQTk/N0:S1U81cmpjDX/N0
MD5:	5EBCB54B76FBE24FFF9D3BD74E274234
SHA1:	6CD72F044F36B7A3A79B7D77AAE59F274A66CE95
SHA-256:	504AEB909BBA186D4298AA97DCD6A09CCDD42217AF1F6210BC5EBD23B3DFCCBF
SHA-512:	5FF61D724B77B6EDC67D33B0F1EE1C3CB01F2A03251D0BE83FF10A80A99DBA08E3A0E0F985DEED6358E467B2E9B6A837E894513D1B5E68AF253C0BBDD68539D0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............C...C...C...C...CD..C...C...C...C=..C...C...C...C...C...CRich...C........................PE..L...J&uU.................@...................P....@.........................................................................4T..(.......xC...........................................................................P...............................text....5.......@.................. ..`.rdata.......P.......P..............@..@.data....)...`...0...`..............@....rsrc...xC.......P..................@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\UNINST_Uninstall_L_78AA5B6662514D94A847D6C603AF0895.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	4.31126714354722
Encrypted:	false
SSDEEP:	384:EvFMAyDNOdTdFCxfrwntajXjDWLi9Y+C5vy/Q1nDcZMwQE3vGYksuektm6yysZc8:SMAyYdTmPJbgqcnDcmwQE/RkHRRNS
MD5:	6A4AFFF2CD33613166B37A0DAB99BD41
SHA1:	FBC0F1696213B459D099A5809D79CFC01253880F
SHA-256:	53C1AE4962663E82D3AAC7C4A6CBE3D53E05D6948ADAE6391A2748396ACF98FE
SHA-512:	7B61D32E4AD38BC21E86559BFFA49A334CCB6184E595CB43F2D60A2A77C86B31D07B1A9D1F8FBE69E9AAD7E096952D765404BEBC494E73BD992642EB6B82E3A7
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............C...C...C...C...CD..C...C...C...C=..C...C...C...C...C...CRich...C........................PE..L...J&uU.................@...p...............P....@.........................................................................4T..(........+...........................................................................P...............................text....5.......@.................. ..`.rdata.......P.......P..............@..@.data....)...`...0...`..............@....rsrc....+.......0..................@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\config_server_B6BD2967C67B44649764F06ADFFD6458.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	4.774504587732323
Encrypted:	false
SSDEEP:	768:SMAyYdTmPJbgqcnDcZTw0gpEeO4tZZz+0pQTk/N0:S1U81cmpjDX/N0
MD5:	5EBCB54B76FBE24FFF9D3BD74E274234
SHA1:	6CD72F044F36B7A3A79B7D77AAE59F274A66CE95
SHA-256:	504AEB909BBA186D4298AA97DCD6A09CCDD42217AF1F6210BC5EBD23B3DFCCBF
SHA-512:	5FF61D724B77B6EDC67D33B0F1EE1C3CB01F2A03251D0BE83FF10A80A99DBA08E3A0E0F985DEED6358E467B2E9B6A837E894513D1B5E68AF253C0BBDD68539D0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............C...C...C...C...CD..C...C...C...C=..C...C...C...C...C...CRich...C........................PE..L...J&uU.................@...................P....@.........................................................................4T..(.......xC...........................................................................P...............................text....5.......@.................. ..`.rdata.......P.......P..............@..@.data....)...`...0...`..............@....rsrc...xC.......P..................@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\{71FFA475-24D5-44FB-A51F-39B699E3D82C}\stop_server_51B516B87C64408FA3C56354EA2277C2.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	4.774504587732323
Encrypted:	false
SSDEEP:	768:SMAyYdTmPJbgqcnDcZTw0gpEeO4tZZz+0pQTk/N0:S1U81cmpjDX/N0
MD5:	5EBCB54B76FBE24FFF9D3BD74E274234
SHA1:	6CD72F044F36B7A3A79B7D77AAE59F274A66CE95
SHA-256:	504AEB909BBA186D4298AA97DCD6A09CCDD42217AF1F6210BC5EBD23B3DFCCBF
SHA-512:	5FF61D724B77B6EDC67D33B0F1EE1C3CB01F2A03251D0BE83FF10A80A99DBA08E3A0E0F985DEED6358E467B2E9B6A837E894513D1B5E68AF253C0BBDD68539D0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............C...C...C...C...CD..C...C...C...C=..C...C...C...C...C...CRich...C........................PE..L...J&uU.................@...................P....@.........................................................................4T..(.......xC...........................................................................P...............................text....5.......@.................. ..`.rdata.......P.......P..............@..@.data....)...`...0...`..............@....rsrc...xC.......P..................@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	360001
Entropy (8bit):	5.362974113319215
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26KgauM:zTtbmkExhMJCIpE9
MD5:	931AE8BC369BC7AD3D51E643C1B19C84
SHA1:	CDC37F15B3E6E0ACFE69B84727F03917C1B64C3D
SHA-256:	9A8D7F49AD2ADA01546108E871C9CD3CEAB69A0C54DF885F9554887F0F9F7E7B
SHA-512:	B13307E77D3FE396B81A2C83414225AEA7B916C98787CE4DE5ACE5A8B7D558FCEC322D3B8D9D3A82E79B149DAE573A1E29CF7D95453BD3839C33131D6ED75E80
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log

Download File

Process:	C:\Program Files\Windows Defender\MpCmdRun.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	modified
Size (bytes):	2464
Entropy (8bit):	3.247701412597977
Encrypted:	false
SSDEEP:	24:QOaqdmuF3r3l+kWReHgHttUKlDENh+pyMySn6tUKlDENh+pyMySwwIPVxcwIPVxE:FaqdF73l+AAHdKoqKFxcxkFd/
MD5:	DB88E219B41B012149918CE81C651E4A
SHA1:	B4319890D50BF9F78E9F323D3D5533BCB00E2C86
SHA-256:	0DE13C181294855A31629790F01FC3589213A6E4170E39C88F6A06E123747C0D
SHA-512:	DD50CE3D4CE6ED19B9C53B0862E96ADA1AF3C893E78D6324FE74062AAF51F44DE4E74C0B11295BE73A08CBAC548CC55323677C1F2C512E048DBD3E5A870E5A88
Malicious:	false
Preview:	..........-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.....M.p.C.m.d.R.u.n.:. .C.o.m.m.a.n.d. .L.i.n.e.:. .".C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.W.i.n.d.o.w.s. .D.e.f.e.n.d.e.r.\.m.p.c.m.d.r.u.n...e.x.e.". .-.w.d.e.n.a.b.l.e..... .S.t.a.r.t. .T.i.m.e.:. .. T.u.e. .. O.c.t. .. 2.9. .. 2.0.2.4. .1.3.:.3.9.:.5.0.........M.p.E.n.s.u.r.e.P.r.o.c.e.s.s.M.i.t.i.g.a.t.i.o.n.P.o.l.i.c.y.:. .h.r. .=. .0.x.1.....W.D.E.n.a.b.l.e........................................ .W.S.C. .S.t.a.t.e. .I.n.f.o. ................................................................. .A.n.t.i.V.i.r.u.s.P.r.o.d.u.c.t. ..............................d.i.s.p.l.a.y.N.a.m.e. .=. .[.W.i.n.d.o.w.s. .D.e.f.e.n.d.e.r.].....p.a.t.h.T.o.S.i.g.n.e.d.P.r.o.d.u.c.t.E.x.e. .=. .[.w.i.n.d.o.w.s.d.

C:\Windows\Temp\~DF03F46CFC8E2C8A8F.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.4388092044468113
Encrypted:	false
SSDEEP:	96:lJT6/T34ROPBu0WlfEtBJucqqm0WlfED7c/:3+/zZt/q
MD5:	105F924E7D0BBB1CC00FC5C231EA83E2
SHA1:	BB6C012D143AEECE47236479EEFD15779AA5564E
SHA-256:	795AA2C0255E6524680E55BE5666A1FC63AF9D3F0B881419B1AD96174C23218F
SHA-512:	41E4D3BB3A10B693511FB85CBF3D5F76A273EC6634B595B40E082B03F155A8AFE06515EB853DAA1775722F062CAE5D45318257442E00D4947FD839BEDB03CC6D
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF059CE52ABB3CCE33.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF487C752A9DAF178F.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF597C6180FDE96E40.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.4388092044468113
Encrypted:	false
SSDEEP:	96:lJT6/T34ROPBu0WlfEtBJucqqm0WlfED7c/:3+/zZt/q
MD5:	105F924E7D0BBB1CC00FC5C231EA83E2
SHA1:	BB6C012D143AEECE47236479EEFD15779AA5564E
SHA-256:	795AA2C0255E6524680E55BE5666A1FC63AF9D3F0B881419B1AD96174C23218F
SHA-512:	41E4D3BB3A10B693511FB85CBF3D5F76A273EC6634B595B40E082B03F155A8AFE06515EB853DAA1775722F062CAE5D45318257442E00D4947FD839BEDB03CC6D
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF59E0510B109E847E.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.07157018653932373
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOYYbmqOdtgVky6lit/:2F0i8n0itFzDHFhqit/
MD5:	2F1027A4EA881913E9AEE2B215B9F60D
SHA1:	35CFACEBFBA8DA3E23298DA9E43CC394604020CB
SHA-256:	5EACA7ED57D3655F581B066F49281E092A236452362DB8967E9202EF1BE3CDE5
SHA-512:	A6C9105D4B7ACF4D0EFAF923EE2097E89869989AAB7C5AAC3E58EC55F6285C0097B19A7C4AE503316FDA4E5D589809AB197EF6DABA3591299475490D3EED3FA4
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF8F3BE9475429A1F8.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.8174009032898466
Encrypted:	false
SSDEEP:	96:r6hx1vjTlOPBu0WlfEtBJucqqm0WlfED7c/:rG1rEt/q
MD5:	D72DBE10352D66DE6F0B99D52C428AE2
SHA1:	721985626BE0C02E61D7E131D8A35ECD6058A2CA
SHA-256:	9489B8BFA0FB9219ACC5CC3082E0ADEAEB01128E0D67498599FE50DD9A6F8058
SHA-512:	BB5F6A493BE530F2B85311142F91986960BDEAD20C45C50A2B5F0C37EF6779897637BC06907DDD3E5E538F0EEFD07AC7AE78E12DF8C00CA2894E6C805CB466B2
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF90FDF85F5FDD5218.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFA24A392BD8624995.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFAB730A141284D565.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.8174009032898466
Encrypted:	false
SSDEEP:	96:r6hx1vjTlOPBu0WlfEtBJucqqm0WlfED7c/:rG1rEt/q
MD5:	D72DBE10352D66DE6F0B99D52C428AE2
SHA1:	721985626BE0C02E61D7E131D8A35ECD6058A2CA
SHA-256:	9489B8BFA0FB9219ACC5CC3082E0ADEAEB01128E0D67498599FE50DD9A6F8058
SHA-512:	BB5F6A493BE530F2B85311142F91986960BDEAD20C45C50A2B5F0C37EF6779897637BC06907DDD3E5E538F0EEFD07AC7AE78E12DF8C00CA2894E6C805CB466B2
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFAC53639B39847685.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.4388092044468113
Encrypted:	false
SSDEEP:	96:lJT6/T34ROPBu0WlfEtBJucqqm0WlfED7c/:3+/zZt/q
MD5:	105F924E7D0BBB1CC00FC5C231EA83E2
SHA1:	BB6C012D143AEECE47236479EEFD15779AA5564E
SHA-256:	795AA2C0255E6524680E55BE5666A1FC63AF9D3F0B881419B1AD96174C23218F
SHA-512:	41E4D3BB3A10B693511FB85CBF3D5F76A273EC6634B595B40E082B03F155A8AFE06515EB853DAA1775722F062CAE5D45318257442E00D4947FD839BEDB03CC6D
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFC863BD58EC862BFE.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFE4B35B053DB555DB.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	73728
Entropy (8bit):	0.23352309093069046
Encrypted:	false
SSDEEP:	48:PHsEmFSBqfqOd5YpRXd5YNd5YGd5YMd5YEPBS8qOd5YpRXd5YNd5YGd5YMd5YE6w:PHstFqqm0WlfEPBu0WlfEtBJucR
MD5:	AB54FD480B38242194388C3C136E2D33
SHA1:	638B85206004417DD9427B166F492EA125FD5EFA
SHA-256:	E9B1DAFBBFDB237556200945D5CC3B1775096F2D4A40BC40B7D4494685727F26
SHA-512:	620D43E4049527D34D1CAD90DDB4D294ACA30B1EF4EE1A49796D20543086E4A6EDA1BC343E11173D828E1FDB6808004ACC8F2D00051E856B4BD834C7D6D89F78
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Number of Characters: 0, Last Saved By: InstallShield, Number of Words: 0, Title: LiteManager - Server 5.0 installation package, Comments: This installer contains the logic and data to install LiteManager Pro - Server 5.0, Keywords: Installer,MSI,Database, Subject: LiteManager Pro - Server, Author: LiteManagerTeam, Security: 1, Number of Pages: 200, Name of Creating Application: InstallShield 2015 - Premier Edition with Virtualization Pack 22, Last Saved Time/Date: Thu Aug 22 15:43:08 2024, Create Time/Date: Thu Aug 22 15:43:08 2024, Last Printed: Thu Aug 22 15:43:08 2024, Revision Number: {9EF586E9-112B-4AAE-B439-5B62B7A0B1DE}, Code page: 0, Template: Intel;0,1033,1049
Entropy (8bit):	7.9382387394429115
TrID:	Windows SDK Setup Transform Script (63028/2) 41.86% Microsoft Windows Installer (60509/1) 40.19% Microsoft Word document (old ver.) (19008/1) 12.63% Generic OLE2 / Multistream Compound File (8008/1) 5.32%
File name:	gBYz86HSwI.msi
File size:	11'554'816 bytes
MD5:	0c88f651eea7ebd95df08f6a492fcb38
SHA1:	93e622bb18056bb61dd11805d91ab1f9267cbd67
SHA256:	a1faae4e2b695c7df3846179192f4e67bd8dd05e7e5c6d0b4b72db175f629076
SHA512:	41f69cfcda6ebb6dd6984d21b19e952ba25c78404b138ff25a8e16283d9080b5e2a85af4973ec25a4f45f8d402163cce96906f06f3fba2068571f1f1acbea86c
SSDEEP:	196608:9Jg0ovdgTGOk/J1yr/A9ODMlWyFISx8/191nYHiT88o8En03yEoH8WkJDFa:bAJoLA9OIlWy58/19J+iYNPEoHg0
TLSH:	13C633063E138136D49906348A7B97A207BDBC268BF190DBF395764F1DB56C04EB32A7
File Content Preview:	........................>...................................8........6..................}......................................................................................................................................................................

File Icon


Icon Hash:	2d2e3797b32b2b99

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 16:45:44.149463892 CET	49722	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.156068087 CET	5651	49722	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.156582117 CET	49722	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.161870956 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.168566942 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.168629885 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.177182913 CET	49724	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.183007002 CET	80	49724	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.183218956 CET	49724	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.192899942 CET	49725	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.199836969 CET	465	49725	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.199903011 CET	49725	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.210210085 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:44.216097116 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:44.216173887 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:44.282133102 CET	49727	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:44.283834934 CET	49722	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.283858061 CET	49722	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.287904024 CET	5555	49727	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:44.288599968 CET	49727	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:44.289889097 CET	5651	49722	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.289958954 CET	5651	49722	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.299621105 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.299633980 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.305445910 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.305485964 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.315789938 CET	49724	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.315789938 CET	49724	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.321419954 CET	80	49724	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.321623087 CET	80	49724	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.329824924 CET	49725	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.329838037 CET	49725	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.335248947 CET	465	49725	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.335690022 CET	465	49725	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.353516102 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:44.353516102 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:44.359261990 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:44.359406948 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:44.396282911 CET	49727	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:44.396311998 CET	49727	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:44.401623011 CET	5555	49727	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:44.401689053 CET	5555	49727	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:44.878153086 CET	5651	49722	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.878283024 CET	49722	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.878364086 CET	49722	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.884129047 CET	5651	49722	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.937855959 CET	80	49724	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:44.937999010 CET	49724	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.937999010 CET	49724	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:44.943828106 CET	80	49724	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:45.110183954 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:45.110392094 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.110392094 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.110419989 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.110419989 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.110582113 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.118117094 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:45.118149996 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:45.118163109 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:45.118175983 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:45.119859934 CET	80	49726	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:45.120052099 CET	49726	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.332197905 CET	49728	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:45.332201958 CET	49729	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:45.339883089 CET	5651	49728	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:45.340064049 CET	49728	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:45.340536118 CET	80	49729	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:45.340851068 CET	49729	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:45.347676992 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.353214979 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:45.353389025 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.470789909 CET	49729	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:45.470789909 CET	49729	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:45.471211910 CET	49728	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:45.471703053 CET	49728	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:45.478089094 CET	80	49729	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:45.478108883 CET	80	49729	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:45.478123903 CET	5651	49728	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:45.479717970 CET	5651	49728	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:45.486237049 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.486411095 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:45.491714954 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:45.492223978 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.286628962 CET	80	49729	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.286633968 CET	5651	49728	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.286801100 CET	49729	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.289088011 CET	49728	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.292349100 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.292593002 CET	80	49729	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.293137074 CET	49729	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.295339108 CET	5651	49728	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.299326897 CET	49728	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.301668882 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.318299055 CET	49729	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.318751097 CET	49728	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.319192886 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.319194078 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.319252968 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.319252968 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.319252968 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.319350004 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.319386005 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.319386005 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.319386005 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.323810101 CET	80	49729	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.324453115 CET	5651	49728	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.324747086 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.324757099 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.324764967 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.324822903 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.324893951 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.324903011 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.324913025 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.325015068 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.325440884 CET	80	49730	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.325553894 CET	49730	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.583179951 CET	49732	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.583199978 CET	49731	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.589287996 CET	80	49732	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.589374065 CET	49732	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.589922905 CET	5651	49731	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.590018988 CET	49731	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.597806931 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.606496096 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.606576920 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.720921040 CET	49731	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.720921040 CET	49731	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.721143007 CET	49732	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.721172094 CET	49732	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:46.726386070 CET	5651	49731	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.726633072 CET	5651	49731	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.726732969 CET	80	49732	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.726742983 CET	80	49732	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.736569881 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.736594915 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:46.742053032 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.742877960 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:46.793731928 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:46.845357895 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.309360981 CET	80	49732	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.309418917 CET	49732	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.309495926 CET	49732	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.314893007 CET	80	49732	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.318968058 CET	5651	49731	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.319071054 CET	49731	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.319133997 CET	49731	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.324373960 CET	5651	49731	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.465682030 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.465806961 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.465830088 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.465848923 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.465869904 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.465908051 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.471122026 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.471302986 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.471328974 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.471415997 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.471827030 CET	80	49733	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.471890926 CET	49733	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.631706953 CET	49734	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.637254953 CET	5651	49734	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.637321949 CET	49734	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.644812107 CET	49735	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.650700092 CET	80	49735	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.651087999 CET	49735	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.660183907 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.665489912 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.665575981 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.767601013 CET	49734	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.767601013 CET	49734	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.773067951 CET	5651	49734	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.773243904 CET	5651	49734	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.783090115 CET	49735	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.783137083 CET	49735	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:47.788467884 CET	80	49735	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.788580894 CET	80	49735	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.798641920 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:47.798867941 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.798902988 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:47.804241896 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.804259062 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:47.845359087 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.374943972 CET	5651	49734	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.375042915 CET	49734	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.375139952 CET	49734	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.380505085 CET	5651	49734	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.389205933 CET	80	49735	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.389350891 CET	49735	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.389453888 CET	49735	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.394869089 CET	80	49735	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.412861109 CET	49737	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.418303013 CET	5651	49737	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.418548107 CET	49737	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.427411079 CET	49738	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.432816029 CET	80	49738	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.432882071 CET	49738	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.546021938 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.546170950 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.546196938 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.546205044 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.546224117 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.546268940 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.548959017 CET	49737	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.549202919 CET	49737	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.551944017 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.552246094 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.552254915 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.552263021 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.552365065 CET	80	49736	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.552412987 CET	49736	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.554522038 CET	5651	49737	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.554809093 CET	5651	49737	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.564228058 CET	49738	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.564270973 CET	49738	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:48.569668055 CET	80	49738	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.569684982 CET	80	49738	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.632606030 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.638472080 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.638550997 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.769993067 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.770092010 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:48.775635958 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.775679111 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:48.798882008 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:48.845370054 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.130537033 CET	5651	49737	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.130670071 CET	49737	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.151184082 CET	49737	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.156631947 CET	5651	49737	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.179287910 CET	80	49738	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.179378986 CET	49738	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.179532051 CET	49738	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.185022116 CET	80	49738	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.208609104 CET	49740	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.214340925 CET	5651	49740	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.214405060 CET	49740	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.329879045 CET	49740	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.329927921 CET	49740	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.335464001 CET	5651	49740	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.335580111 CET	5651	49740	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.503297091 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:49.503441095 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:49.503469944 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:49.503487110 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:49.503520966 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:49.503562927 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:49.508961916 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:49.508977890 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:49.508989096 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:49.509000063 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:49.509238005 CET	80	49739	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:49.509288073 CET	49739	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:49.800523043 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.845371008 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.933058023 CET	5651	49740	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:49.933131933 CET	49740	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.933195114 CET	49740	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:49.939060926 CET	5651	49740	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:50.801268101 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:50.845371962 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:51.802674055 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:51.845362902 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:52.091362953 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:52.091425896 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:52.683064938 CET	465	49725	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:52.683244944 CET	49725	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:52.683284998 CET	49725	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:52.688756943 CET	465	49725	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:52.767105103 CET	5555	49727	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:52.767318964 CET	49727	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:52.767407894 CET	49727	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:52.772819042 CET	5555	49727	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:52.800825119 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:52.847943068 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:53.801311016 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:53.845407963 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:54.802148104 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:54.845443964 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.320740938 CET	49741	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.326302052 CET	5651	49741	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.326401949 CET	49741	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.332134962 CET	49742	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.338803053 CET	80	49742	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.338912964 CET	49742	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.348081112 CET	49743	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.354804039 CET	465	49743	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.354877949 CET	49743	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.363809109 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:55.369327068 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:55.369467020 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:55.379062891 CET	49745	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:55.384849072 CET	5555	49745	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:55.385138988 CET	49745	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:55.455147982 CET	49741	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.455168009 CET	49741	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.460869074 CET	5651	49741	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.461016893 CET	5651	49741	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.470499992 CET	49742	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.470546007 CET	49742	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.475914955 CET	80	49742	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.476023912 CET	80	49742	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.486129045 CET	49743	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.486339092 CET	49743	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:55.491631985 CET	465	49743	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.491736889 CET	465	49743	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.501784086 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:55.501914978 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:55.507163048 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:55.507401943 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:55.517448902 CET	49745	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:55.517553091 CET	49745	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:55.522841930 CET	5555	49745	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:55.522916079 CET	5555	49745	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:55.801934958 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:55.845402956 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.044115067 CET	80	49742	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.044308901 CET	49742	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.044374943 CET	49742	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.050004005 CET	80	49742	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.066638947 CET	49746	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.072145939 CET	80	49746	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.072221994 CET	49746	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.076195002 CET	5651	49741	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.076262951 CET	49741	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.076302052 CET	49741	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.081798077 CET	5651	49741	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.176249027 CET	49747	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.181684017 CET	5651	49747	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.181767941 CET	49747	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.204993963 CET	49746	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.205801010 CET	49746	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.210561991 CET	80	49746	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.211334944 CET	80	49746	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.235563993 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.235964060 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.235964060 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.235964060 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.235964060 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.235964060 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.241307974 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.241317034 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.241326094 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.241352081 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.248358965 CET	80	49744	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.248505116 CET	49744	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.285660028 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.291132927 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.291202068 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.315675020 CET	49747	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.315689087 CET	49747	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.321274996 CET	5651	49747	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.321285009 CET	5651	49747	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.425007105 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.425007105 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:56.430649996 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.431229115 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:56.799663067 CET	80	49746	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.799762964 CET	49746	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.799834013 CET	49746	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.802084923 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.805214882 CET	80	49746	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.832684040 CET	49749	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.838392973 CET	80	49749	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.838525057 CET	49749	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.845388889 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.919210911 CET	5651	49747	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.919307947 CET	49747	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.919357061 CET	49747	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.924844980 CET	5651	49747	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.941754103 CET	49750	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.947115898 CET	5651	49750	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.947199106 CET	49750	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.970607042 CET	49749	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.970624924 CET	49749	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:56.976052999 CET	80	49749	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:56.976090908 CET	80	49749	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.080899000 CET	49750	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.080946922 CET	49750	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.086595058 CET	5651	49750	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.087388039 CET	5651	49750	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.165908098 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.166244984 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.166245937 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.166245937 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.166245937 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.166245937 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.171824932 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.171905041 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.171915054 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.171920061 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.175417900 CET	80	49748	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.175498962 CET	49748	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.270118952 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.275955915 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.276036978 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.408214092 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.408267021 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:57.413779974 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.413801908 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:57.553287983 CET	80	49749	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.553399086 CET	49749	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.553472996 CET	49749	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.558842897 CET	80	49749	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.598099947 CET	49752	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.603554964 CET	80	49752	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.603650093 CET	49752	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.722453117 CET	5651	49750	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.722697020 CET	49750	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.722697020 CET	49750	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.728199959 CET	5651	49750	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.736399889 CET	49752	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.736399889 CET	49752	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.741873980 CET	80	49752	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.742862940 CET	80	49752	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.802644014 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.816828966 CET	49753	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.822206020 CET	5651	49753	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.822396994 CET	49753	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.845447063 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.955271959 CET	49753	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.956212997 CET	49753	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:57.960644960 CET	5651	49753	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:57.961532116 CET	5651	49753	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.152532101 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.152854919 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.152854919 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.152854919 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.152854919 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.152854919 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.158575058 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.158611059 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.158622980 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.158631086 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.159311056 CET	80	49751	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.159372091 CET	49751	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.254468918 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.260023117 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.260113001 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.348802090 CET	80	49752	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.349067926 CET	49752	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.349067926 CET	49752	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.354444981 CET	80	49752	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.363846064 CET	49755	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.369277000 CET	80	49755	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.369379044 CET	49755	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.392906904 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.393105984 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:58.398473024 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.398504019 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:58.502115011 CET	49755	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.502115965 CET	49755	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.507564068 CET	80	49755	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.507934093 CET	80	49755	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.606869936 CET	5651	49753	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.606930017 CET	49753	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.607079983 CET	49753	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.612631083 CET	5651	49753	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.691467047 CET	49757	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.696902990 CET	5651	49757	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.696980000 CET	49757	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.702523947 CET	5651	49757	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.702590942 CET	49757	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.804214954 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.831115961 CET	49757	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.831271887 CET	49757	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.831271887 CET	49757	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.836491108 CET	5651	49757	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.836570024 CET	5651	49757	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.836782932 CET	5651	49757	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.845498085 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.908970118 CET	49758	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:58.914356947 CET	5651	49758	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:58.914450884 CET	49758	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.048841953 CET	49758	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.048841953 CET	49758	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.054647923 CET	5651	49758	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.054672956 CET	5651	49758	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.101955891 CET	80	49755	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.102123976 CET	49755	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.102150917 CET	49755	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.107625008 CET	80	49755	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.127638102 CET	49759	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.133060932 CET	80	49759	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.133183002 CET	49759	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.141084909 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:59.141246080 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:59.141246080 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:59.141246080 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:59.141298056 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:59.141298056 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:59.146615028 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:59.146625996 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:59.146636963 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:59.147066116 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:59.147214890 CET	80	49754	65.21.245.7	192.168.2.7
Oct 29, 2024 16:45:59.147285938 CET	49754	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:45:59.267527103 CET	49759	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.267527103 CET	49759	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.273186922 CET	80	49759	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.273372889 CET	80	49759	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.644088030 CET	5651	49758	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.644151926 CET	49758	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.644217014 CET	49758	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.650276899 CET	5651	49758	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.812819004 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.845947981 CET	80	49759	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.846008062 CET	49759	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.846046925 CET	49759	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:45:59.851744890 CET	80	49759	111.90.140.76	192.168.2.7
Oct 29, 2024 16:45:59.861027956 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:00.813169003 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:00.861027002 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.176126957 CET	49760	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.181585073 CET	5651	49760	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.181660891 CET	49760	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.190155029 CET	49761	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.195830107 CET	80	49761	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.195904016 CET	49761	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.205662966 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:01.211128950 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:01.211294889 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:01.314577103 CET	49760	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.314577103 CET	49760	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.320000887 CET	5651	49760	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.320035934 CET	5651	49760	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.329957962 CET	49761	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.329958916 CET	49761	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.336422920 CET	80	49761	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.337243080 CET	80	49761	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.346065998 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:01.346714020 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:01.353286982 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:01.353302956 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:01.818620920 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.861316919 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.944359064 CET	5651	49760	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.945163012 CET	49760	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.945200920 CET	49760	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.945957899 CET	80	49761	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.949145079 CET	49761	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.949172974 CET	49761	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.950692892 CET	5651	49760	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.954823017 CET	80	49761	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.971591949 CET	49763	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.977015972 CET	5651	49763	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.977093935 CET	49763	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.986912012 CET	49764	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:01.992317915 CET	80	49764	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:01.992379904 CET	49764	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.076998949 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.077090025 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.077115059 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.077115059 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.077115059 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.077133894 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.080595970 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.082812071 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.082823038 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.082832098 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.082843065 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.083511114 CET	80	49762	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.083559036 CET	49762	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.085885048 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.085951090 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.111234903 CET	49763	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.111259937 CET	49763	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.116700888 CET	5651	49763	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.116777897 CET	5651	49763	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.126724958 CET	49764	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.126812935 CET	49764	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.132134914 CET	80	49764	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.132180929 CET	80	49764	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.220679998 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.221098900 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.226340055 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.226492882 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.705852032 CET	5651	49763	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.705944061 CET	49763	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.705996990 CET	49763	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.711929083 CET	5651	49763	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.722253084 CET	80	49764	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.723406076 CET	49764	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.723448992 CET	49764	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.728775978 CET	80	49764	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.737230062 CET	49766	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.742655039 CET	5651	49766	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.744132996 CET	49766	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.754565954 CET	49767	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.759949923 CET	80	49767	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.762012005 CET	49767	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.834045887 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.878051996 CET	49766	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.879278898 CET	49766	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.879395962 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.883445024 CET	5651	49766	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.884593964 CET	5651	49766	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.894648075 CET	49767	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.895385981 CET	49767	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:02.900152922 CET	80	49767	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.900672913 CET	80	49767	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:02.951858997 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.953308105 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.953345060 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.953345060 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.953367949 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.953367949 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.958791018 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.958801985 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.958810091 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.958821058 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.958847046 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.959378958 CET	80	49765	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.959425926 CET	49765	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:02.964195967 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:02.964287043 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.106194019 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.106221914 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.111826897 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.111991882 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.481714010 CET	5651	49766	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.481919050 CET	49766	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.481920004 CET	49766	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.484143019 CET	80	49767	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.484261990 CET	49767	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.484262943 CET	49767	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.488620043 CET	5651	49766	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.490941048 CET	80	49767	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.502973080 CET	49769	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.509819031 CET	5651	49769	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.510035038 CET	49769	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.518524885 CET	49770	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.526349068 CET	80	49770	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.526424885 CET	49770	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.643862963 CET	49769	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.643862963 CET	49769	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.649281979 CET	5651	49769	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.649430990 CET	5651	49769	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.658252001 CET	49770	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.658278942 CET	49770	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.663759947 CET	80	49770	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.663819075 CET	80	49770	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.815782070 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.815886021 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.815910101 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.815910101 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.815918922 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.815943956 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.821558952 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.821568012 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.821577072 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.821599960 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.822426081 CET	80	49768	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.822479963 CET	49768	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.830730915 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.835171938 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.836412907 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.836477995 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.841022968 CET	465	49743	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.841085911 CET	49743	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.841140032 CET	49743	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.846530914 CET	465	49743	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.876574993 CET	5555	49745	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.876646996 CET	49745	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.876689911 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.876745939 CET	49745	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.882546902 CET	5555	49745	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.940025091 CET	49772	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.945502996 CET	465	49772	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:03.945568085 CET	49772	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:03.955674887 CET	49773	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.961797953 CET	5555	49773	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.961966038 CET	49773	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.970552921 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.970576048 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:03.975986004 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:03.976000071 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.080003977 CET	49772	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:04.080055952 CET	49772	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:04.085625887 CET	465	49772	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:04.085737944 CET	465	49772	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:04.095488071 CET	49773	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.095531940 CET	49773	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.100836039 CET	5555	49773	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.100944996 CET	5555	49773	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.278306007 CET	80	49770	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:04.278498888 CET	49770	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:04.278498888 CET	49770	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:04.286174059 CET	80	49770	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:04.377865076 CET	49774	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:04.383264065 CET	80	49774	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:04.383343935 CET	49774	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:04.519484043 CET	49774	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:04.519517899 CET	49774	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:04.524918079 CET	80	49774	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:04.524940968 CET	80	49774	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:04.700416088 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.700676918 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.700676918 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.700676918 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.700676918 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.700676918 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.705809116 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.706053972 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.706065893 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.706074953 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.706116915 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.706547976 CET	80	49771	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.706598043 CET	49771	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.711153030 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.711242914 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.839940071 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:04.845710993 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.845710993 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:04.851435900 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.851519108 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:04.892420053 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.133744001 CET	80	49774	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.133905888 CET	49774	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.133982897 CET	49774	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.139307976 CET	80	49774	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.143266916 CET	49776	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.148798943 CET	80	49776	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.148921967 CET	49776	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.256017923 CET	5651	49769	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.256172895 CET	49769	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.256172895 CET	49769	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.261792898 CET	5651	49769	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.283874989 CET	49776	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.283874989 CET	49776	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.289292097 CET	80	49776	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.289309978 CET	80	49776	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.413120031 CET	49777	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.418956041 CET	5651	49777	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.419012070 CET	49777	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.502912998 CET	49777	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.502929926 CET	49777	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.508366108 CET	5651	49777	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.508476019 CET	5651	49777	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.576780081 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.626694918 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.626976013 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.626987934 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.627000093 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.627012014 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.627042055 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.632380962 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.632390976 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.632400036 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.632420063 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.633332968 CET	80	49775	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.633383036 CET	49775	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.634318113 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.640077114 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.640145063 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.841886044 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.856143951 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.856161118 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:05.865490913 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.865592003 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:05.873744965 CET	80	49776	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.873806000 CET	49776	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.874773979 CET	49776	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.880053997 CET	80	49776	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.892316103 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.909245014 CET	49779	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:05.915100098 CET	80	49779	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:05.915175915 CET	49779	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.048732996 CET	49779	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.048755884 CET	49779	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.055111885 CET	80	49779	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.055128098 CET	80	49779	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.145180941 CET	5651	49777	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.145276070 CET	49777	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.145325899 CET	49777	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.150655031 CET	5651	49777	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.237318993 CET	49780	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.243397951 CET	5651	49780	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.243530989 CET	49780	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.378216982 CET	49780	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.378216982 CET	49780	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.383960962 CET	5651	49780	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.383994102 CET	5651	49780	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.500452042 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.500547886 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.500583887 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.500583887 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.500595093 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.500621080 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.510406971 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.510417938 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.510427952 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.510437965 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.510726929 CET	80	49778	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.510761976 CET	49778	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.565625906 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.572886944 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.573084116 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.638452053 CET	80	49779	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.638982058 CET	49779	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.638982058 CET	49779	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.644491911 CET	80	49779	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.674787045 CET	49782	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.680227995 CET	80	49782	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.680290937 CET	49782	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.705948114 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.705948114 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:06.712378025 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.712431908 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:06.815906048 CET	49782	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.817107916 CET	49782	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.821417093 CET	80	49782	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.823246002 CET	80	49782	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.849611044 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.892431021 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.959336042 CET	5651	49780	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:06.959414005 CET	49780	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.959453106 CET	49780	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:06.965068102 CET	5651	49780	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.002675056 CET	49783	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.008163929 CET	5651	49783	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.008229971 CET	49783	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.142483950 CET	49783	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.142483950 CET	49783	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.149243116 CET	5651	49783	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.149786949 CET	5651	49783	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.397351027 CET	80	49782	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.397470951 CET	49782	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.397526026 CET	49782	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.404072046 CET	80	49782	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.440176964 CET	49784	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.446615934 CET	80	49784	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.446705103 CET	49784	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.447204113 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:07.447304010 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:07.447304010 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:07.447336912 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:07.447336912 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:07.447361946 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:07.453505993 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:07.453586102 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:07.453596115 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:07.453605890 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:07.453648090 CET	80	49781	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:07.453705072 CET	49781	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:07.579955101 CET	49784	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.580003023 CET	49784	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.587203026 CET	80	49784	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.587218046 CET	80	49784	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.756242037 CET	5651	49783	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.756314039 CET	49783	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.756380081 CET	49783	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:07.761713028 CET	5651	49783	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.860390902 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:07.907932043 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:08.198472023 CET	80	49784	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:08.198538065 CET	49784	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:08.198604107 CET	49784	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:08.204866886 CET	80	49784	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.016391039 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.064408064 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.488574028 CET	49785	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.495764017 CET	5651	49785	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.495852947 CET	49785	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.503160000 CET	49786	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.509982109 CET	80	49786	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.510051966 CET	49786	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.518013954 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:09.523865938 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:09.523932934 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:09.626909971 CET	49785	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.626934052 CET	49785	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.632327080 CET	5651	49785	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.632477999 CET	5651	49785	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.642462969 CET	49786	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.642487049 CET	49786	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:09.647800922 CET	80	49786	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.647944927 CET	80	49786	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.658158064 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:09.658179998 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:09.663458109 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:09.663728952 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:09.890199900 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:09.939224005 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.233071089 CET	80	49786	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.233225107 CET	49786	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.233262062 CET	49786	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.233944893 CET	5651	49785	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.234019995 CET	49785	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.234061003 CET	49785	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.238766909 CET	80	49786	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.239396095 CET	5651	49785	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.284749031 CET	49789	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.290657043 CET	5651	49789	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.290770054 CET	49789	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.300216913 CET	49790	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.306025028 CET	80	49790	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.306199074 CET	49790	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.419078112 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:10.419198036 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.419223070 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.419223070 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.419261932 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.419261932 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.424791098 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:10.424803019 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:10.424810886 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:10.424820900 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:10.425118923 CET	49789	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.425162077 CET	49789	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.425349951 CET	80	49787	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:10.425400972 CET	49787	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.430998087 CET	5651	49789	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.431045055 CET	5651	49789	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.439651012 CET	49790	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.441147089 CET	49790	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:10.445532084 CET	80	49790	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.446563959 CET	80	49790	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:10.503103018 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.509773970 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:10.509872913 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.644423962 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.644479036 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:10.650005102 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:10.650130987 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.120467901 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.122860909 CET	5651	49789	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.122876883 CET	80	49790	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.122948885 CET	49789	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.122962952 CET	49790	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.123079062 CET	49789	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.123117924 CET	49790	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.128926992 CET	5651	49789	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.129031897 CET	80	49790	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.161236048 CET	49792	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.168576002 CET	5651	49792	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.168648005 CET	49792	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.173580885 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.176553011 CET	49793	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.182012081 CET	80	49793	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.182100058 CET	49793	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.301702976 CET	49792	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.301728010 CET	49792	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.308744907 CET	5651	49792	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.308789015 CET	5651	49792	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.315079927 CET	49793	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.315119982 CET	49793	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.320641994 CET	80	49793	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.320966959 CET	80	49793	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.392987967 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.393115997 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.393166065 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.393166065 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.393166065 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.393188953 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.400783062 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.400794029 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.400804043 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.400825977 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.401735067 CET	80	49791	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.401787043 CET	49791	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.490154028 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.498476028 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.498542070 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.628599882 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.628631115 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:11.634128094 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.634237051 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:11.888056040 CET	5651	49792	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.888204098 CET	49792	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.888290882 CET	49792	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.898093939 CET	5651	49792	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.910499096 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.911228895 CET	80	49793	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.915255070 CET	49793	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.915296078 CET	49793	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.922207117 CET	80	49793	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.927067041 CET	49795	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.934406042 CET	5651	49795	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.935388088 CET	49795	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.942382097 CET	49796	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.949529886 CET	80	49796	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:11.953181982 CET	49796	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:11.954857111 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.065156937 CET	49795	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.068356037 CET	49795	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.070542097 CET	5651	49795	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.073836088 CET	5651	49795	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.080301046 CET	49796	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.080351114 CET	49796	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.085773945 CET	80	49796	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.085828066 CET	80	49796	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.372549057 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.377867937 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.377868891 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.377868891 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.377868891 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.377868891 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.383416891 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.383450985 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.383480072 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.383507013 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.384016991 CET	80	49794	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.385143995 CET	49794	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.431114912 CET	465	49772	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.433259010 CET	49772	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.433259010 CET	49772	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.438745022 CET	465	49772	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.442445993 CET	5555	49773	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.445255995 CET	49773	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.445255995 CET	49773	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.451843023 CET	5555	49773	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.473716021 CET	49797	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.479238033 CET	465	49797	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.479336023 CET	49797	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.489418030 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.495276928 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.497152090 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.504106045 CET	49799	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.509685993 CET	5555	49799	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.513153076 CET	49799	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.611464977 CET	49797	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.611507893 CET	49797	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.616940975 CET	465	49797	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.617077112 CET	465	49797	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.627669096 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.627686024 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.633232117 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.633290052 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.642541885 CET	49799	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.642541885 CET	49799	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:12.651242971 CET	5555	49799	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.651947975 CET	5555	49799	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:12.674168110 CET	80	49796	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.674241066 CET	49796	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.674309969 CET	49796	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.679759026 CET	80	49796	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.680023909 CET	5651	49795	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.680079937 CET	49795	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.680125952 CET	49795	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.685878038 CET	5651	49795	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.696734905 CET	49800	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.702300072 CET	5651	49800	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.705164909 CET	49800	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.718240023 CET	49801	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.727155924 CET	80	49801	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.727221966 CET	49801	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.830233097 CET	49800	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.830277920 CET	49800	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.835773945 CET	5651	49800	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.835829020 CET	5651	49800	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.845632076 CET	49801	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.845674038 CET	49801	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:12.855087996 CET	80	49801	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.855211973 CET	80	49801	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.916346073 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:12.970506907 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.384890079 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.385196924 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.385196924 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.385196924 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.385196924 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.387120962 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.390638113 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.390796900 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.390925884 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.391038895 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.392963886 CET	80	49798	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.393045902 CET	49798	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.458043098 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.705800056 CET	5651	49800	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.705933094 CET	49800	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.706006050 CET	49800	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.706527948 CET	80	49801	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.706604004 CET	49801	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.706645966 CET	49801	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.707973957 CET	5651	49800	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.708019018 CET	80	49801	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.708058119 CET	49800	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.708067894 CET	49801	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.708312988 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.708391905 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.712577105 CET	5651	49800	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.713788986 CET	80	49801	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.736932039 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.736953020 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:13.743242025 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.743297100 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:13.785947084 CET	49803	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.791529894 CET	5651	49803	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.791604996 CET	49803	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.801244974 CET	49804	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.807148933 CET	80	49804	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.807229042 CET	49804	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.922333002 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.924108028 CET	49803	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.924129009 CET	49803	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.929661989 CET	5651	49803	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.929820061 CET	5651	49803	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.939412117 CET	49804	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.939440966 CET	49804	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:13.944951057 CET	80	49804	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.945075035 CET	80	49804	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:13.970499039 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.530447006 CET	80	49804	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.530529022 CET	49804	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.530606985 CET	49804	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.536011934 CET	80	49804	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.551259995 CET	49805	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.557384968 CET	80	49805	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.557528973 CET	49805	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.566942930 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.567065954 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.567091942 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.567102909 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.567123890 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.567162991 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.569199085 CET	5651	49803	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.569256067 CET	49803	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.569319963 CET	49803	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.572696924 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.572781086 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.572809935 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.573075056 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.573735952 CET	80	49802	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.573781967 CET	49802	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.574795961 CET	5651	49803	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.660484076 CET	49806	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.665927887 CET	5651	49806	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.666029930 CET	49806	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.676199913 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.682495117 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.682570934 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.689614058 CET	49805	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.691133022 CET	49805	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.695149899 CET	80	49805	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.697608948 CET	80	49805	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.798844099 CET	49806	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.798890114 CET	49806	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:14.804446936 CET	5651	49806	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.804532051 CET	5651	49806	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.814424038 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.815087080 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:14.819778919 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.820414066 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:14.923166037 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:14.970462084 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.284327984 CET	80	49805	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.284425020 CET	49805	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.284482956 CET	49805	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.292859077 CET	80	49805	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.316771030 CET	49808	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.328895092 CET	80	49808	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.329062939 CET	49808	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.412992954 CET	5651	49806	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.413081884 CET	49806	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.413170099 CET	49806	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.418682098 CET	5651	49806	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.427445889 CET	49809	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.433171034 CET	5651	49809	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.433311939 CET	49809	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.455300093 CET	49808	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.455329895 CET	49808	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.460771084 CET	80	49808	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.460797071 CET	80	49808	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.556030989 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.556157112 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.556194067 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.556359053 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.556375980 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.556411982 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.564593077 CET	49809	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.564609051 CET	49809	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:15.564853907 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.564974070 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.565004110 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.565112114 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.566616058 CET	80	49807	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.566667080 CET	49807	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.569996119 CET	5651	49809	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.570219994 CET	5651	49809	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.646595955 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.652002096 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.652244091 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.784415960 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.784481049 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:15.794688940 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.794718027 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:15.937268972 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:15.986136913 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.072058916 CET	80	49808	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.072139025 CET	49808	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.072201014 CET	49808	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.077785969 CET	80	49808	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.082400084 CET	49811	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.088268042 CET	80	49811	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.088351965 CET	49811	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.166101933 CET	5651	49809	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.166906118 CET	49809	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.166984081 CET	49809	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.172482014 CET	5651	49809	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.192610979 CET	49812	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.198457003 CET	5651	49812	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.198532104 CET	49812	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.220761061 CET	49811	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.220807076 CET	49811	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.226138115 CET	80	49811	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.226619005 CET	80	49811	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.330075979 CET	49812	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.330118895 CET	49812	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.494261026 CET	5651	49812	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.494366884 CET	5651	49812	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.568419933 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.569242954 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.569277048 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.569277048 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.569319010 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.569319010 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.574738026 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.574774981 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.574805021 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.574996948 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.575428009 CET	80	49810	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.577147961 CET	49810	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.629555941 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.635143042 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.637171984 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.767946959 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.768516064 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:16.773453951 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.773963928 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:16.828836918 CET	80	49811	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.829998016 CET	49811	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.830117941 CET	49811	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.835782051 CET	80	49811	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.848184109 CET	49814	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.853636026 CET	80	49814	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.853826046 CET	49814	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.932594061 CET	5651	49812	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.932652950 CET	49812	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.932723045 CET	49812	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.938049078 CET	5651	49812	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.954586029 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.957479000 CET	49815	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.962774992 CET	5651	49815	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.962867975 CET	49815	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.986337900 CET	49814	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.986407042 CET	49814	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:16.991794109 CET	80	49814	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:16.991858006 CET	80	49814	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.001715899 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.095900059 CET	49815	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.095922947 CET	49815	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.103171110 CET	5651	49815	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.104001999 CET	5651	49815	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.523242950 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.523412943 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.523468018 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.523468018 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.523477077 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.523516893 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.529158115 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.529174089 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.529186964 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.529203892 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.530138016 CET	80	49813	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.530184984 CET	49813	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.604084969 CET	80	49814	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.604154110 CET	49814	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.604227066 CET	49814	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.609699011 CET	80	49814	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.613708973 CET	49816	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.619352102 CET	80	49816	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.619452953 CET	49816	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.629195929 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.634572983 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.634654999 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.680033922 CET	5651	49815	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.680140018 CET	49815	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.680186033 CET	49815	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.685633898 CET	5651	49815	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.723047018 CET	49818	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.728569031 CET	5651	49818	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.728646040 CET	49818	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.751934052 CET	49816	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.751981020 CET	49816	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.764808893 CET	80	49816	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.765371084 CET	80	49816	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.767546892 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.767580986 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:17.773081064 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.773144960 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:17.861702919 CET	49818	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.861728907 CET	49818	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:17.867238045 CET	5651	49818	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.867326021 CET	5651	49818	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:17.967385054 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.017347097 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.333822012 CET	80	49816	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.333929062 CET	49816	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.334048986 CET	49816	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.339437962 CET	80	49816	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.379534006 CET	49819	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.385229111 CET	80	49819	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.385333061 CET	49819	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.436486006 CET	5651	49818	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.436578989 CET	49818	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.436650038 CET	49818	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.442121983 CET	5651	49818	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.506680965 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:18.515883923 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:18.515908003 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:18.515908003 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:18.515928030 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:18.515964985 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:18.521626949 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:18.521661043 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:18.521689892 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:18.521784067 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:18.523758888 CET	80	49817	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:18.523824930 CET	49817	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:18.534810066 CET	49819	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.534846067 CET	49819	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.536310911 CET	49820	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.540314913 CET	80	49819	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.541361094 CET	80	49819	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.541986942 CET	5651	49820	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.542051077 CET	49820	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.676840067 CET	49820	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.676883936 CET	49820	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:18.682503939 CET	5651	49820	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.683099031 CET	5651	49820	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:18.968694925 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:19.017441988 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:19.168515921 CET	80	49819	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:19.168631077 CET	49819	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:19.168711901 CET	49819	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:19.174166918 CET	80	49819	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:19.286576033 CET	5651	49820	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:19.286658049 CET	49820	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:19.286777020 CET	49820	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:19.292691946 CET	5651	49820	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:19.984723091 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.032973051 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.551184893 CET	49821	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.556962013 CET	5651	49821	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.557053089 CET	49821	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.565068960 CET	49822	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.570463896 CET	80	49822	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.570547104 CET	49822	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.580641031 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:20.586488962 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:20.586652994 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:20.689351082 CET	49821	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.689397097 CET	49821	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.694858074 CET	5651	49821	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.694889069 CET	5651	49821	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.705173016 CET	49822	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.705653906 CET	49822	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.710544109 CET	80	49822	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.710937023 CET	80	49822	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.720768929 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:20.720957994 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:20.726382017 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:20.726485968 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:20.978929996 CET	465	49797	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.979021072 CET	49797	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.979094982 CET	49797	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:20.984611034 CET	465	49797	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:20.999707937 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.009380102 CET	49824	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.014832020 CET	465	49824	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.014890909 CET	49824	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.037341118 CET	5555	49799	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.037415981 CET	49799	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.048618078 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.052083969 CET	49799	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.057575941 CET	5555	49799	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.140120029 CET	49825	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.143762112 CET	49824	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.143793106 CET	49824	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.145509958 CET	5555	49825	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.145585060 CET	49825	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.149090052 CET	465	49824	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.149139881 CET	465	49824	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.284284115 CET	5651	49821	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.284372091 CET	49821	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.299266100 CET	80	49822	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.299336910 CET	49822	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.343516111 CET	49821	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.344780922 CET	49822	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.348890066 CET	5651	49821	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.350035906 CET	80	49822	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.350341082 CET	49825	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.350399017 CET	49825	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.355751991 CET	5555	49825	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.355778933 CET	5555	49825	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.440382004 CET	49826	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.455710888 CET	49827	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.614065886 CET	5651	49826	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.614180088 CET	49826	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.614382982 CET	80	49827	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.614490986 CET	49827	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.720531940 CET	49826	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.720567942 CET	49826	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.725903988 CET	5651	49826	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.726012945 CET	5651	49826	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.736210108 CET	49827	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.736210108 CET	49827	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:21.741556883 CET	80	49827	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.741570950 CET	80	49827	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:21.946594000 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.946685076 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.946703911 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.946703911 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.946713924 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.946737051 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.953284979 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.953301907 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.953315020 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.953327894 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.953874111 CET	80	49823	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.953921080 CET	49823	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.987102985 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:21.992842913 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:21.992933989 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.000178099 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.048638105 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.127185106 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.129132986 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.132843971 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.134520054 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.335705996 CET	5651	49826	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.335808039 CET	49826	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.335854053 CET	49826	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.339236975 CET	80	49827	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.339325905 CET	49827	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.339380026 CET	49827	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.341422081 CET	5651	49826	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.345264912 CET	80	49827	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.424556017 CET	49829	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.440007925 CET	49830	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.670658112 CET	5651	49829	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.670672894 CET	80	49830	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.670903921 CET	49829	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.671092033 CET	49830	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.705187082 CET	49829	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.707336903 CET	49829	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.710685015 CET	5651	49829	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.712660074 CET	5651	49829	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.720587969 CET	49830	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.720623016 CET	49830	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:22.725996017 CET	80	49830	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.726824045 CET	80	49830	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:22.866338015 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.866480112 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.866504908 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.866504908 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.866504908 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.866532087 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.872066975 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.872078896 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.872087002 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.872098923 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.872881889 CET	80	49828	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.872927904 CET	49828	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.971420050 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:22.977067947 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:22.977143049 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.041147947 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.095493078 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.111635923 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.111676931 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.117067099 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.117099047 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.410423994 CET	80	49830	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.410521030 CET	49830	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.410578966 CET	49830	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.412125111 CET	5651	49829	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.412198067 CET	49829	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.412236929 CET	49829	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.416204929 CET	80	49830	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.417618990 CET	5651	49829	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.518415928 CET	49832	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.523893118 CET	5651	49832	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.524002075 CET	49832	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.533880949 CET	49833	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.539870977 CET	80	49833	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.539952040 CET	49833	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.658328056 CET	49832	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.658346891 CET	49832	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.663773060 CET	5651	49832	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.663783073 CET	5651	49832	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.673681974 CET	49833	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.675156116 CET	49833	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:23.679253101 CET	80	49833	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.680628061 CET	80	49833	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:23.842854977 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.843022108 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.843054056 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.843054056 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.843070984 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.843070984 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.846672058 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.848408937 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.848563910 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.848686934 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.848696947 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.852507114 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.852603912 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.853749990 CET	80	49831	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.853794098 CET	49831	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.986988068 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.987000942 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:23.992655993 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:23.992676020 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.054111004 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.095550060 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.451132059 CET	5651	49832	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.451253891 CET	49832	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.451257944 CET	80	49833	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.451283932 CET	49832	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.451328993 CET	49833	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.451344013 CET	49833	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.454658031 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.454715014 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.459086895 CET	5651	49832	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.459127903 CET	80	49833	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.502964020 CET	49835	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.509191990 CET	5651	49835	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.509274006 CET	49835	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.518094063 CET	49836	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.523848057 CET	80	49836	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.523931026 CET	49836	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.642755985 CET	49835	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.643018007 CET	49835	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.648073912 CET	5651	49835	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.648288965 CET	5651	49835	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.658036947 CET	49836	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.658077002 CET	49836	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:24.663608074 CET	80	49836	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.663633108 CET	80	49836	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:24.724673986 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.724783897 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.724823952 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.724823952 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.724824905 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.724838018 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.731173992 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.731193066 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.731203079 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.731331110 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.731849909 CET	80	49834	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.731901884 CET	49834	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.831123114 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.839406013 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.839529991 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.971014977 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.971014977 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:24.979326963 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:24.980108023 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:25.050438881 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.095604897 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.335232019 CET	5651	49835	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.335330963 CET	49835	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.335361958 CET	49835	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.336606979 CET	80	49836	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.336663008 CET	49836	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.336709976 CET	49836	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.342509031 CET	5651	49835	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.342530012 CET	80	49836	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.377662897 CET	49838	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.384262085 CET	5651	49838	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.384334087 CET	49838	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.393228054 CET	49839	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.398847103 CET	80	49839	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.398920059 CET	49839	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.518249989 CET	49838	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.518309116 CET	49838	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.524080992 CET	5651	49838	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.524503946 CET	5651	49838	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.533246040 CET	49839	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.533269882 CET	49839	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:25.538635015 CET	80	49839	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.539073944 CET	80	49839	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:25.705903053 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:25.706056118 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:25.706115007 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:25.706115007 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:25.706115007 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:25.706115007 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:25.711595058 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:25.711647034 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:25.711663008 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:25.711672068 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:25.712852955 CET	80	49837	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:25.712905884 CET	49837	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:26.063801050 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:26.249185085 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.250128031 CET	80	49839	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.250219107 CET	49839	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.250276089 CET	49839	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.252228022 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:26.252336025 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:26.252885103 CET	49841	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.255606890 CET	80	49839	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.258950949 CET	80	49841	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.259021044 CET	49841	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.266194105 CET	80	49841	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.266254902 CET	49841	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.298640966 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.314464092 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:26.314465046 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:26.320367098 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:26.320534945 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:26.392842054 CET	49841	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.392865896 CET	49841	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.392899990 CET	49841	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.398154974 CET	80	49841	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.398190022 CET	80	49841	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.398276091 CET	80	49841	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.471302986 CET	49842	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.477092981 CET	80	49842	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.477180958 CET	49842	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.611401081 CET	49842	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.611443996 CET	49842	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:26.616863966 CET	80	49842	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:26.616884947 CET	80	49842	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.062222958 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.111155987 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.123948097 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.124119043 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.124138117 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.124138117 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.124150038 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.124180079 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.127810001 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.129635096 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.129689932 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.129699945 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.129709005 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.129981995 CET	80	49840	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.130058050 CET	49840	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.133140087 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.133256912 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.141123056 CET	5651	49838	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.141185999 CET	49838	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.141346931 CET	49838	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.146589994 CET	5651	49838	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.215361118 CET	80	49842	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.215426922 CET	49842	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.215496063 CET	49842	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.220916033 CET	80	49842	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.237591982 CET	49844	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.243021965 CET	5651	49844	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.243114948 CET	49844	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.252789021 CET	49845	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.258153915 CET	80	49845	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.258209944 CET	49845	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.268008947 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.268035889 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:27.273318052 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.273348093 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:27.377140999 CET	49844	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.377159119 CET	49844	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.385056019 CET	5651	49844	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.385066986 CET	5651	49844	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.392601967 CET	49845	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.392625093 CET	49845	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.398037910 CET	80	49845	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.398050070 CET	80	49845	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.966037989 CET	80	49845	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.966141939 CET	49845	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.966196060 CET	49845	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.971587896 CET	80	49845	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.983436108 CET	5651	49844	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:27.983515978 CET	49844	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.983557940 CET	49844	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:27.988986969 CET	5651	49844	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.002688885 CET	49846	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.004812956 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:28.004920959 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:28.004937887 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:28.004937887 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:28.004975080 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:28.004975080 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:28.008049965 CET	5651	49846	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.008268118 CET	49846	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.010510921 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:28.010598898 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:28.010607004 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:28.010615110 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:28.018094063 CET	49847	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.023622990 CET	80	49847	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.023726940 CET	49847	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.055843115 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:28.057972908 CET	80	49843	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:28.058031082 CET	49843	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:28.070532084 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.111157894 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.142584085 CET	49846	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.142621994 CET	49846	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.148050070 CET	5651	49846	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.148062944 CET	5651	49846	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.158221960 CET	49847	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.158221960 CET	49847	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.163588047 CET	80	49847	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.163624048 CET	80	49847	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.759780884 CET	80	49847	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.759892941 CET	49847	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.759938955 CET	49847	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.765311956 CET	80	49847	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.798753023 CET	5651	49846	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:28.798858881 CET	49846	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.798887968 CET	49846	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:28.804255962 CET	5651	49846	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:29.081433058 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:29.126754999 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:29.518493891 CET	465	49824	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:29.518567085 CET	49824	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:29.518634081 CET	49824	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:29.525041103 CET	465	49824	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:29.622919083 CET	5555	49825	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:29.623013020 CET	49825	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:29.623222113 CET	49825	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:29.628510952 CET	5555	49825	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:30.094434023 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:30.142420053 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:31.109532118 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:31.158171892 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.097716093 CET	49848	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.103336096 CET	5651	49848	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.103457928 CET	49848	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.111988068 CET	49849	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.117508888 CET	80	49849	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.117643118 CET	49849	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.127686024 CET	49850	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.127692938 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.133424997 CET	465	49850	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.133548975 CET	49850	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.143182039 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.148734093 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:32.148930073 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.159185886 CET	49852	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.166357040 CET	5555	49852	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:32.166450024 CET	49852	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.173866987 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.236644030 CET	49848	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.236644030 CET	49848	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.242274046 CET	5651	49848	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.242316008 CET	5651	49848	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.251964092 CET	49849	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.251964092 CET	49849	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.257399082 CET	80	49849	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.257596016 CET	80	49849	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.267824888 CET	49850	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.267826080 CET	49850	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.273775101 CET	465	49850	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.273806095 CET	465	49850	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.283400059 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.283400059 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.290011883 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:32.290043116 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:32.299071074 CET	49852	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.299256086 CET	49852	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.304733038 CET	5555	49852	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:32.304761887 CET	5555	49852	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:32.828483105 CET	5651	49848	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.828743935 CET	49848	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.828743935 CET	49848	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.834239006 CET	5651	49848	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.847770929 CET	80	49849	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.847847939 CET	49849	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.848020077 CET	49849	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.853482008 CET	80	49849	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.924967051 CET	49853	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.930850029 CET	5651	49853	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.930941105 CET	49853	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.941679001 CET	49854	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.947115898 CET	80	49854	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:32.947220087 CET	49854	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:32.997615099 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:32.997859001 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.998034954 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.998034954 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.998035908 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:32.998035908 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.004400969 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.004451036 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.004478931 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.004506111 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.004746914 CET	80	49851	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.004847050 CET	49851	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.036308050 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.041785002 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.041918993 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.074109077 CET	49853	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.074109077 CET	49853	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.079751015 CET	5651	49853	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.079787970 CET	5651	49853	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.136030912 CET	49854	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.136030912 CET	49854	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.140383959 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.141571045 CET	80	49854	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.141601086 CET	80	49854	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.189414978 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.197323084 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.197432995 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.202847958 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.202882051 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.658168077 CET	5651	49853	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.658282995 CET	49853	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.658392906 CET	49853	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.663824081 CET	5651	49853	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.685204983 CET	80	49854	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.685305119 CET	49854	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.685348034 CET	49854	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.690798998 CET	80	49854	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.690884113 CET	49856	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.696335077 CET	5651	49856	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.696466923 CET	49856	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.705943108 CET	49857	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.711419106 CET	80	49857	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.711504936 CET	49857	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.830507040 CET	49856	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.830534935 CET	49856	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.836024046 CET	5651	49856	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.836059093 CET	5651	49856	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.845839024 CET	49857	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.848153114 CET	49857	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:33.851421118 CET	80	49857	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.853718042 CET	80	49857	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:33.899934053 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.900105953 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.900165081 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.900185108 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.900212049 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.900266886 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.905596972 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.905630112 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.905739069 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.905767918 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.906279087 CET	80	49855	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.906349897 CET	49855	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.909837008 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:33.915684938 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:33.915785074 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.049364090 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.049396992 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.054873943 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.054905891 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.155679941 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.205038071 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.424866915 CET	5651	49856	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.424997091 CET	49856	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.425131083 CET	49856	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.430526972 CET	5651	49856	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.450457096 CET	80	49857	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.450557947 CET	49857	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.450737000 CET	49857	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.456298113 CET	80	49857	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.456547022 CET	49859	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.462011099 CET	5651	49859	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.462135077 CET	49859	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.510020971 CET	49860	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.515687943 CET	80	49860	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.515785933 CET	49860	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.595953941 CET	49859	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.595988989 CET	49859	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.601393938 CET	5651	49859	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.601402044 CET	5651	49859	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.642469883 CET	49860	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.642515898 CET	49860	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:34.648005962 CET	80	49860	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.648026943 CET	80	49860	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:34.788263083 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.788472891 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.788506031 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.788544893 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.788578987 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.788640976 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.793967009 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.793976068 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.793984890 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.793993950 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.794322014 CET	80	49858	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.794405937 CET	49858	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.893876076 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:34.899322987 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:34.899440050 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.033565998 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.037156105 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.039083958 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:35.042623043 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:35.163922071 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.192380905 CET	5651	49859	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.192455053 CET	49859	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.192497969 CET	49859	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.197870970 CET	5651	49859	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.204929113 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.222821951 CET	49862	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.228190899 CET	5651	49862	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.228342056 CET	49862	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.230559111 CET	80	49860	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.230659962 CET	49860	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.230684042 CET	49860	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.236115932 CET	80	49860	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.362128019 CET	49862	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.362145901 CET	49862	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.367583990 CET	5651	49862	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.367604017 CET	5651	49862	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.779797077 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:35.823204041 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.823244095 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.823244095 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.823244095 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.823322058 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.828748941 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:35.828766108 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:35.828779936 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:35.828793049 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:35.829837084 CET	80	49861	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:35.829956055 CET	49861	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:35.945976973 CET	5651	49862	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:35.946038961 CET	49862	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.948276043 CET	49862	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:35.953682899 CET	5651	49862	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:36.175055027 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:36.220637083 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:37.191179037 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:37.236231089 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:38.204309940 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:38.251811981 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.211363077 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:39.252003908 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.318111897 CET	49863	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.323652983 CET	5651	49863	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:39.323750973 CET	49863	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.331037045 CET	49864	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.336529970 CET	80	49864	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:39.336656094 CET	49864	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.346565962 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:39.352191925 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:39.352368116 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:39.455065966 CET	49863	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.455079079 CET	49863	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.460412025 CET	5651	49863	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:39.461213112 CET	5651	49863	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:39.470695019 CET	49864	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.470730066 CET	49864	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:39.476037979 CET	80	49864	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:39.476047993 CET	80	49864	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:39.486373901 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:39.486407042 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:39.491935015 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:39.492008924 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.047159910 CET	5651	49863	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.047271967 CET	49863	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.047301054 CET	49863	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.052639961 CET	5651	49863	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.064186096 CET	80	49864	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.064413071 CET	49864	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.064455986 CET	49864	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.069850922 CET	80	49864	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.144459009 CET	49866	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.150293112 CET	5651	49866	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.150468111 CET	49866	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.159225941 CET	49867	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.160012007 CET	5651	49866	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.160098076 CET	49866	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.164572954 CET	80	49867	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.164678097 CET	49867	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.218904018 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.228687048 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.228826046 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.228854895 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.228854895 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.228854895 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.228868008 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.234163046 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.234194040 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.234204054 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.234213114 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.235560894 CET	80	49865	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.235652924 CET	49865	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.252877951 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.258264065 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.258385897 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.267498016 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.283834934 CET	49866	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.283866882 CET	49866	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.283866882 CET	49866	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.289299965 CET	5651	49866	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.289362907 CET	5651	49866	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.289372921 CET	5651	49866	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.298851013 CET	49867	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.299298048 CET	49867	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.304318905 CET	80	49867	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.304913998 CET	80	49867	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.363548994 CET	49869	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.369055986 CET	5651	49869	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.369342089 CET	49869	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.393013000 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.395278931 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.398427963 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.400767088 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.501996040 CET	49869	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.503175020 CET	49869	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.507422924 CET	5651	49869	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.508539915 CET	5651	49869	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.610929012 CET	465	49850	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.611021996 CET	49850	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.611067057 CET	49850	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.616389036 CET	465	49850	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.679538012 CET	5555	49852	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.679670095 CET	49852	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.681627989 CET	49852	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.687182903 CET	5555	49852	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.690385103 CET	49870	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.695888042 CET	465	49870	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.695971966 CET	49870	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.705933094 CET	49871	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.711307049 CET	5555	49871	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.711440086 CET	49871	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.830518961 CET	49870	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.833204985 CET	49870	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.836031914 CET	465	49870	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.838593006 CET	465	49870	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.845748901 CET	49871	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.849168062 CET	49871	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:40.851223946 CET	5555	49871	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.854633093 CET	5555	49871	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:40.899946928 CET	80	49867	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.900109053 CET	49867	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.900327921 CET	49867	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.905672073 CET	80	49867	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.909528971 CET	49872	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:40.914834023 CET	80	49872	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:40.914953947 CET	49872	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.050620079 CET	49872	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.053231001 CET	49872	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.056205034 CET	80	49872	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.058608055 CET	80	49872	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.115267992 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.115452051 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.115494967 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.115494967 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.115494967 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.115494967 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.116395950 CET	5651	49869	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.116472960 CET	49869	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.116545916 CET	49869	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.121036053 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.121056080 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.121067047 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.121077061 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.121237993 CET	80	49868	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.121304035 CET	49868	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.121881008 CET	5651	49869	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.128813028 CET	49873	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.134533882 CET	5651	49873	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.134675980 CET	49873	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.143735886 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.149718046 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.149879932 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.234929085 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.267784119 CET	49873	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.267828941 CET	49873	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.273256063 CET	5651	49873	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.273267984 CET	5651	49873	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.283171892 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.283286095 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.283315897 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:41.288754940 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.288765907 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:41.635750055 CET	80	49872	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.635848045 CET	49872	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.635894060 CET	49872	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.641237020 CET	80	49872	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.674897909 CET	49875	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.680344105 CET	80	49875	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.680430889 CET	49875	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.816190958 CET	49875	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.816256046 CET	49875	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.821980953 CET	80	49875	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.822005987 CET	80	49875	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.868752956 CET	5651	49873	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.868936062 CET	49873	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.868937016 CET	49873	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.875415087 CET	5651	49873	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.893812895 CET	49876	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:41.899262905 CET	5651	49876	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:41.899375916 CET	49876	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.033931017 CET	49876	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.033962965 CET	49876	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.039659023 CET	5651	49876	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.039675951 CET	5651	49876	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.040828943 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.041079998 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.041080952 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.041080952 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.041080952 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.043498993 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.046590090 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.046602964 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.046612978 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.046622992 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.050782919 CET	80	49874	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.050856113 CET	49874	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.113075972 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.118480921 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.118671894 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.250000954 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.252650976 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.252650976 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.258285999 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.258296013 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.298980951 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.409697056 CET	80	49875	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.409804106 CET	49875	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.409907103 CET	49875	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.415308952 CET	80	49875	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.440594912 CET	49878	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.446652889 CET	80	49878	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.446762085 CET	49878	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.580406904 CET	49878	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.580542088 CET	49878	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.585733891 CET	80	49878	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.585840940 CET	80	49878	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.700382948 CET	5651	49876	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.700613976 CET	49876	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.700673103 CET	49876	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.706058979 CET	5651	49876	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.770010948 CET	49879	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.778770924 CET	5651	49879	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.778896093 CET	49879	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.908787966 CET	49879	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.908833027 CET	49879	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:42.914181948 CET	5651	49879	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.914200068 CET	5651	49879	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:42.988089085 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.988209963 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.988236904 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.988250017 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.988274097 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.988311052 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:42.993702888 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.993757963 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.993776083 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.993843079 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.994209051 CET	80	49877	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:42.994256020 CET	49877	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.102901936 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.109143972 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.109216928 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.169913054 CET	80	49878	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.170023918 CET	49878	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.170074940 CET	49878	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.177561045 CET	80	49878	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.206260920 CET	49881	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.214137077 CET	80	49881	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.214229107 CET	49881	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.236859083 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.236882925 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.244240999 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.244256020 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.259185076 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.314340115 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.345856905 CET	49881	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.345901966 CET	49881	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.353136063 CET	80	49881	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.353158951 CET	80	49881	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.525520086 CET	5651	49879	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.525660038 CET	49879	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.525785923 CET	49879	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.532042980 CET	5651	49879	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.534683943 CET	49882	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.540189981 CET	5651	49882	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.540309906 CET	49882	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.674288034 CET	49882	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.674319983 CET	49882	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.680079937 CET	5651	49882	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.680264950 CET	5651	49882	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.948005915 CET	80	49881	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.948195934 CET	49881	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.948195934 CET	49881	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.953547955 CET	80	49881	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.971951008 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.971986055 CET	49883	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.972063065 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.972075939 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.972100019 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.972114086 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.972137928 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:43.977488995 CET	80	49883	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:43.977560043 CET	49883	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:43.977560043 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.977570057 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.977855921 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.977865934 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.978528976 CET	80	49880	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:43.978575945 CET	49880	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:44.111445904 CET	49883	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:44.111506939 CET	49883	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:44.116873980 CET	80	49883	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:44.117124081 CET	80	49883	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:44.266082048 CET	5651	49882	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:44.266151905 CET	49882	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:44.266212940 CET	49882	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:44.269000053 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:44.272095919 CET	5651	49882	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:44.314524889 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:44.718839884 CET	80	49883	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:44.718961000 CET	49883	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:44.719034910 CET	49883	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:44.724427938 CET	80	49883	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:45.280929089 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:45.330090046 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.019438982 CET	49884	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.025796890 CET	5651	49884	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.025948048 CET	49884	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.034286976 CET	49885	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.040054083 CET	80	49885	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.040152073 CET	49885	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.049691916 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.055083036 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.055197001 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.158339024 CET	49884	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.158339024 CET	49884	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.164031029 CET	5651	49884	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.164064884 CET	5651	49884	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.174323082 CET	49885	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.174355030 CET	49885	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.181442022 CET	80	49885	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.181881905 CET	80	49885	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.190006018 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.190006018 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.195673943 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.195734978 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.295496941 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.345705032 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.750030041 CET	80	49885	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.750256062 CET	49885	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.750256062 CET	49885	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.756145954 CET	80	49885	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.765944004 CET	5651	49884	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.766119003 CET	49884	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.766119003 CET	49884	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.771621943 CET	5651	49884	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.818523884 CET	49887	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.824366093 CET	5651	49887	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.824460983 CET	49887	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.830813885 CET	49888	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.836122990 CET	80	49888	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.836194038 CET	49888	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.909029961 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.909132957 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.909166098 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.909166098 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.909184933 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.909214020 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.914448023 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.914537907 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.914551973 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.914973974 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.915664911 CET	80	49886	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.915740013 CET	49886	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.924854040 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.930294037 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:46.930366039 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:46.955307007 CET	49887	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.955323935 CET	49887	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.960613012 CET	5651	49887	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.960676908 CET	5651	49887	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.970782042 CET	49888	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.970941067 CET	49888	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:46.976517916 CET	80	49888	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:46.976727962 CET	80	49888	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.064951897 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.064980984 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.070672035 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.070687056 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.305248976 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.345634937 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.528412104 CET	5651	49887	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.528517008 CET	49887	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.528568983 CET	49887	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.533927917 CET	5651	49887	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.570034981 CET	80	49888	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.570132017 CET	49888	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.570174932 CET	49888	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.575460911 CET	80	49888	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.580871105 CET	49890	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.586163998 CET	5651	49890	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.586255074 CET	49890	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.596451044 CET	49891	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.601692915 CET	80	49891	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.601758003 CET	49891	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.720909119 CET	49890	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.723409891 CET	49890	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.726476908 CET	5651	49890	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.729412079 CET	5651	49890	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.736390114 CET	49891	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.736390114 CET	49891	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:47.741864920 CET	80	49891	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.741914988 CET	80	49891	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:47.795118093 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.795500994 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.795558929 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.795614958 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.795665026 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.795741081 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.799562931 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.800926924 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.800941944 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.800959110 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.800971985 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.801418066 CET	80	49889	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.801464081 CET	49889	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.804968119 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.805027962 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.939800024 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.939800978 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:47.945349932 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:47.945374012 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.305517912 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.329525948 CET	80	49891	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.329586983 CET	49891	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.329643965 CET	49891	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.330559015 CET	5651	49890	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.330636978 CET	49890	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.330666065 CET	49890	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.335014105 CET	80	49891	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.336096048 CET	5651	49890	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.345598936 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.346853018 CET	49893	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.352226973 CET	5651	49893	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.352355957 CET	49893	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.362313032 CET	49894	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.367717981 CET	80	49894	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.367835045 CET	49894	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.486742020 CET	49893	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.489175081 CET	49893	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.492126942 CET	5651	49893	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.495424986 CET	5651	49893	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.502058029 CET	49894	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.505172014 CET	49894	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:48.507525921 CET	80	49894	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.510512114 CET	80	49894	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:48.669361115 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.669538975 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.669574022 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.669574022 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.669574022 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.669598103 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.674701929 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.674864054 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.674875021 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.674882889 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.674952030 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.675441980 CET	80	49892	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.675502062 CET	49892	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.680078030 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.680151939 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.815043926 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.815190077 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:48.820529938 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:48.820552111 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.075438023 CET	5651	49893	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.075531960 CET	49893	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.075582981 CET	49893	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.080955982 CET	5651	49893	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.112560034 CET	49896	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.113960981 CET	80	49894	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.114046097 CET	49894	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.114087105 CET	49894	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.118175030 CET	5651	49896	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.118263006 CET	49896	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.119465113 CET	80	49894	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.180267096 CET	465	49870	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.180351019 CET	49870	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.180388927 CET	49870	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.186146021 CET	465	49870	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.190654039 CET	5555	49871	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.190732002 CET	49871	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:49.190798044 CET	49871	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:49.196376085 CET	5555	49871	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.252212048 CET	49896	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.255373955 CET	49896	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.257955074 CET	5651	49896	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.260761976 CET	5651	49896	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.319916964 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.361293077 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.556152105 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.556312084 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:49.556344032 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:49.556370974 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:49.556396961 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:49.556432962 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:49.561813116 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.561824083 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.561836004 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.561847925 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.562670946 CET	80	49895	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:49.562724113 CET	49895	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:49.843727112 CET	5651	49896	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:49.844033957 CET	49896	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.844033957 CET	49896	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:49.849735022 CET	5651	49896	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:50.644295931 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:50.689337015 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:51.344197035 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:51.392577887 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:52.343049049 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:52.392483950 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:53.349334002 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:53.392595053 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:54.361139059 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:54.408730984 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:55.363183975 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:55.408150911 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:56.713347912 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:56.715544939 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:56.715657949 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.259092093 CET	49923	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.264586926 CET	5651	49923	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.264663935 CET	49923	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.275352955 CET	49924	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.280828953 CET	80	49924	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.280925035 CET	49924	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.289165974 CET	49925	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.294581890 CET	465	49925	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.294673920 CET	49925	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.303128004 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:57.308599949 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:57.308713913 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:57.321777105 CET	49927	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:57.327198029 CET	5555	49927	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:57.327258110 CET	49927	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:57.374720097 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.412081957 CET	49923	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.412128925 CET	49923	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.412539005 CET	49924	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.412539005 CET	49924	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.417725086 CET	5651	49923	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.417834044 CET	5651	49923	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.418251991 CET	80	49924	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.418334961 CET	80	49924	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.423738003 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.424050093 CET	49925	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.424222946 CET	49925	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.430603027 CET	465	49925	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.430617094 CET	465	49925	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.440686941 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:57.440735102 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:57.446152925 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:57.446254015 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:57.455697060 CET	49927	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:57.455697060 CET	49927	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:57.462349892 CET	5555	49927	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:57.462368011 CET	5555	49927	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:57.990727901 CET	5651	49923	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:57.993304968 CET	49923	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.993304968 CET	49923	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:57.998740911 CET	5651	49923	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.081465960 CET	49933	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.087465048 CET	5651	49933	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.087605000 CET	49933	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.205586910 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.206393957 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.206393957 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.206434011 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.206566095 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.206567049 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.211771965 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.211829901 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.211940050 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.212162971 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.212464094 CET	80	49926	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.217289925 CET	49926	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.221447945 CET	49933	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.221482038 CET	49933	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.226901054 CET	5651	49933	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.226914883 CET	5651	49933	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.300843000 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.306821108 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.306926012 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.385452032 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.439502954 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.439740896 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.439740896 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:58.445061922 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.445075035 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:58.822798967 CET	5651	49933	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.823206902 CET	49933	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.823448896 CET	49933	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.828763962 CET	5651	49933	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.849203110 CET	49948	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.854641914 CET	5651	49948	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.854753017 CET	49948	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.986609936 CET	49948	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.986702919 CET	49948	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:58.991942883 CET	5651	49948	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:58.992043018 CET	5651	49948	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:59.169389963 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.169959068 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.169972897 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.170022011 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.170031071 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.170061111 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.175360918 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.175379992 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.175586939 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.175607920 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.176269054 CET	80	49934	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.176314116 CET	49934	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.176584005 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.181934118 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.182045937 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.318157911 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.318157911 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:46:59.323556900 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.323604107 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:46:59.400811911 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:59.454998970 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:59.595957041 CET	5651	49948	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:59.596111059 CET	49948	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:59.596111059 CET	49948	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:59.601483107 CET	5651	49948	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:59.612833023 CET	49955	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:59.618484974 CET	5651	49955	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:59.618552923 CET	49955	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:59.752043009 CET	49955	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:59.752091885 CET	49955	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:46:59.757487059 CET	5651	49955	111.90.140.76	192.168.2.7
Oct 29, 2024 16:46:59.757611036 CET	5651	49955	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.047478914 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.053309917 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.053309917 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.053311110 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.053311110 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.053623915 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.058706045 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.058722019 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.058733940 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.058938026 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.059474945 CET	80	49949	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.059621096 CET	49949	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.159327984 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.164911985 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.165014029 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.298940897 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.298940897 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:00.304338932 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.304536104 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:00.372155905 CET	5651	49955	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.377269030 CET	49955	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.377373934 CET	49955	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.383110046 CET	5651	49955	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.414140940 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.455187082 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.488127947 CET	49962	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.493473053 CET	5651	49962	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.494249105 CET	49962	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.500101089 CET	5651	49962	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.500196934 CET	49962	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.627183914 CET	49962	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.627228975 CET	49962	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.627855062 CET	49962	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.632647991 CET	5651	49962	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.632668972 CET	5651	49962	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.633363008 CET	5651	49962	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.706063032 CET	49963	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.711487055 CET	5651	49963	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.711581945 CET	49963	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.845988989 CET	49963	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.846070051 CET	49963	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:00.851345062 CET	5651	49963	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:00.851360083 CET	5651	49963	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.047739983 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.047992945 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.048006058 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.048019886 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.048034906 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.048060894 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.053292990 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.053482056 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.053492069 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.053500891 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.053953886 CET	80	49956	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.053998947 CET	49956	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.070323944 CET	80	49924	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.070415020 CET	49924	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.070415020 CET	49924	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.075829029 CET	80	49924	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.149519920 CET	49966	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.154896975 CET	80	49966	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.154962063 CET	49966	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.160435915 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.165781975 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.166001081 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.292222023 CET	49966	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.292222023 CET	49966	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.297585011 CET	80	49966	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.297600031 CET	80	49966	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.299824953 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.299824953 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:01.305649042 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.305660009 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:01.426975012 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.433767080 CET	5651	49963	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.433824062 CET	49963	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.433865070 CET	49963	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.439325094 CET	5651	49963	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.470633030 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.471951008 CET	49971	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.477458000 CET	5651	49971	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.477514029 CET	49971	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.617269993 CET	49971	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.617269993 CET	49971	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.622622013 CET	5651	49971	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.622636080 CET	5651	49971	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.910087109 CET	80	49966	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:01.910151958 CET	49966	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.910218000 CET	49966	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:01.915551901 CET	80	49966	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.021260023 CET	49973	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.026652098 CET	80	49973	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.029361010 CET	49973	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.050343990 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.052136898 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.052136898 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.052136898 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.052181959 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.052181959 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.057531118 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.057549000 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.057558060 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.057566881 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.057961941 CET	80	49967	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.059680939 CET	49967	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.131330967 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.136652946 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.139456034 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.158536911 CET	49973	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.158536911 CET	49973	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.163948059 CET	80	49973	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.163964033 CET	80	49973	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.240415096 CET	5651	49971	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.240545988 CET	49971	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.240545988 CET	49971	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.249042034 CET	5651	49971	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.267710924 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.267817020 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.274717093 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.274857998 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.346714020 CET	49979	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.352997065 CET	5651	49979	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.353085041 CET	49979	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.437165022 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.486265898 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.487036943 CET	49979	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.487070084 CET	49979	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.492532015 CET	5651	49979	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.492573023 CET	5651	49979	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.759212017 CET	80	49973	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.759335041 CET	49973	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.759382963 CET	49973	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.765176058 CET	80	49973	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.784322977 CET	49980	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.789999962 CET	80	49980	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.790160894 CET	49980	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.924143076 CET	49980	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.924143076 CET	49980	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:02.929523945 CET	80	49980	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.929673910 CET	80	49980	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:02.999382019 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:02.999614954 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.999614954 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.999614954 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:02.999695063 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.000145912 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.004980087 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.005002022 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.005011082 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.005554914 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.006383896 CET	80	49976	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.006433964 CET	49976	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.011795044 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.017455101 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.017541885 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.080156088 CET	5651	49979	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.080225945 CET	49979	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.080327034 CET	49979	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.086561918 CET	5651	49979	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.113094091 CET	49986	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.119505882 CET	5651	49986	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.119570971 CET	49986	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.143492937 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.143520117 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.149034977 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.149059057 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.252543926 CET	49986	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.252572060 CET	49986	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.259442091 CET	5651	49986	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.260495901 CET	5651	49986	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.461741924 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.502090931 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.548091888 CET	80	49980	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.548146963 CET	49980	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.548238993 CET	49980	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.553541899 CET	80	49980	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.569109917 CET	49988	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.574537992 CET	80	49988	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.574594975 CET	49988	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.580585957 CET	80	49988	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.580626011 CET	49988	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.709598064 CET	49988	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.709599018 CET	49988	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.709640980 CET	49988	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.715327978 CET	80	49988	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.715339899 CET	80	49988	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.715349913 CET	80	49988	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.770313978 CET	49989	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.776050091 CET	80	49989	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.776122093 CET	49989	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.857789993 CET	5651	49986	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.857846975 CET	49986	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.857882977 CET	49986	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.863415003 CET	5651	49986	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.878093958 CET	49994	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.885236979 CET	5651	49994	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.885303020 CET	49994	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.890846014 CET	5651	49994	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.890917063 CET	49994	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.905237913 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.905343056 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.905353069 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.905360937 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.905373096 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.905395031 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.908642054 CET	49989	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.908680916 CET	49989	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:03.910761118 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.910770893 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.910780907 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.910789967 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.911185026 CET	80	49984	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.911226988 CET	49984	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.914222002 CET	80	49989	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.914275885 CET	80	49989	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:03.987406969 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:03.996299028 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:03.996361971 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.018352032 CET	49994	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.018352032 CET	49994	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.018451929 CET	49994	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.023817062 CET	5651	49994	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.023931980 CET	5651	49994	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.024209023 CET	5651	49994	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.098274946 CET	49996	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.104504108 CET	5651	49996	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.104631901 CET	49996	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.128586054 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.128787041 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.134018898 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.134680986 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.236582041 CET	49996	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.236669064 CET	49996	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.242583990 CET	5651	49996	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.244467974 CET	5651	49996	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.456479073 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.501912117 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.530889988 CET	80	49989	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.531023026 CET	49989	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.531119108 CET	49989	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.534548044 CET	49999	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.536561966 CET	80	49989	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.540036917 CET	80	49999	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.543436050 CET	49999	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.674066067 CET	49999	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.674150944 CET	49999	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.679492950 CET	80	49999	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.680438995 CET	80	49999	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.933136940 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.933350086 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.933350086 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.933350086 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.933391094 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.933480024 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.938941956 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.938951969 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.938960075 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.939291000 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.972078085 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.977525949 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.977667093 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:04.979691982 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:04.989558935 CET	5651	49996	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:04.989660978 CET	49996	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.989660978 CET	49996	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:04.995177984 CET	5651	49996	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.024424076 CET	80	49995	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:05.024473906 CET	49995	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:05.090826988 CET	50004	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.096838951 CET	5651	50004	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.096900940 CET	50004	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.113401890 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:05.113401890 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:05.118917942 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:05.118937969 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:05.221286058 CET	50004	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.221333027 CET	50004	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.226932049 CET	5651	50004	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.226989031 CET	5651	50004	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.338516951 CET	80	49999	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.338562965 CET	49999	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.338608980 CET	49999	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.343954086 CET	80	49999	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.421741009 CET	50007	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.427238941 CET	80	50007	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.427299976 CET	50007	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.457077980 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.501892090 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.549303055 CET	50007	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.549321890 CET	50007	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.554801941 CET	80	50007	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.554811954 CET	80	50007	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.780010939 CET	465	49925	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.780070066 CET	49925	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.780113935 CET	49925	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.785938025 CET	465	49925	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.810199022 CET	5555	49927	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:05.810247898 CET	49927	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:05.810277939 CET	49927	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:05.816725016 CET	5555	49927	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:05.847851038 CET	50008	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.853296041 CET	465	50008	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.853358984 CET	50008	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.862251043 CET	50010	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:05.867594957 CET	5555	50010	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:05.867666006 CET	50010	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:05.918348074 CET	5651	50004	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.918400049 CET	50004	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.918478966 CET	50004	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.923880100 CET	5651	50004	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.957920074 CET	50012	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.964931965 CET	5651	50012	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.965002060 CET	50012	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.986579895 CET	50008	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.986628056 CET	50008	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:05.992117882 CET	465	50008	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:05.992144108 CET	465	50008	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.003329039 CET	50010	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.003329039 CET	50010	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.013272047 CET	5555	50010	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.013340950 CET	5555	50010	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.020204067 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.020339012 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.020339012 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.020376921 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.020376921 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.020899057 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.028368950 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.028389931 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.028415918 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.028429031 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.065778971 CET	80	50002	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.066063881 CET	50002	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.068907022 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.077980995 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.078202009 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.096560955 CET	50012	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.096641064 CET	50012	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.104535103 CET	5651	50012	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.104624033 CET	5651	50012	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.167685986 CET	80	50007	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.167964935 CET	50007	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.167964935 CET	50007	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.173402071 CET	80	50007	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.174937963 CET	50015	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.180557013 CET	80	50015	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.180779934 CET	50015	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.205513000 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.205600023 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.211622000 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.211882114 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.315073967 CET	50015	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.315073967 CET	50015	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.321405888 CET	80	50015	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.321422100 CET	80	50015	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.471255064 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.517611027 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.688302040 CET	5651	50012	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.688467026 CET	50012	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.688553095 CET	50012	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.694681883 CET	5651	50012	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.721885920 CET	50018	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.727343082 CET	5651	50018	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.727505922 CET	50018	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.861646891 CET	50018	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.862057924 CET	50018	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.867306948 CET	5651	50018	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.867331982 CET	5651	50018	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.913168907 CET	80	50015	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.913285017 CET	50015	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.913285971 CET	50015	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.919644117 CET	80	50015	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.934586048 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.934726954 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.934726954 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.934768915 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.934768915 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.934794903 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.940100908 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.940114021 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.940125942 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.940495968 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.940531015 CET	50021	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.941267014 CET	80	50013	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.944971085 CET	50013	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.945918083 CET	80	50021	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:06.945991039 CET	50021	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:06.955797911 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:06.961199045 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:06.961375952 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.081136942 CET	50021	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.081202984 CET	50021	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.089648962 CET	80	50021	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.089668036 CET	80	50021	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.100392103 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.100392103 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.106229067 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.106997013 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.451046944 CET	5651	50018	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.451117039 CET	50018	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.451181889 CET	50018	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.456724882 CET	5651	50018	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.484628916 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.487308025 CET	50026	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.493504047 CET	5651	50026	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.493612051 CET	50026	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.533170938 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.627290010 CET	50026	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.627307892 CET	50026	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.632711887 CET	5651	50026	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.632798910 CET	5651	50026	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.665157080 CET	80	50021	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.665236950 CET	50021	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.665380001 CET	50021	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.671617031 CET	80	50021	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.708488941 CET	50028	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.715133905 CET	80	50028	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.715218067 CET	50028	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.824706078 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.824812889 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.824812889 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.824857950 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.825012922 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.825028896 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.830750942 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.830765963 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.830779076 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.830790997 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.835078001 CET	80	50023	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.835145950 CET	50023	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.846399069 CET	50028	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.846468925 CET	50028	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:07.852202892 CET	80	50028	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.852330923 CET	80	50028	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:07.926501036 CET	50031	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.932693005 CET	80	50031	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.932765007 CET	50031	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:07.941555977 CET	80	50031	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:07.941612005 CET	50031	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:08.064744949 CET	50031	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:08.064853907 CET	50031	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:08.064882994 CET	50031	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:08.073048115 CET	80	50031	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:08.073079109 CET	80	50031	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:08.073110104 CET	80	50031	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:08.166691065 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:08.172247887 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:08.172559977 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:08.221750021 CET	5651	50026	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.221868038 CET	50026	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.221868038 CET	50026	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.227344036 CET	5651	50026	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.253434896 CET	50035	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.259116888 CET	5651	50035	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.259251118 CET	50035	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.283771038 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:08.283771038 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:08.289233923 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:08.289798021 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:08.393112898 CET	50035	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.393112898 CET	50035	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.398628950 CET	5651	50035	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.398992062 CET	5651	50035	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.441139936 CET	80	50028	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.441267014 CET	50028	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.441267014 CET	50028	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.447235107 CET	80	50028	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.472008944 CET	50036	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.478359938 CET	80	50036	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.479295015 CET	50036	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.488461971 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.533175945 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.611962080 CET	50036	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.611962080 CET	50036	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.617397070 CET	80	50036	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.617434025 CET	80	50036	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.998809099 CET	5651	50035	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:08.998936892 CET	50035	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:08.998936892 CET	50035	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.004368067 CET	5651	50035	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.024060965 CET	50041	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.031562090 CET	5651	50041	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.031619072 CET	50041	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.062179089 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.062316895 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.062333107 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.062349081 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.062374115 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.062485933 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.068219900 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.068276882 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.068290949 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.068352938 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.069256067 CET	80	50034	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.069298983 CET	50034	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.130007029 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.135579109 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.135658026 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.161397934 CET	50041	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.161478996 CET	50041	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.166963100 CET	5651	50041	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.167025089 CET	5651	50041	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.196557999 CET	80	50036	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.196614027 CET	50036	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.197117090 CET	50036	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.202765942 CET	80	50036	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.237832069 CET	50043	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.268899918 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.268899918 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.580037117 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:09.652796984 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.655838013 CET	80	50043	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.655853033 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.655865908 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.655919075 CET	50043	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.655935049 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:09.658392906 CET	50043	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.658392906 CET	50043	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.664252996 CET	80	50043	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.664266109 CET	80	50043	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.705035925 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.848378897 CET	5651	50041	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.848438978 CET	50041	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.848615885 CET	50041	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.856138945 CET	5651	50041	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.904098988 CET	50044	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:09.911221981 CET	5651	50044	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:09.911304951 CET	50044	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.011307001 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.011423111 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.011423111 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.011423111 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.011456013 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.011637926 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.017781973 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.017800093 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.017813921 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.017827034 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.017957926 CET	80	50042	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.019779921 CET	50042	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.034782887 CET	50044	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.034782887 CET	50044	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.040780067 CET	5651	50044	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.040795088 CET	5651	50044	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.113548994 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.120521069 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.120651960 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.252314091 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.252314091 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:10.258038044 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.258073092 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:10.364552975 CET	80	50043	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.364645004 CET	50043	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.364748955 CET	50043	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.370114088 CET	80	50043	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.440356970 CET	50056	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.445940971 CET	80	50056	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.446068048 CET	50056	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.521116018 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.564450026 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.580415010 CET	50056	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.580604076 CET	50056	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.586564064 CET	80	50056	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.586642981 CET	80	50056	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.663878918 CET	5651	50044	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.664001942 CET	50044	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.664093971 CET	50044	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.669501066 CET	5651	50044	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.768791914 CET	50057	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.776048899 CET	5651	50057	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.776186943 CET	50057	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.912337065 CET	50057	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.912337065 CET	50057	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:10.918601990 CET	5651	50057	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:10.918613911 CET	5651	50057	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.002696991 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.003334999 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.003334999 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.003354073 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.003354073 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.003393888 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.010215044 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.010226011 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.010234118 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.010505915 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.012639999 CET	80	50055	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.012713909 CET	50055	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.097656965 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.103094101 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.103163958 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.201035023 CET	80	50056	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.201387882 CET	50056	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.201524973 CET	50056	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.207036972 CET	50059	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.207643986 CET	80	50056	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.212587118 CET	80	50059	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.212641001 CET	50059	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.237040043 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.237061977 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.243388891 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.243776083 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.346343040 CET	50059	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.346374989 CET	50059	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.351814032 CET	80	50059	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.352236986 CET	80	50059	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.532826900 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.539908886 CET	5651	50057	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.540004015 CET	50057	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.540043116 CET	50057	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.546091080 CET	5651	50057	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.580044031 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.643486977 CET	50060	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.649081945 CET	5651	50060	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.649142981 CET	50060	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.783446074 CET	50060	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.783487082 CET	50060	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.788832903 CET	5651	50060	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.788845062 CET	5651	50060	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.927690983 CET	80	50059	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.927746058 CET	50059	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.928004980 CET	50059	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.933881998 CET	80	50059	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.957961082 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.958218098 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.958240986 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.958240986 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.958249092 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.958268881 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.963660955 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.963718891 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.963747978 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.964041948 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.964847088 CET	80	50058	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.964914083 CET	50058	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.971473932 CET	50061	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.976874113 CET	80	50061	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:11.976965904 CET	50061	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:11.987500906 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:11.992909908 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:11.992968082 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.111726999 CET	50061	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.111881018 CET	50061	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.117607117 CET	80	50061	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.117641926 CET	80	50061	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.127110958 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.127110958 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.132671118 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.132702112 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.368935108 CET	5651	50060	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.369119883 CET	50060	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.369158030 CET	50060	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.374746084 CET	5651	50060	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.409905910 CET	50063	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.415416956 CET	5651	50063	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.415484905 CET	50063	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.542344093 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.549128056 CET	50063	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.549128056 CET	50063	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.554507971 CET	5651	50063	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.554527044 CET	5651	50063	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.595674038 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.733299017 CET	80	50061	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.733541012 CET	50061	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.733623028 CET	50061	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.738068104 CET	50064	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.741564035 CET	80	50061	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.743422031 CET	80	50064	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.743505955 CET	50064	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.859932899 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.860084057 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.860136986 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.860136986 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.860136986 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.860167027 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.866512060 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.866523027 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.866537094 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.868093014 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.868103027 CET	80	50062	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.868148088 CET	50062	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.879117012 CET	50064	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.879117012 CET	50064	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:12.885045052 CET	80	50064	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.885055065 CET	80	50064	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:12.961451054 CET	50065	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.966900110 CET	80	50065	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.967137098 CET	50065	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:12.973373890 CET	80	50065	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:12.973663092 CET	50065	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:13.096071959 CET	50065	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:13.096120119 CET	50065	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:13.096120119 CET	50065	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:13.103225946 CET	80	50065	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:13.103239059 CET	80	50065	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:13.103247881 CET	80	50065	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:13.174758911 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:13.176327944 CET	5651	50063	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.176393032 CET	50063	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.176457882 CET	50063	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.180181026 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:13.180263996 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:13.181730032 CET	5651	50063	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.285080910 CET	50067	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.290661097 CET	5651	50067	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.290736914 CET	50067	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.323431969 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:13.323772907 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:13.328785896 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:13.329113960 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:13.424401999 CET	50067	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.424484015 CET	50067	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.429862022 CET	5651	50067	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.430103064 CET	5651	50067	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.454006910 CET	80	50064	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.454154968 CET	50064	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.454284906 CET	50064	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.459747076 CET	80	50064	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.505636930 CET	50068	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.511125088 CET	80	50068	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.511188984 CET	50068	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.557562113 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.611299992 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.652226925 CET	50068	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.652226925 CET	50068	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:13.657681942 CET	80	50068	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:13.657706022 CET	80	50068	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.015867949 CET	5651	50067	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.015929937 CET	50067	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.015961885 CET	50067	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.021698952 CET	5651	50067	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.049698114 CET	50069	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.055063009 CET	5651	50069	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.055129051 CET	50069	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.077939034 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.078123093 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.078123093 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.078178883 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.078178883 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.078178883 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.084170103 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.084182978 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.084192038 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.084203959 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.084568024 CET	80	50066	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.084639072 CET	50066	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.166110992 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.171555042 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.171633005 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.191507101 CET	50069	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.191524029 CET	50069	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.196984053 CET	5651	50069	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.196995020 CET	5651	50069	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.234493017 CET	80	50068	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.234608889 CET	50068	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.234608889 CET	50068	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.240377903 CET	80	50068	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.268804073 CET	50071	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.274246931 CET	80	50071	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.274318933 CET	50071	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.300086021 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.300101995 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.305562973 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.305584908 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.341088057 CET	465	50008	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.341162920 CET	50008	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.342195988 CET	50008	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.347467899 CET	465	50008	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.360018969 CET	5555	50010	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.360080957 CET	50010	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.360168934 CET	50010	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.365474939 CET	5555	50010	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.379081964 CET	50072	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.384464979 CET	465	50072	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.384592056 CET	50072	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.394186974 CET	50073	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.399622917 CET	5555	50073	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.399684906 CET	50073	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.408859015 CET	50071	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.408998966 CET	50071	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.414279938 CET	80	50071	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.414405107 CET	80	50071	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.517884016 CET	50072	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.517884016 CET	50072	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.523528099 CET	465	50072	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.523545027 CET	465	50072	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.533567905 CET	50073	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.533598900 CET	50073	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:14.539045095 CET	5555	50073	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.539057016 CET	5555	50073	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:14.571434975 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.611324072 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.761023045 CET	5651	50069	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.761101961 CET	50069	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.761143923 CET	50069	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.766592026 CET	5651	50069	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.816983938 CET	50074	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.823272943 CET	5651	50074	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.823358059 CET	50074	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.956223011 CET	50074	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.956393003 CET	50074	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:14.961669922 CET	5651	50074	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:14.961736917 CET	5651	50074	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.000143051 CET	80	50071	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.000205994 CET	50071	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.000361919 CET	50071	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.005770922 CET	80	50071	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.019016027 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.019162893 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.019171953 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.019192934 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.019212961 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.019231081 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.024800062 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.024812937 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.024827003 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.024840117 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.036761999 CET	50075	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.044733047 CET	80	50075	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.044953108 CET	50075	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.057627916 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.063678980 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.063785076 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.067970991 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.071172953 CET	80	50070	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.071274996 CET	50070	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.175357103 CET	50075	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.175357103 CET	50075	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.180838108 CET	80	50075	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.180907011 CET	80	50075	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.190437078 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.190470934 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.195883036 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.196079969 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.540837049 CET	5651	50074	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.540970087 CET	50074	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.541191101 CET	50074	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.546530962 CET	5651	50074	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.573290110 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.584022045 CET	50077	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.589911938 CET	5651	50077	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.589986086 CET	50077	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.689441919 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.733294010 CET	50077	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.733660936 CET	50077	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.739058018 CET	5651	50077	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.739070892 CET	5651	50077	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.796964884 CET	80	50075	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.797032118 CET	50075	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.797161102 CET	50075	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.800857067 CET	50078	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.802669048 CET	80	50075	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.806344986 CET	80	50078	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.806428909 CET	50078	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.931024075 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.978657961 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.978918076 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.978929043 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.978952885 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.978976011 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.984131098 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.984214067 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.984333992 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.984492064 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.984745026 CET	80	50076	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:15.984801054 CET	50076	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:15.986022949 CET	50078	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.986067057 CET	50078	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:15.991636992 CET	80	50078	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:15.991674900 CET	80	50078	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:16.302187920 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:16.307722092 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:16.307789087 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:16.427670002 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:16.427915096 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:16.433279991 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:16.433397055 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:16.577837944 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:16.597172022 CET	80	50078	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:16.597621918 CET	50078	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:16.597675085 CET	50078	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:16.603066921 CET	80	50078	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:16.689445019 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.174415112 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:17.174518108 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:17.174575090 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:17.174575090 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:17.174575090 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:17.174575090 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:17.175360918 CET	50080	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.180088997 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:17.180234909 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:17.180244923 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:17.180625916 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:17.180918932 CET	80	50080	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:17.180988073 CET	50080	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.181581974 CET	80	50079	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:17.181646109 CET	50079	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:17.317584038 CET	50080	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.317994118 CET	50080	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.322983980 CET	80	50080	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:17.323447943 CET	80	50080	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:17.352834940 CET	5651	50077	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:17.352929115 CET	50077	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.352992058 CET	50077	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.358314991 CET	5651	50077	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:17.593168974 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:17.689518929 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.904630899 CET	80	50080	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:17.904848099 CET	50080	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.904901028 CET	50080	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:17.913167000 CET	80	50080	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:18.834799051 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:18.892663002 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.222505093 CET	50081	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.228023052 CET	5651	50081	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.231481075 CET	50081	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.237112045 CET	50082	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.242696047 CET	80	50082	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.245268106 CET	50082	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.252789021 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:19.258625031 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:19.260574102 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:19.361493111 CET	50081	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.361493111 CET	50081	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.367233038 CET	5651	50081	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.368586063 CET	5651	50081	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.377393961 CET	50082	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.377394915 CET	50082	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.383657932 CET	80	50082	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.384547949 CET	80	50082	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.392863989 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:19.392864943 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:19.398443937 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:19.398458958 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:19.612159967 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.689483881 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.937608957 CET	5651	50081	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.937894106 CET	50081	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.938229084 CET	50081	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.943953991 CET	5651	50081	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.965977907 CET	50084	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.971498013 CET	5651	50084	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.971904993 CET	50084	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.986181021 CET	80	50082	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:19.986429930 CET	50082	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.986466885 CET	50082	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:19.991946936 CET	80	50082	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.066265106 CET	50085	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.072736025 CET	80	50085	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.072907925 CET	50085	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.096287966 CET	50084	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.096287966 CET	50084	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.102345943 CET	5651	50084	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.102375031 CET	5651	50084	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.129036903 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.129188061 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.129204035 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.129225016 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.129241943 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.129551888 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.134769917 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.134802103 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.134849072 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.134881020 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.136006117 CET	80	50083	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.136056900 CET	50083	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.174945116 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.180567980 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.180639029 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.206255913 CET	50085	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.206284046 CET	50085	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.212933064 CET	80	50085	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.213126898 CET	80	50085	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.315331936 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.315331936 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:20.321660042 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.321676016 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:20.627590895 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.689539909 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.707169056 CET	5651	50084	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.707231045 CET	50084	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.707495928 CET	50084	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.712832928 CET	5651	50084	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.722867012 CET	50087	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.728353024 CET	5651	50087	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.728434086 CET	50087	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.797166109 CET	80	50085	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.797374010 CET	50085	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.797804117 CET	50085	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.803092003 CET	80	50085	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.831275940 CET	50088	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.836591959 CET	80	50088	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.836669922 CET	50088	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.862394094 CET	50087	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.862409115 CET	50087	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.867755890 CET	5651	50087	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.867780924 CET	5651	50087	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.971016884 CET	50088	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.971062899 CET	50088	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:20.976444960 CET	80	50088	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:20.976643085 CET	80	50088	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.060691118 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.060801983 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.060827971 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.060827971 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.060841084 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.060841084 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.066488028 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.066502094 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.066523075 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.066534042 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.067493916 CET	80	50086	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.067552090 CET	50086	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.159333944 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.165062904 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.167486906 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.299904108 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.299904108 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:21.305439949 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.305546999 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:21.475730896 CET	5651	50087	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.475821972 CET	50087	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.475821972 CET	50087	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.481276035 CET	5651	50087	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.492779970 CET	50090	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.498202085 CET	5651	50090	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.498282909 CET	50090	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.593847990 CET	80	50088	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.593921900 CET	50088	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.594027996 CET	50088	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.597544909 CET	50091	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.599433899 CET	80	50088	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.602890968 CET	80	50091	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.603055000 CET	50091	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.627547026 CET	50090	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.627547026 CET	50090	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.633044958 CET	5651	50090	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.633122921 CET	5651	50090	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.643111944 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.689945936 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.740257978 CET	50091	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.740305901 CET	50091	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:21.745697021 CET	80	50091	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:21.745862961 CET	80	50091	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.023598909 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.023758888 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.023758888 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.023792982 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.023792982 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.023838043 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.029329062 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.029344082 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.029356003 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.029367924 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.034432888 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.039869070 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.039927959 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.056926966 CET	80	50089	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.059257030 CET	50089	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.175632954 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.179368973 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.181051970 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.185105085 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.217750072 CET	5651	50090	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.217823982 CET	50090	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.217911959 CET	50090	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.223427057 CET	5651	50090	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.254591942 CET	50093	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.260073900 CET	5651	50093	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.263401031 CET	50093	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.348762035 CET	80	50091	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.351398945 CET	50091	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.351453066 CET	50091	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.356781006 CET	80	50091	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.362365007 CET	50094	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.367938995 CET	80	50094	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.371409893 CET	50094	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.393368959 CET	50093	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.393481970 CET	50093	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.398849964 CET	5651	50093	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.398875952 CET	5651	50093	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.502542019 CET	50094	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.502564907 CET	50094	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.508212090 CET	80	50094	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.508290052 CET	80	50094	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.658601999 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.869060993 CET	465	50072	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.869182110 CET	50072	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.869198084 CET	50072	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.874960899 CET	465	50072	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.876975060 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.884931087 CET	5555	50073	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.884982109 CET	50073	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.885006905 CET	50073	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.890439034 CET	5555	50073	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.913392067 CET	50095	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.915921926 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.916050911 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.916063070 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.916085958 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.916085958 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.916102886 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:22.918782949 CET	465	50095	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:22.918843985 CET	50095	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:22.921605110 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.921652079 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.921664000 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.921675920 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.922317028 CET	80	50092	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:22.922372103 CET	50092	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:23.048919916 CET	50095	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.051332951 CET	50095	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.392595053 CET	50095	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.411333084 CET	5651	50093	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.411406994 CET	50093	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.411442995 CET	50093	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.412349939 CET	80	50094	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.412424088 CET	50094	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.412466049 CET	50094	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.413538933 CET	5651	50093	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.413594961 CET	50093	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.414129019 CET	80	50094	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.414191961 CET	50094	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:23.418122053 CET	465	50095	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.418134928 CET	465	50095	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.419898033 CET	465	50095	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.419910908 CET	5651	50093	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.419934034 CET	80	50094	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.674701929 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:23.892613888 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:24.689925909 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:24.877077103 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:24.956218004 CET	50096	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:24.961971045 CET	5555	50096	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:24.962037086 CET	50096	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:24.973047972 CET	50097	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:24.979235888 CET	5651	50097	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:24.979387999 CET	50097	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:24.987807035 CET	50098	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:24.993570089 CET	80	50098	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:24.993648052 CET	50098	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.010365963 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.016453028 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.016585112 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.096113920 CET	50096	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.096128941 CET	50096	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.101660013 CET	5555	50096	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.101684093 CET	5555	50096	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.111741066 CET	50097	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.111741066 CET	50097	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.117100000 CET	5651	50097	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.117883921 CET	5651	50097	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.127285004 CET	50098	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.127454996 CET	50098	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.134151936 CET	80	50098	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.134294033 CET	80	50098	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.142860889 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.142860889 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.151839972 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.152034998 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.724139929 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.730897903 CET	5651	50097	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.731005907 CET	50097	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.731054068 CET	50097	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.734390020 CET	80	50098	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.734482050 CET	50098	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.734523058 CET	50098	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.736757994 CET	5651	50097	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.740284920 CET	80	50098	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.752842903 CET	50100	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.758378983 CET	5651	50100	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.758472919 CET	50100	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.768661976 CET	50101	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.774108887 CET	80	50101	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.774307966 CET	50101	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.877626896 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.893143892 CET	50100	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.893198967 CET	50100	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.900445938 CET	5651	50100	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.900574923 CET	5651	50100	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.908727884 CET	50101	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.908754110 CET	50101	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:25.914156914 CET	80	50101	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.914194107 CET	80	50101	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:25.987550974 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.987750053 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.987750053 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.987750053 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.987750053 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.987854004 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:25.993496895 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.993508101 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.993518114 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:25.993527889 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.003205061 CET	80	50099	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.003283024 CET	50099	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.081646919 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.087181091 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.087253094 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.221642971 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.221669912 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.227343082 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.227404118 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.507170916 CET	80	50101	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.509198904 CET	5651	50100	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.509279013 CET	50101	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.512409925 CET	50101	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.512420893 CET	50100	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.512629032 CET	50100	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.517920017 CET	80	50101	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.518368959 CET	5651	50100	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.562750101 CET	50103	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.568378925 CET	5651	50103	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.570710897 CET	50104	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.570755959 CET	50103	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.576195002 CET	80	50104	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.579396963 CET	50104	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.732793093 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.740107059 CET	50103	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.740159035 CET	50103	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.741086960 CET	50104	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.741242886 CET	50104	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.745739937 CET	5651	50103	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.745774031 CET	5651	50103	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.746511936 CET	80	50104	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.746608973 CET	80	50104	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:26.892627001 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:26.965662956 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.965856075 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.965874910 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.965888023 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.965888023 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.965951920 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:26.971807003 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.971920013 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.971950054 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.972064972 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.973357916 CET	80	50102	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:26.973424911 CET	50102	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.067749023 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.073643923 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.073745012 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.205235004 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.205280066 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.210798025 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.210827112 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.291016102 CET	5651	50103	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.291105986 CET	50103	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.291151047 CET	50103	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.296576977 CET	5651	50103	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.307116032 CET	80	50104	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.307255030 CET	50104	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.307293892 CET	50104	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.313365936 CET	80	50104	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.402201891 CET	50106	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.408991098 CET	5651	50106	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.409070969 CET	50106	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.417473078 CET	50107	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.424755096 CET	80	50107	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.424829006 CET	50107	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.533642054 CET	50106	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.533642054 CET	50106	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.539048910 CET	5651	50106	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.539242029 CET	5651	50106	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.550409079 CET	50107	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.550441980 CET	50107	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.555888891 CET	80	50107	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.555917978 CET	80	50107	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.743678093 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:27.892625093 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:27.961477995 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.961585045 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.961668015 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.961693048 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.961705923 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.961726904 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:27.968019009 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.968051910 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.968080044 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.968106031 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.968672991 CET	80	50105	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:27.968727112 CET	50105	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.050246954 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.056281090 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.056426048 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.145577908 CET	80	50107	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.145646095 CET	50107	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.145704985 CET	50107	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.148107052 CET	5651	50106	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.148185968 CET	50106	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.148335934 CET	50106	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.151380062 CET	80	50107	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.154059887 CET	5651	50106	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.159286022 CET	50109	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.164851904 CET	5651	50109	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.164942980 CET	50109	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.175009012 CET	50110	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.182877064 CET	80	50110	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.183274984 CET	50110	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.189614058 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.189614058 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.195425034 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.195494890 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.299180984 CET	50109	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.299293041 CET	50109	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.304687977 CET	5651	50109	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.304742098 CET	5651	50109	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.322263956 CET	50110	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.322263956 CET	50110	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.327809095 CET	80	50110	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.327907085 CET	80	50110	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.752172947 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.890523911 CET	5651	50109	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.890748978 CET	50109	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.890806913 CET	50109	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.892618895 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.896986961 CET	5651	50109	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.909787893 CET	80	50110	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.909894943 CET	50110	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.910012007 CET	50110	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.916050911 CET	80	50110	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.926105976 CET	50111	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.932379961 CET	5651	50111	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.932451010 CET	50111	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.941472054 CET	50112	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.946995020 CET	80	50112	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:28.947149038 CET	50112	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:28.950887918 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.951013088 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.951051950 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.951051950 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.951052904 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.951052904 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:28.956708908 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.956809998 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.956837893 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.956864119 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.957206964 CET	80	50108	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:28.957364082 CET	50108	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:29.064701080 CET	50111	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:29.064701080 CET	50111	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:29.070250034 CET	5651	50111	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.070282936 CET	5651	50111	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.080605984 CET	50112	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:29.080647945 CET	50112	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:29.086215019 CET	80	50112	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.086363077 CET	80	50112	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.691216946 CET	80	50112	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.691338062 CET	50112	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:29.691448927 CET	50112	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:29.698086977 CET	80	50112	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.699345112 CET	5651	50111	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.699405909 CET	50111	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:29.699501991 CET	50111	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:29.706145048 CET	5651	50111	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.782015085 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:29.877126932 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:30.989141941 CET	50113	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.003707886 CET	50114	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.020239115 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:31.112111092 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.131391048 CET	5651	50113	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.131400108 CET	80	50114	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.131408930 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:31.131460905 CET	50113	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.131499052 CET	50114	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.131740093 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:31.143676996 CET	50114	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.143701077 CET	50114	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.149708033 CET	80	50114	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.149738073 CET	80	50114	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.159183025 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:31.161230087 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:31.164736032 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:31.170901060 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:31.171088934 CET	5651	50113	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.171099901 CET	80	50114	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.171153069 CET	50113	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.189624071 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.222681046 CET	50116	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.229504108 CET	80	50116	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.229640007 CET	50116	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.267966032 CET	50113	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.268007994 CET	50113	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.268026114 CET	50113	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.273736000 CET	5651	50113	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.273746967 CET	5651	50113	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.273755074 CET	5651	50113	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.331593990 CET	50117	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.337311029 CET	5651	50117	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.337405920 CET	50117	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.362037897 CET	50116	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.362075090 CET	50116	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.368020058 CET	80	50116	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.368031979 CET	80	50116	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.417670965 CET	465	50095	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.417746067 CET	50095	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.417817116 CET	50095	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.424387932 CET	465	50095	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.440813065 CET	50118	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.446882963 CET	465	50118	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.446964025 CET	50118	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.471302032 CET	50117	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.471337080 CET	50117	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.477168083 CET	5651	50117	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.477181911 CET	5651	50117	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.580529928 CET	50118	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.580564022 CET	50118	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.767966986 CET	465	50118	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.767996073 CET	465	50118	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.799469948 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.877291918 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.978543043 CET	80	50116	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.979418039 CET	50116	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.979486942 CET	50116	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.985183001 CET	80	50116	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.989821911 CET	50119	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:31.995274067 CET	80	50119	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:31.995362997 CET	50119	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.068183899 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.068289995 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.068330050 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.068330050 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.068330050 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.068356991 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.072628021 CET	5651	50117	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.072695971 CET	50117	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.072753906 CET	50117	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.074014902 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.074157000 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.074170113 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.074454069 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.074700117 CET	80	50115	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.074749947 CET	50115	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.078427076 CET	5651	50117	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.097162962 CET	50120	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.102864981 CET	5651	50120	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.102937937 CET	50120	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.112819910 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.118418932 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.118537903 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.127408028 CET	50119	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.127456903 CET	50119	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.132904053 CET	80	50119	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.133050919 CET	80	50119	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.236870050 CET	50120	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.236905098 CET	50120	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.242348909 CET	5651	50120	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.242367983 CET	5651	50120	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.252201080 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.252201080 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:32.258194923 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.258420944 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:32.715857029 CET	80	50119	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.715943098 CET	50119	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.716054916 CET	50119	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.721590042 CET	80	50119	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.753276110 CET	50122	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.759700060 CET	80	50122	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.759783030 CET	50122	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.814910889 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.861524105 CET	5651	50120	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.861602068 CET	50120	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.861756086 CET	50120	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.867280006 CET	5651	50120	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.877094030 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.894443035 CET	50122	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.894620895 CET	50122	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.900047064 CET	80	50122	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.900438070 CET	80	50122	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.972071886 CET	50123	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:32.977535009 CET	5651	50123	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:32.977624893 CET	50123	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.009531975 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.009639978 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.009673119 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.009673119 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.009673119 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.009706974 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.016051054 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.016112089 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.016139984 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.016441107 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.016949892 CET	80	50121	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.017014980 CET	50121	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.082496881 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.088881969 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.088999987 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.111913919 CET	50123	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.111938953 CET	50123	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.117404938 CET	5651	50123	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.117463112 CET	5651	50123	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.224875927 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.224875927 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.230525017 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.230585098 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.457268000 CET	5555	50096	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.457338095 CET	50096	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.457384109 CET	50096	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.463095903 CET	5555	50096	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.491445065 CET	80	50122	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.491539955 CET	50122	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.491597891 CET	50122	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.497020960 CET	80	50122	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.519896984 CET	50125	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.526640892 CET	80	50125	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.526770115 CET	50125	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.534199953 CET	50126	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.540288925 CET	5555	50126	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.540395975 CET	50126	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.658760071 CET	50125	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.658760071 CET	50125	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.664343119 CET	80	50125	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.664510965 CET	80	50125	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.674197912 CET	50126	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.674197912 CET	50126	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.679616928 CET	5555	50126	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.679809093 CET	5555	50126	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.703558922 CET	5651	50123	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.703655005 CET	50123	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.703691959 CET	50123	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.710400105 CET	5651	50123	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.737694025 CET	50127	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.743402004 CET	5651	50127	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.743494034 CET	50127	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.820483923 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.877044916 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.877599955 CET	50127	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.877671957 CET	50127	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:33.883022070 CET	5651	50127	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.883208036 CET	5651	50127	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:33.982884884 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.983005047 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.983068943 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.983068943 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.983091116 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.983234882 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:33.988516092 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.988533974 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.988548994 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.988564968 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.989031076 CET	80	50124	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:33.989129066 CET	50124	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:34.066781998 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:34.072402954 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:34.072470903 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:34.207860947 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:34.207880020 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:34.213433027 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:34.213512897 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:34.307522058 CET	80	50125	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.310106993 CET	50125	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.310172081 CET	50125	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.315706015 CET	80	50125	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.394479990 CET	50129	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.400136948 CET	80	50129	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.400232077 CET	50129	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.470678091 CET	5651	50127	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.470812082 CET	50127	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.471215963 CET	50127	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.477668047 CET	5651	50127	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.503253937 CET	50130	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.509557009 CET	5651	50130	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.509923935 CET	50130	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.533637047 CET	50129	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.533734083 CET	50129	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.539258003 CET	80	50129	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.539378881 CET	80	50129	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.644016027 CET	50130	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.644016027 CET	50130	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:34.649665117 CET	5651	50130	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:34.649682999 CET	5651	50130	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.093118906 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.093743086 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.093947887 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.093947887 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.095355988 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.095355988 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.095355988 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.100913048 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.101924896 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.101936102 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.101943970 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.101999998 CET	50128	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.102134943 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.102144003 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.107980967 CET	80	50128	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.133754969 CET	80	50129	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.135349989 CET	50129	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.135438919 CET	50129	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.141005993 CET	80	50129	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.159475088 CET	50131	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.163717031 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.165606022 CET	80	50131	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.165692091 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.165703058 CET	50131	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.175179958 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.180761099 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.180829048 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.238995075 CET	5651	50130	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.239064932 CET	50130	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.239116907 CET	50130	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.244888067 CET	5651	50130	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.268794060 CET	50133	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.301470041 CET	50131	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.303364038 CET	50131	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.323031902 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.323290110 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.731098890 CET	50131	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.731201887 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:35.750941992 CET	5651	50133	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.751101017 CET	80	50131	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.751111984 CET	80	50131	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.751121998 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.751131058 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.751260996 CET	50133	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.751311064 CET	80	50131	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.751337051 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:35.830894947 CET	50133	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.830950022 CET	50133	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.837841988 CET	5651	50133	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.838181019 CET	5651	50133	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.846297979 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.883580923 CET	80	50131	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.885272026 CET	50131	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.885309935 CET	50131	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.891012907 CET	80	50131	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.925024986 CET	50134	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.930670977 CET	80	50134	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:35.931390047 CET	50134	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:35.986522913 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.062498093 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.062717915 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.062762976 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.062762976 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.062774897 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.062870026 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.065102100 CET	50134	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.065102100 CET	50134	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.068172932 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.068183899 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.068192005 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.068550110 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.070242882 CET	80	50132	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.070301056 CET	50132	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.070430994 CET	80	50134	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.071439028 CET	80	50134	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.146675110 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.152040005 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.152187109 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.283798933 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.283832073 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:36.289542913 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.289774895 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:36.489386082 CET	5651	50133	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.489460945 CET	50133	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.489873886 CET	50133	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.495449066 CET	5651	50133	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.581950903 CET	50136	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.587493896 CET	5651	50136	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.593287945 CET	50136	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.709577084 CET	80	50134	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.709702015 CET	50134	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.709799051 CET	50134	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.715152979 CET	80	50134	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.721860886 CET	50136	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.721860886 CET	50136	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.727256060 CET	5651	50136	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.727309942 CET	5651	50136	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.800405979 CET	50137	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.805948973 CET	80	50137	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.806037903 CET	50137	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.861766100 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.939915895 CET	50137	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.939915895 CET	50137	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:36.945471048 CET	80	50137	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.945482969 CET	80	50137	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:36.986414909 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.064764023 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.067439079 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.067478895 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.067478895 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.067478895 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.067523956 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.073044062 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.073147058 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.073158979 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.073200941 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.073991060 CET	80	50135	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.075388908 CET	50135	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.127998114 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.134757042 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.135493040 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.267918110 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.268353939 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:37.273829937 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.273863077 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:37.320019960 CET	5651	50136	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.320111036 CET	50136	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.320214033 CET	50136	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.325625896 CET	5651	50136	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.348077059 CET	50139	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.354347944 CET	5651	50139	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.354441881 CET	50139	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.486927986 CET	50139	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.486927986 CET	50139	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.492469072 CET	5651	50139	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.492748976 CET	5651	50139	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.586513042 CET	80	50137	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.589294910 CET	50137	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.589380026 CET	50137	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.595611095 CET	80	50137	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.675159931 CET	50140	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.680705070 CET	80	50140	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.681284904 CET	50140	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.815493107 CET	50140	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.815526962 CET	50140	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:37.821086884 CET	80	50140	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.821110010 CET	80	50140	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.877362013 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:37.986407995 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.009496927 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.009798050 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.009798050 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.009869099 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.009869099 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.009922028 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.015240908 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.015252113 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.015260935 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.015269995 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.016386986 CET	80	50138	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.016450882 CET	50138	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.083853006 CET	5651	50139	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.083916903 CET	50139	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.083966017 CET	50139	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.089852095 CET	5651	50139	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.112341881 CET	50141	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.118350029 CET	5651	50141	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.121289968 CET	50141	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.127914906 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.133526087 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.137284994 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.252363920 CET	50141	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.253264904 CET	50141	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.258492947 CET	5651	50141	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.259392977 CET	5651	50141	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.268058062 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.268070936 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:38.273394108 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.273405075 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:38.414887905 CET	80	50140	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.414958954 CET	50140	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.415010929 CET	50140	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.420295954 CET	80	50140	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.445350885 CET	50143	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.450993061 CET	80	50143	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.453293085 CET	50143	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.580812931 CET	50143	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.581340075 CET	50143	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.587253094 CET	80	50143	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.587270021 CET	80	50143	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.873409033 CET	5651	50141	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.877398014 CET	50141	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.877398014 CET	50141	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.882891893 CET	5651	50141	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.892972946 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.986565113 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.988584042 CET	50144	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:38.994338989 CET	5651	50144	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:38.994421005 CET	50144	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.065397024 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.069488049 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.069488049 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.069489002 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.069489002 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.069489002 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.074918985 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.075059891 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.075069904 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.075084925 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.075531006 CET	80	50142	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.075601101 CET	50142	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.096946955 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.102564096 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.102720976 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.127743959 CET	50144	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.127800941 CET	50144	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.133331060 CET	5651	50144	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.133347988 CET	5651	50144	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.174160004 CET	80	50143	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.177299976 CET	50143	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.177355051 CET	50143	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.183378935 CET	80	50143	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.206705093 CET	50146	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.212192059 CET	80	50146	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.212263107 CET	50146	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.237082005 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.237108946 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.242794991 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.242806911 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.347806931 CET	50146	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.347860098 CET	50146	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.353243113 CET	80	50146	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.354475975 CET	80	50146	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.719747066 CET	5651	50144	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.721287966 CET	50144	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.721358061 CET	50144	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.726886988 CET	5651	50144	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.758018970 CET	50147	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.763823986 CET	5651	50147	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.763922930 CET	50147	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.899925947 CET	50147	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.900145054 CET	50147	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.905356884 CET	5651	50147	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.906445980 CET	5651	50147	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.908436060 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.922283888 CET	465	50118	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.922336102 CET	50118	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.922368050 CET	50118	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.927844048 CET	465	50118	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.948865891 CET	80	50146	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.948955059 CET	50146	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.949018955 CET	50146	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.954619884 CET	80	50146	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.973010063 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.973094940 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.973133087 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.973133087 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.973133087 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.973165989 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.975953102 CET	50148	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.979046106 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.979058027 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.979089975 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.979099989 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.979695082 CET	80	50145	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:39.979748964 CET	50145	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:39.981384993 CET	80	50148	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.981471062 CET	50148	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.986419916 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.991192102 CET	50149	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:39.996836901 CET	465	50149	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:39.996923923 CET	50149	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.111897945 CET	50148	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.111897945 CET	50148	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.157645941 CET	50149	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.157645941 CET	50149	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.447150946 CET	80	50148	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:40.447173119 CET	80	50148	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:40.447184086 CET	465	50149	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:40.447222948 CET	465	50149	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:40.473947048 CET	5651	50147	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:40.474040985 CET	50147	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.474138021 CET	50147	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.480776072 CET	5651	50147	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:40.694953918 CET	80	50148	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:40.695133924 CET	50148	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.695133924 CET	50148	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:40.700649023 CET	80	50148	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:40.924146891 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:41.080179930 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:41.939807892 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:41.986413002 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:42.020324945 CET	5555	50126	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:42.020442963 CET	50126	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:42.020503044 CET	50126	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:42.025888920 CET	5555	50126	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:42.955653906 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:43.189543009 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:43.971399069 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.068175077 CET	50150	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.074027061 CET	5651	50150	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.074141026 CET	50150	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.085699081 CET	50151	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.091607094 CET	80	50151	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.091665983 CET	50151	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.099261999 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.106328964 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:44.106384039 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.112318039 CET	50153	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.118246078 CET	5555	50153	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:44.119987965 CET	50153	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.189623117 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.205950022 CET	50150	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.205950022 CET	50150	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.214713097 CET	5651	50150	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.216147900 CET	5651	50150	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.226645947 CET	50151	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.226645947 CET	50151	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.232779980 CET	80	50151	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.232790947 CET	80	50151	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.245966911 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.246476889 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.261054039 CET	50153	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.261054039 CET	50153	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.580193043 CET	50153	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.651865959 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:44.978971004 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:44.978987932 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:44.978997946 CET	5555	50153	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:44.979007006 CET	5555	50153	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:44.979890108 CET	5651	50150	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.979952097 CET	50150	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.980041027 CET	50150	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.980159044 CET	80	50151	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.980221033 CET	50151	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.980297089 CET	50151	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:44.985476017 CET	5555	50153	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:44.985483885 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:44.986622095 CET	5651	50150	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.989995956 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:44.991550922 CET	80	50151	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.003246069 CET	50154	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.008790970 CET	5651	50154	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.008888006 CET	50154	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.019165993 CET	50155	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.024765015 CET	80	50155	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.024821997 CET	50155	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.080183029 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.102981091 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.103094101 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.103094101 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.103138924 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.103138924 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.103138924 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.108479023 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.108488083 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.108500004 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.108675003 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.109227896 CET	80	50152	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.109271049 CET	50152	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.112452984 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.117846966 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.117913008 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.143007040 CET	50154	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.143201113 CET	50154	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.148469925 CET	5651	50154	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.148853064 CET	5651	50154	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.158695936 CET	50155	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.158723116 CET	50155	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.169115067 CET	80	50155	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.169125080 CET	80	50155	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.253004074 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.253004074 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:45.258479118 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.258529902 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:45.747560024 CET	5651	50154	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.749339104 CET	50154	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.749385118 CET	50154	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.754785061 CET	5651	50154	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.768594980 CET	50157	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.771636963 CET	80	50155	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.773296118 CET	50155	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.773355007 CET	50155	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.774456978 CET	5651	50157	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.774533033 CET	50157	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.778935909 CET	80	50155	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.909188032 CET	50157	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.909914970 CET	50157	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:45.914617062 CET	5651	50157	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:45.915704966 CET	5651	50157	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:46.230226040 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:46.230321884 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.230549097 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:46.230588913 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:46.230588913 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:46.230588913 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:46.230612040 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:46.230807066 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.230850935 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:46.230880976 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.230921984 CET	50156	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:46.236048937 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.236104012 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.236135960 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.236144066 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.236152887 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.236222029 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.236368895 CET	80	50156	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:46.377089977 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:46.518413067 CET	5651	50157	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:46.518490076 CET	50157	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:46.518601894 CET	50157	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:46.524115086 CET	5651	50157	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:47.272383928 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:47.377090931 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:48.035079956 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:48.189575911 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:48.484162092 CET	465	50149	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:48.484245062 CET	50149	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:48.484270096 CET	50149	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:48.490058899 CET	465	50149	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.048831940 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.189567089 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.850366116 CET	50158	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.856029987 CET	5651	50158	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.859391928 CET	50158	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.862498045 CET	50159	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.865704060 CET	5651	50158	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.867350101 CET	50158	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.867947102 CET	80	50159	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.868012905 CET	50159	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.873637915 CET	80	50159	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.875288963 CET	50159	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.878520012 CET	50160	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.884146929 CET	465	50160	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.887388945 CET	50160	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.893177986 CET	465	50160	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.893260002 CET	50160	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.894366980 CET	50161	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:49.899755001 CET	80	50161	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:49.899912119 CET	50161	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:49.905864954 CET	80	50161	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:49.906235933 CET	50161	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:49.986844063 CET	50158	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.986895084 CET	50158	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.986982107 CET	50158	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:49.992472887 CET	5651	50158	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.992539883 CET	5651	50158	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:49.992552996 CET	5651	50158	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.002557993 CET	50159	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.002569914 CET	50159	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.002604961 CET	50159	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.008239985 CET	80	50159	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.008254051 CET	80	50159	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.008265972 CET	80	50159	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.017935991 CET	50160	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.018008947 CET	50160	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.018037081 CET	50160	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.023591995 CET	465	50160	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.023603916 CET	465	50160	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.023762941 CET	465	50160	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.034080982 CET	50161	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:50.034101009 CET	50161	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:50.034693956 CET	50161	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:50.035871029 CET	50162	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.039534092 CET	80	50161	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:50.039581060 CET	80	50161	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:50.040200949 CET	80	50161	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:50.041316032 CET	5651	50162	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.041378021 CET	50162	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.047564030 CET	5651	50162	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.047609091 CET	50162	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.049730062 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.050587893 CET	50163	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.058130026 CET	80	50163	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.058192015 CET	50163	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.066828966 CET	80	50163	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.066919088 CET	50163	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.069763899 CET	50164	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.076176882 CET	465	50164	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.076234102 CET	50164	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.083386898 CET	465	50164	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.083429098 CET	50164	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.174300909 CET	50162	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.174313068 CET	50162	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.174346924 CET	50162	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.179728031 CET	5651	50162	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.179750919 CET	5651	50162	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.179764032 CET	5651	50162	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.189573050 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.190259933 CET	50163	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.190275908 CET	50163	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.190308094 CET	50163	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.195692062 CET	80	50163	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.195764065 CET	80	50163	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.195779085 CET	80	50163	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.212863922 CET	50164	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.212909937 CET	50164	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.212909937 CET	50164	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:50.218452930 CET	465	50164	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.218466043 CET	465	50164	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:50.218477964 CET	465	50164	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:51.064744949 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:51.189580917 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.065618038 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.114258051 CET	50165	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.120096922 CET	5651	50165	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.120235920 CET	50165	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.128927946 CET	50166	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.137049913 CET	80	50166	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.137304068 CET	50166	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.145387888 CET	50167	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.150914907 CET	465	50167	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.150976896 CET	50167	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.159687996 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.161149979 CET	5651	50165	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.161216974 CET	50165	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.165390968 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.165400982 CET	80	50166	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.165446043 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.165468931 CET	50166	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.166929960 CET	465	50167	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.166975021 CET	50167	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.192754984 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.252448082 CET	50165	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.252496958 CET	50165	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.252496958 CET	50165	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.257895947 CET	5651	50165	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.257906914 CET	5651	50165	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.257915974 CET	5651	50165	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.268223047 CET	50166	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.268251896 CET	50166	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.268336058 CET	50166	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.273577929 CET	80	50166	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.273643017 CET	80	50166	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.273833990 CET	80	50166	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.283576965 CET	50167	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.283576965 CET	50167	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.283617020 CET	50167	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.289376974 CET	465	50167	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.289390087 CET	465	50167	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.289400101 CET	465	50167	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.299024105 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.299161911 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.304675102 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.304830074 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.331182003 CET	50169	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.336843967 CET	5651	50169	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.336913109 CET	50169	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.342694044 CET	5651	50169	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.342787981 CET	50169	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.347162962 CET	50170	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.352814913 CET	80	50170	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.352880955 CET	50170	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.359035015 CET	80	50170	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.359078884 CET	50170	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.362728119 CET	50171	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.368865967 CET	465	50171	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.369229078 CET	50171	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.375418901 CET	465	50171	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.375472069 CET	50171	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.471633911 CET	50169	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.471664906 CET	50169	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.471750975 CET	50169	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.479670048 CET	5651	50169	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.479680061 CET	5651	50169	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.479688883 CET	5651	50169	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.489362001 CET	50170	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.489388943 CET	50170	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.489419937 CET	50170	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.496346951 CET	80	50170	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.496356964 CET	80	50170	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.496366024 CET	80	50170	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.502628088 CET	50171	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.503149986 CET	50171	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.503174067 CET	50171	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.510195017 CET	465	50171	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.510706902 CET	465	50171	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.510792017 CET	465	50171	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.550009012 CET	50172	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.555391073 CET	5651	50172	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.559333086 CET	50172	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.565341949 CET	5651	50172	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.565768957 CET	50173	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.565804958 CET	50172	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.571293116 CET	80	50173	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.571403980 CET	50173	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.577385902 CET	80	50173	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.579308033 CET	50173	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.581125975 CET	50174	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.586553097 CET	465	50174	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.586668015 CET	50174	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.593245029 CET	465	50174	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.593322992 CET	50174	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.690300941 CET	50172	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.690300941 CET	50172	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.690341949 CET	50172	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.695017099 CET	5555	50153	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.695130110 CET	50153	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.695130110 CET	50153	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.696032047 CET	5651	50172	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.696043015 CET	5651	50172	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.696057081 CET	5651	50172	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.701502085 CET	5555	50153	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.705527067 CET	50173	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.705596924 CET	50173	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.705657959 CET	50173	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.710984945 CET	80	50173	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.711042881 CET	80	50173	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.711142063 CET	80	50173	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.720911980 CET	50174	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.720911980 CET	50174	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.720912933 CET	50174	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.726488113 CET	465	50174	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.726505995 CET	465	50174	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.726536989 CET	465	50174	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.769073963 CET	50175	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.774791002 CET	5651	50175	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.774859905 CET	50175	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.780848026 CET	5651	50175	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.780925989 CET	50175	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.784307957 CET	50176	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.789753914 CET	80	50176	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.789819002 CET	50176	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.796016932 CET	80	50176	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.796103954 CET	50176	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.799968958 CET	50177	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.805489063 CET	465	50177	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.805612087 CET	50177	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.811237097 CET	465	50177	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.811335087 CET	50177	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.815535069 CET	50178	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.821052074 CET	5555	50178	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.821134090 CET	50178	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.826894999 CET	5555	50178	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.826937914 CET	50178	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.908540964 CET	50175	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.908637047 CET	50175	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.908690929 CET	50175	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.913918972 CET	5651	50175	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.914112091 CET	5651	50175	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.914148092 CET	5651	50175	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.924221039 CET	50176	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.924309015 CET	50176	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.924341917 CET	50176	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.929673910 CET	80	50176	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.929697037 CET	80	50176	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.929778099 CET	80	50176	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.939738989 CET	50177	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.939738989 CET	50177	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.939738989 CET	50177	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.945122957 CET	465	50177	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.945133924 CET	465	50177	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.945143938 CET	465	50177	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.955655098 CET	50178	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.955693007 CET	50178	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.955693007 CET	50178	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:52.961036921 CET	5555	50178	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.961047888 CET	5555	50178	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.961239100 CET	5555	50178	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:52.987987041 CET	50179	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:52.994143009 CET	5651	50179	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:52.994196892 CET	50179	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.000554085 CET	5651	50179	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.000715971 CET	50179	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.003887892 CET	50180	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.009705067 CET	80	50180	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.009772062 CET	50180	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.015474081 CET	80	50180	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.015525103 CET	50180	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.019880056 CET	50181	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.025891066 CET	465	50181	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.026160955 CET	50181	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.027815104 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:53.028036118 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:53.028045893 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:53.028060913 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:53.028093100 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:53.028093100 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:53.032190084 CET	465	50181	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.032238960 CET	50181	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.033632994 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:53.033643007 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:53.033653021 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:53.034224033 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:53.034507036 CET	80	50168	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:53.034559965 CET	50168	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:53.080571890 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.127477884 CET	50179	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.127494097 CET	50179	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.127537966 CET	50179	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.132854939 CET	5651	50179	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.132867098 CET	5651	50179	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.132875919 CET	5651	50179	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.143368006 CET	50180	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.143403053 CET	50180	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.143403053 CET	50180	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.149970055 CET	80	50180	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.149981976 CET	80	50180	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.149991989 CET	80	50180	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.158606052 CET	50181	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.158624887 CET	50181	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.158643961 CET	50181	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:53.164117098 CET	465	50181	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.164127111 CET	465	50181	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.164167881 CET	465	50181	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:53.189579964 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:54.096204042 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:54.189667940 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.065629005 CET	50182	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:55.082003117 CET	50183	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.096577883 CET	50184	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.112677097 CET	50185	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.128021955 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:55.270982981 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.278157949 CET	5555	50182	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:55.278181076 CET	5651	50183	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.278196096 CET	80	50184	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.278220892 CET	50182	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:55.278256893 CET	50183	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.278274059 CET	465	50185	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.278286934 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:55.278290033 CET	50184	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.278318882 CET	50185	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.278342009 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:55.345916033 CET	50182	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:55.345985889 CET	50182	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:55.351452112 CET	5555	50182	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:55.351470947 CET	5555	50182	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:55.361597061 CET	50183	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.365278006 CET	50183	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.367708921 CET	5651	50183	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.370635033 CET	5651	50183	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.377151966 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.377244949 CET	50184	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.377263069 CET	50184	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.382774115 CET	80	50184	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.383033037 CET	80	50184	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.393625021 CET	50185	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.393641949 CET	50185	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:55.399271965 CET	465	50185	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.399302959 CET	465	50185	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:55.408755064 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:55.408802986 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:55.414108038 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:55.414693117 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.005295038 CET	5651	50183	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.005372047 CET	50183	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.005434036 CET	50183	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.011395931 CET	5651	50183	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.012999058 CET	80	50184	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.013061047 CET	50184	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.013104916 CET	50184	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.018764019 CET	80	50184	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.055808067 CET	50187	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.061131001 CET	5651	50187	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.061216116 CET	50187	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.065445900 CET	50188	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.070853949 CET	80	50188	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.070945978 CET	50188	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.152920008 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.159723997 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.159987926 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.160006046 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.160015106 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.160038948 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.160049915 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.165455103 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.165482044 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.165494919 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.165507078 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.167265892 CET	80	50186	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.167318106 CET	50186	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.190325975 CET	50187	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.190428972 CET	50187	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.195930004 CET	5651	50187	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.196145058 CET	5651	50187	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.205943108 CET	50188	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.206605911 CET	50188	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.211997032 CET	80	50188	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.212503910 CET	80	50188	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.269356966 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.274754047 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.274876118 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.377106905 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.409028053 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.409028053 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:56.414397955 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.414522886 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:56.793319941 CET	5651	50187	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.794670105 CET	50187	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.794688940 CET	50187	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.800483942 CET	5651	50187	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.815546989 CET	50190	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.820909023 CET	5651	50190	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.820986986 CET	50190	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.835402012 CET	80	50188	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.835547924 CET	50188	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.835567951 CET	50188	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.840993881 CET	80	50188	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.965351105 CET	50190	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.965351105 CET	50190	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.965759039 CET	50191	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:56.971105099 CET	5651	50190	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.971120119 CET	5651	50190	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.971234083 CET	80	50191	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:56.971323967 CET	50191	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.123651981 CET	50191	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.123651981 CET	50191	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.131230116 CET	80	50191	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.131639004 CET	80	50191	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.146385908 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.146419048 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.147931099 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.147955894 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.147955894 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.147955894 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.147994041 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.153465033 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.153479099 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.153491974 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.154174089 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.155289888 CET	80	50189	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.155925035 CET	50189	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.267343044 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.273718119 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.273982048 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.283363104 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.399745941 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.399760962 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:57.406003952 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.406090975 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:57.529542923 CET	5651	50190	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.529644966 CET	50190	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.529751062 CET	50190	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.535710096 CET	5651	50190	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.581526995 CET	50193	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.586927891 CET	5651	50193	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.587016106 CET	50193	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.687843084 CET	80	50191	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.687956095 CET	50191	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.687999964 CET	50191	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.691426039 CET	50194	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.693815947 CET	80	50191	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.698004007 CET	80	50194	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.698071003 CET	50194	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.728121996 CET	50193	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.728136063 CET	50193	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.733620882 CET	5651	50193	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.733731985 CET	5651	50193	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.831120968 CET	50194	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.831140995 CET	50194	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:57.836647034 CET	80	50194	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:57.836716890 CET	80	50194	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.148897886 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.149003029 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.149020910 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.149020910 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.149036884 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.149063110 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.154485941 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.154532909 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.154545069 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.154555082 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.154969931 CET	80	50192	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.155029058 CET	50192	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.158231974 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.237736940 CET	50195	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.243221045 CET	80	50195	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.243289948 CET	50195	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.249485016 CET	80	50195	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.249562979 CET	50195	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.310980082 CET	5651	50193	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.311053038 CET	50193	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.311084032 CET	50193	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.317008018 CET	5651	50193	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.346925974 CET	50196	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.352761984 CET	5651	50196	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.352987051 CET	50196	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.377295971 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.377432108 CET	50195	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.377444029 CET	50195	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.377532959 CET	50195	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.382802010 CET	80	50195	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.382858992 CET	80	50195	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.382915020 CET	80	50195	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.410845041 CET	80	50194	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.410904884 CET	50194	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.411273003 CET	50194	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.416668892 CET	80	50194	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.458205938 CET	50197	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.464580059 CET	80	50197	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.464764118 CET	50197	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.473421097 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.479083061 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.479171038 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.487277985 CET	50196	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.487468004 CET	50196	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.492794991 CET	5651	50196	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.493372917 CET	5651	50196	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.596899986 CET	50197	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.596899986 CET	50197	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:58.611677885 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.613295078 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:58.721033096 CET	80	50197	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.721043110 CET	80	50197	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:58.721049070 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:58.721057892 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.090792894 CET	5651	50196	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.090868950 CET	50196	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.091130972 CET	50196	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.096610069 CET	5651	50196	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.112550974 CET	50199	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.118037939 CET	5651	50199	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.118927956 CET	50199	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.174020052 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.193272114 CET	80	50197	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.193344116 CET	50197	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.193392038 CET	50197	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.199172974 CET	80	50197	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.222038984 CET	50200	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.227521896 CET	80	50200	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.227636099 CET	50200	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.252588034 CET	50199	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.252651930 CET	50199	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.258081913 CET	5651	50199	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.258107901 CET	5651	50199	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.354178905 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.354346991 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.354377031 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.354377031 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.354393005 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.354464054 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.361733913 CET	50200	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.361763954 CET	50200	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.362519026 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.362530947 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.363542080 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.363554955 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.363567114 CET	80	50198	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.363617897 CET	50198	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.367991924 CET	80	50200	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.368330002 CET	80	50200	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.377249956 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.442075968 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.447671890 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.447741985 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.580940008 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.581012964 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:47:59.586779118 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.586795092 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:47:59.862767935 CET	5651	50199	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.864368916 CET	50199	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.872951984 CET	50199	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.878362894 CET	5651	50199	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.965845108 CET	80	50200	111.90.140.76	192.168.2.7
Oct 29, 2024 16:47:59.966128111 CET	50200	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:47:59.994494915 CET	50200	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.000165939 CET	80	50200	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.019287109 CET	50202	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.020863056 CET	50203	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.024751902 CET	5651	50202	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.024821043 CET	50202	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.026212931 CET	80	50203	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.026262045 CET	50203	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.131983995 CET	50202	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.131995916 CET	50202	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.137911081 CET	5651	50202	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.137999058 CET	5651	50202	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.144634962 CET	50203	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.144675016 CET	50203	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.150094986 CET	80	50203	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.150119066 CET	80	50203	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.190570116 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.307035923 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.307152033 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.307204962 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.307229996 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.307239056 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.307266951 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.313154936 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.313184023 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.313433886 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.313462973 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.313838005 CET	80	50201	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.313966036 CET	50201	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.322926998 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.328696966 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.328785896 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.377207041 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.455818892 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.455836058 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:00.461395979 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.461441994 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:00.751394987 CET	80	50203	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.751480103 CET	50203	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.751539946 CET	50203	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.753880978 CET	50205	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.757046938 CET	80	50203	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.759784937 CET	80	50205	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.759840012 CET	50205	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.789554119 CET	5651	50202	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.789622068 CET	50202	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.789654016 CET	50202	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.795772076 CET	5651	50202	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.871421099 CET	50206	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.877094984 CET	5651	50206	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.877163887 CET	50206	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.893557072 CET	50205	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.893610954 CET	50205	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:00.903846979 CET	80	50205	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:00.903887033 CET	80	50205	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:01.002692938 CET	50206	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.002780914 CET	50206	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.008048058 CET	5651	50206	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:01.008128881 CET	5651	50206	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:01.207729101 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:01.213586092 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.213701010 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.213721037 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.213721037 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.213757992 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.213757992 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.219122887 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.219136953 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.219149113 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.219284058 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.224334002 CET	80	50204	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.224395990 CET	50204	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.300729990 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.310514927 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.310616016 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.377125978 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.439935923 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.439950943 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:01.445463896 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.446877003 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:01.525923967 CET	80	50205	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:01.526056051 CET	50205	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.526246071 CET	50205	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.532823086 CET	80	50205	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:01.627969027 CET	50208	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.633336067 CET	80	50208	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:01.633635044 CET	50208	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.768095016 CET	50208	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.768110037 CET	50208	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:01.773539066 CET	80	50208	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:01.773554087 CET	80	50208	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.187875986 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.189929008 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.189929008 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.189996004 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.190017939 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.190053940 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.195435047 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.195485115 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.195497990 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.195512056 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.196208000 CET	80	50207	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.196253061 CET	50207	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.223967075 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.285588980 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.291594028 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.291806936 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.354330063 CET	80	50208	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.354406118 CET	50208	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.354466915 CET	50208	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.359899998 CET	80	50208	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.392815113 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.394248009 CET	50210	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.402707100 CET	80	50210	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.402769089 CET	50210	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.424413919 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.424491882 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:02.430030107 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.430043936 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:02.534857988 CET	50210	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.534950018 CET	50210	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.543049097 CET	80	50210	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.543061972 CET	80	50210	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.625602961 CET	5651	50206	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.625770092 CET	50206	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.625814915 CET	50206	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.631306887 CET	5651	50206	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.722389936 CET	50211	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.729094028 CET	5651	50211	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.729168892 CET	50211	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.861907005 CET	50211	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.861923933 CET	50211	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:02.868442059 CET	5651	50211	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:02.868598938 CET	5651	50211	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.161904097 CET	80	50210	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.161969900 CET	50210	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.162048101 CET	50210	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.169413090 CET	80	50210	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.192759991 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.192939997 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.192956924 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.192966938 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.192981958 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.193011999 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.198415041 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.198427916 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.198440075 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.198452950 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.199343920 CET	80	50209	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.199992895 CET	50209	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.236594915 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.269020081 CET	50212	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.276675940 CET	80	50212	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.276787043 CET	50212	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.284673929 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.291860104 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.292290926 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.379371881 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.408885956 CET	50212	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.408885956 CET	50212	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.416661978 CET	80	50212	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.416831970 CET	80	50212	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.424144030 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.424365997 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.431516886 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.431536913 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.474059105 CET	5651	50211	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.475406885 CET	50211	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.475533009 CET	50211	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.480927944 CET	5651	50211	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.487798929 CET	50214	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.493552923 CET	5651	50214	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.493715048 CET	50214	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.627765894 CET	50214	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.627765894 CET	50214	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.633436918 CET	5651	50214	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.633447886 CET	5651	50214	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.764319897 CET	465	50185	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.764467001 CET	50185	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.764467001 CET	50185	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.765471935 CET	5555	50182	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.765554905 CET	50182	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.765618086 CET	50182	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.769903898 CET	465	50185	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.771225929 CET	5555	50182	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.817462921 CET	50215	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.823359013 CET	465	50215	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.823553085 CET	50215	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.832822084 CET	50216	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.838207006 CET	5555	50216	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.838282108 CET	50216	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.957285881 CET	50215	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.957298994 CET	50215	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.962966919 CET	465	50215	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.962981939 CET	465	50215	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.972867966 CET	50216	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.973011017 CET	50216	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:03.979717970 CET	5555	50216	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.979733944 CET	5555	50216	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:03.992423058 CET	80	50212	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:03.992502928 CET	50212	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:03.992571115 CET	50212	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.005007029 CET	80	50212	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.034668922 CET	50217	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.040154934 CET	80	50217	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.040250063 CET	50217	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.186413050 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.188385963 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.188385963 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.188385963 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.188471079 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.188471079 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.188915968 CET	50217	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.189680099 CET	50217	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.193968058 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.193981886 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.193994999 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.194006920 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.194745064 CET	80	50217	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.195791960 CET	80	50217	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.201133013 CET	80	50213	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.201215029 CET	50213	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.225780010 CET	5651	50214	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.225843906 CET	50214	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.226152897 CET	50214	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.231652975 CET	5651	50214	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.236370087 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.263468981 CET	50218	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.270031929 CET	5651	50218	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.270087004 CET	50218	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.295135021 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.300941944 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.305329084 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.377835035 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.400178909 CET	50218	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.400316954 CET	50218	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.405464888 CET	5651	50218	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.405675888 CET	5651	50218	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.425676107 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.425704002 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:04.431232929 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.431246996 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:04.756772041 CET	80	50217	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.757334948 CET	50217	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.757658005 CET	50217	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.764539957 CET	80	50217	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.800723076 CET	50220	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.806821108 CET	80	50220	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.806899071 CET	50220	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.940098047 CET	50220	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.940131903 CET	50220	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:04.945755005 CET	80	50220	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:04.945769072 CET	80	50220	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.014043093 CET	5651	50218	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.014106035 CET	50218	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.014149904 CET	50218	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.019790888 CET	5651	50218	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.026585102 CET	50221	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.032040119 CET	5651	50221	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.032136917 CET	50221	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.158932924 CET	50221	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.159075975 CET	50221	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.164577007 CET	5651	50221	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.164818048 CET	5651	50221	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.166703939 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.166816950 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.166852951 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.166852951 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.166868925 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.166889906 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.172302961 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.172317028 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.172328949 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.172343969 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.172645092 CET	80	50219	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.172698975 CET	50219	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.237771988 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.238447905 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.243228912 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.243304014 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.377166033 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.377691031 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.378617048 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:05.383418083 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.384185076 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:05.574261904 CET	80	50220	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.574377060 CET	50220	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.574448109 CET	50220	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.580060959 CET	80	50220	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.676244974 CET	50223	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.681641102 CET	80	50223	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.681706905 CET	50223	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.800457001 CET	5651	50221	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.800512075 CET	50221	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.800580978 CET	50221	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.806489944 CET	5651	50221	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.814829111 CET	50223	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.815000057 CET	50223	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.820436001 CET	80	50223	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.820570946 CET	80	50223	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.893800020 CET	50224	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:05.899657011 CET	5651	50224	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:05.899727106 CET	50224	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.034441948 CET	50224	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.034626961 CET	50224	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.040180922 CET	5651	50224	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.040348053 CET	5651	50224	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.153137922 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.153280973 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.153310061 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.153337955 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.153371096 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.153400898 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.158926010 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.158940077 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.159709930 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.159723043 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.160331011 CET	80	50222	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.160379887 CET	50222	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.222620010 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.228276968 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.228337049 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.253499985 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.361887932 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.361887932 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:06.367557049 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.367603064 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:06.377393961 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.430119991 CET	80	50223	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.430443048 CET	50223	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.430485010 CET	50223	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.436022997 CET	80	50223	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.441462040 CET	50226	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.446883917 CET	80	50226	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.446959019 CET	50226	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.580635071 CET	50226	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.580635071 CET	50226	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.586286068 CET	80	50226	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.586313009 CET	80	50226	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.650499105 CET	5651	50224	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.652019024 CET	50224	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.652045012 CET	50224	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.657749891 CET	5651	50224	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.659365892 CET	50227	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.665348053 CET	5651	50227	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.668071985 CET	50227	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.799789906 CET	50227	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.799838066 CET	50227	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:06.805327892 CET	5651	50227	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:06.805341005 CET	5651	50227	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.110551119 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.110666037 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.110687017 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.110687017 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.111113071 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.111151934 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.116089106 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.116101980 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.116115093 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.116739988 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.151089907 CET	80	50225	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.151330948 CET	50225	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.168008089 CET	80	50226	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.172482967 CET	50226	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.178574085 CET	50226	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.185390949 CET	80	50226	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.226736069 CET	50228	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.232517004 CET	80	50228	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.233264923 CET	50228	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.269891977 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.381068945 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.422537088 CET	5651	50227	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.423352003 CET	50227	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.427839994 CET	50227	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.434092045 CET	5651	50227	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.464427948 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.465898991 CET	50228	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.465913057 CET	50228	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.471237898 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.471309900 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.471412897 CET	80	50228	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.471426010 CET	80	50228	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.471678972 CET	50230	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.477267027 CET	5651	50230	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.477336884 CET	50230	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.484452009 CET	5651	50230	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.484508038 CET	50230	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.596601009 CET	50230	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.596640110 CET	50230	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.596769094 CET	50230	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.597153902 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.597168922 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:07.601999998 CET	5651	50230	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.602160931 CET	5651	50230	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.602193117 CET	5651	50230	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.602725029 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.602755070 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:07.984802008 CET	80	50228	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:07.984879971 CET	50228	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.985025883 CET	50228	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:07.990587950 CET	80	50228	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:08.284868956 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:08.341682911 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:08.343457937 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.343475103 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.343475103 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.343486071 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.343514919 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.349734068 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:08.349746943 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:08.349757910 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:08.349812984 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:08.351667881 CET	80	50229	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:08.355385065 CET	50229	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.377315044 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.472280979 CET	50231	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.478370905 CET	5651	50231	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:08.479341030 CET	50231	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.488712072 CET	50232	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.495017052 CET	80	50232	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:08.495083094 CET	50232	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.502885103 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.508598089 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:08.509322882 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.612015009 CET	50231	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.612035036 CET	50231	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.619147062 CET	5651	50231	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:08.619158983 CET	5651	50231	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:08.627969980 CET	50232	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.627995968 CET	50232	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:08.634500027 CET	80	50232	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:08.634516001 CET	80	50232	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:08.643389940 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.643389940 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:08.649985075 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:08.650151014 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.208334923 CET	5651	50231	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.208401918 CET	50231	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.208553076 CET	50231	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.214603901 CET	5651	50231	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.272666931 CET	80	50232	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.272725105 CET	50232	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.272770882 CET	50232	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.280616999 CET	80	50232	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.284538031 CET	50234	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.291805029 CET	5651	50234	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.291985989 CET	50234	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.299916029 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.300082922 CET	50235	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.306807041 CET	80	50235	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.306899071 CET	50235	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.392780066 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.412796021 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.412934065 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.412949085 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.412949085 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.412959099 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.413001060 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.418454885 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.418464899 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.418473959 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.418482065 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.418905973 CET	80	50233	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.418972969 CET	50233	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.424618006 CET	50234	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.424618006 CET	50234	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.430948019 CET	5651	50234	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.430964947 CET	5651	50234	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.440355062 CET	50235	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.440355062 CET	50235	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:09.445997953 CET	80	50235	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.446007967 CET	80	50235	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:09.504565001 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.510133028 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.510252953 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.643138885 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.643167019 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:09.649622917 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:09.649667025 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.014955997 CET	5651	50234	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.015396118 CET	50234	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.015465021 CET	50234	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.020936012 CET	5651	50234	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.022052050 CET	80	50235	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.022105932 CET	50235	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.022188902 CET	50235	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.027606964 CET	80	50235	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.051124096 CET	50237	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.056751013 CET	5651	50237	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.056813955 CET	50237	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.066859961 CET	50238	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.072186947 CET	80	50238	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.075387955 CET	50238	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.190320015 CET	50237	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.190740108 CET	50237	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.196053982 CET	5651	50237	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.196788073 CET	5651	50237	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.205535889 CET	50238	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.205614090 CET	50238	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.210863113 CET	80	50238	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.211446047 CET	80	50238	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.316867113 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.392803907 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.570408106 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.570513964 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.570513964 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.570532084 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.570565939 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.570565939 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.571295977 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.571338892 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.571449041 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.571487904 CET	50236	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.579051971 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.579060078 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.579067945 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.579076052 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.579083920 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.579102039 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.579119921 CET	80	50236	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.598563910 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.603877068 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.603959084 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.736890078 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.736917973 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:10.742394924 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.742480040 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:10.795995951 CET	5651	50237	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.796086073 CET	50237	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.796129942 CET	50237	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.801574945 CET	5651	50237	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.802870989 CET	80	50238	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.802978992 CET	50238	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.803025961 CET	50238	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.808478117 CET	80	50238	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.816134930 CET	50240	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.822393894 CET	5651	50240	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.822469950 CET	50240	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.832041979 CET	50241	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.837421894 CET	80	50241	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.837510109 CET	50241	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.955693007 CET	50240	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.955790997 CET	50240	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.962605000 CET	5651	50240	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.962620020 CET	5651	50240	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.971599102 CET	50241	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.971599102 CET	50241	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:10.977557898 CET	80	50241	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:10.977572918 CET	80	50241	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.331077099 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.377181053 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.457926989 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.458081007 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.458081007 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.458112955 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.458112955 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.458122969 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.463721037 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.463736057 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.463746071 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.463749886 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.465470076 CET	80	50239	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.465564966 CET	50239	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.471960068 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.477950096 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.478106022 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.558202028 CET	5651	50240	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.559098005 CET	50240	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.559331894 CET	50240	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.565018892 CET	5651	50240	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.575350046 CET	80	50241	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.575527906 CET	50241	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.575527906 CET	50241	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.581322908 CET	80	50241	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.581404924 CET	50243	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.587201118 CET	5651	50243	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.587331057 CET	50243	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.597094059 CET	50244	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.604494095 CET	80	50244	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.605129957 CET	50244	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.611937046 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.611937046 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:11.617398024 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.617408991 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:11.721169949 CET	50243	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.721169949 CET	50243	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.726752043 CET	5651	50243	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.726830959 CET	5651	50243	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.736725092 CET	50244	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.736771107 CET	50244	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:11.742475033 CET	80	50244	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:11.742486000 CET	80	50244	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.318881989 CET	5651	50243	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.319457054 CET	50243	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.324284077 CET	465	50215	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.324331045 CET	50243	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.324357986 CET	50215	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.324414968 CET	50215	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.329813957 CET	5555	50216	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:12.329844952 CET	5651	50243	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.329936981 CET	50216	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:12.329936981 CET	50216	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:12.330001116 CET	465	50215	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.335455894 CET	5555	50216	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:12.347037077 CET	50245	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.348381996 CET	80	50244	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.348450899 CET	50244	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.348522902 CET	50244	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.349317074 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:12.352130890 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.352236986 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:12.352276087 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:12.352276087 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:12.352276087 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:12.352330923 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:12.353792906 CET	5651	50245	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.353871107 CET	50245	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.358109951 CET	80	50244	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.358329058 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:12.358338118 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:12.358345985 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:12.359525919 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:12.359554052 CET	80	50242	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:12.361323118 CET	50242	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:12.486619949 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.486890078 CET	50245	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.486927032 CET	50245	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.820995092 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.821054935 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:12.822876930 CET	5651	50245	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:12.822885990 CET	5651	50245	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:13.081129074 CET	5651	50245	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:13.081197977 CET	50245	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:13.081250906 CET	50245	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:13.086833954 CET	5651	50245	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:13.363814116 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:13.486536980 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:14.394079924 CET	50246	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:15.384150028 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:15.385387897 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:15.385544062 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:15.386591911 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:15.386637926 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:15.387608051 CET	465	50246	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:15.387691975 CET	50246	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:15.400748014 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:15.400854111 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:15.517882109 CET	50246	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:15.517920971 CET	50246	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:15.523699999 CET	465	50246	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:15.523776054 CET	465	50246	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:16.441154003 CET	50247	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:16.457021952 CET	50248	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:16.471822977 CET	50249	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:16.487673044 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:16.985099077 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:16.986931086 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:16.986979008 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:16.997014999 CET	5555	50247	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:16.997044086 CET	5651	50248	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:16.997071981 CET	80	50249	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:16.997085094 CET	50247	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:16.997100115 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:16.997111082 CET	50248	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:16.997138977 CET	50249	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:16.997162104 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.002427101 CET	50247	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.002444983 CET	50247	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.009418011 CET	5555	50247	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.009540081 CET	5555	50247	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.018074989 CET	50248	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.018111944 CET	50248	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.023535967 CET	5651	50248	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.023782969 CET	5651	50248	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.033613920 CET	50249	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.033724070 CET	50249	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.039797068 CET	80	50249	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.039810896 CET	80	50249	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.049287081 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.049312115 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.054805994 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.054819107 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.425271988 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.471004009 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.911122084 CET	80	50249	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.911154032 CET	5651	50248	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.911197901 CET	50249	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.911245108 CET	50249	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.911247969 CET	50248	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.911333084 CET	50248	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.911989927 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.912863970 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.912864923 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.912883043 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.912883043 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.913114071 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.917037010 CET	80	50249	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.917165995 CET	5651	50248	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.918467045 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.918478966 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.918504000 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.918570042 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.922730923 CET	80	50250	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.922841072 CET	50250	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.925064087 CET	50251	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.930757999 CET	5651	50251	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.931252003 CET	50251	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.940888882 CET	50252	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.946659088 CET	80	50252	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:17.946764946 CET	50252	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:17.960400105 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:17.966547012 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:17.966708899 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.065409899 CET	50251	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.065613031 CET	50251	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.071203947 CET	5651	50251	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.071233988 CET	5651	50251	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.080535889 CET	50252	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.080535889 CET	50252	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.085962057 CET	80	50252	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.086860895 CET	80	50252	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.095978975 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.096326113 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.102020025 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.102102995 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.440767050 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.486577988 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.663389921 CET	80	50252	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.663443089 CET	50252	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.663484097 CET	50252	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.668164015 CET	5651	50251	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.668246031 CET	50251	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.668275118 CET	50251	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.668863058 CET	80	50252	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.673557043 CET	5651	50251	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.690640926 CET	50254	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.696055889 CET	5651	50254	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.696155071 CET	50254	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.706186056 CET	50255	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.711873055 CET	80	50255	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.711936951 CET	50255	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.830962896 CET	50254	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.830980062 CET	50254	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.836549044 CET	5651	50254	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.836565018 CET	5651	50254	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.846050978 CET	50255	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.846050978 CET	50255	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:18.851957083 CET	80	50255	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.852050066 CET	80	50255	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:18.865200043 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.865336895 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.865336895 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.865367889 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.865367889 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.865390062 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.870839119 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.870863914 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.870898962 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.871043921 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.872148991 CET	80	50253	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.872217894 CET	50253	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.909462929 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:18.914828062 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:18.915066004 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.049252033 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.049267054 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.055087090 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.055089951 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.432178020 CET	5651	50254	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.432243109 CET	50254	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.432290077 CET	50254	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.437818050 CET	5651	50254	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.456497908 CET	50257	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.461261988 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.462156057 CET	5651	50257	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.462786913 CET	50257	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.498054028 CET	5651	50257	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.498111010 CET	50257	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.499583960 CET	80	50255	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.499640942 CET	50255	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.499679089 CET	50255	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.502187967 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.505104065 CET	80	50255	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.565634012 CET	50258	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.571908951 CET	80	50258	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.571990967 CET	50258	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.596132040 CET	50257	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.596249104 CET	50257	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.596312046 CET	50257	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.601666927 CET	5651	50257	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.601686001 CET	5651	50257	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.601702929 CET	5651	50257	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.675478935 CET	50259	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.680999041 CET	5651	50259	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.681082964 CET	50259	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.705827951 CET	50258	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.705892086 CET	50258	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.711309910 CET	80	50258	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.712004900 CET	80	50258	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.815957069 CET	50259	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.816000938 CET	50259	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:19.821469069 CET	5651	50259	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.821482897 CET	5651	50259	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:19.824498892 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.824585915 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.824614048 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.824635983 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.824645996 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.824707031 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.830156088 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.830213070 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.830254078 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.830267906 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.831744909 CET	80	50256	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.831947088 CET	50256	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.893989086 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:19.899406910 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:19.900055885 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.033782959 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.033826113 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.039139032 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.039194107 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.293107986 CET	80	50258	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.293171883 CET	50258	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.293221951 CET	50258	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.298708916 CET	80	50258	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.331831932 CET	50261	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.337846994 CET	80	50261	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.337959051 CET	50261	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.392383099 CET	5651	50259	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.392453909 CET	50259	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.392522097 CET	50259	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.398448944 CET	5651	50259	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.441277981 CET	50262	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.446765900 CET	5651	50262	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.446854115 CET	50262	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.471678019 CET	50261	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.471962929 CET	50261	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.472476959 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.477483988 CET	80	50261	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.477495909 CET	80	50261	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.517841101 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.580748081 CET	50262	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.580777884 CET	50262	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:20.586225986 CET	5651	50262	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.586328030 CET	5651	50262	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:20.781352997 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.781476021 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.781500101 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.781500101 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.781522036 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.781522036 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.787036896 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.787048101 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.787250042 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.787260056 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.788096905 CET	80	50260	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.788153887 CET	50260	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.878494024 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:20.884109974 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:20.884211063 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.018610001 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.018610001 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.024174929 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.024380922 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.060303926 CET	80	50261	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.060363054 CET	50261	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.060444117 CET	50261	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.066046000 CET	80	50261	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.097827911 CET	50264	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.103612900 CET	80	50264	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.103689909 CET	50264	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.191394091 CET	5651	50262	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.191679001 CET	50262	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.191713095 CET	50262	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.197395086 CET	5651	50262	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.206664085 CET	50265	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.212207079 CET	5651	50265	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.212287903 CET	50265	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.236840963 CET	50264	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.236869097 CET	50264	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.242321014 CET	80	50264	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.242340088 CET	80	50264	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.348108053 CET	50265	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.348135948 CET	50265	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.353681087 CET	5651	50265	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.353724003 CET	5651	50265	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.487624884 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.533498049 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.761257887 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.761394024 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.761437893 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.761437893 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.761437893 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.761482000 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.767072916 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.767103910 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.767112970 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.767117023 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.767930031 CET	80	50263	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.771409988 CET	50263	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.872098923 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.877585888 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:21.877659082 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:21.932698011 CET	80	50264	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.932776928 CET	50264	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.932836056 CET	50264	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.938218117 CET	80	50264	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.972104073 CET	50267	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:21.977755070 CET	80	50267	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:21.977816105 CET	50267	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.002563953 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.002582073 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.008383989 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.008404016 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.077610970 CET	5651	50265	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.077730894 CET	50265	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.077773094 CET	50265	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.081301928 CET	50268	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.083417892 CET	5651	50265	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.087563038 CET	5651	50268	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.087627888 CET	50268	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.111903906 CET	50267	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.112379074 CET	50267	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.117650032 CET	80	50267	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.117702007 CET	80	50267	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.221368074 CET	50268	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.221417904 CET	50268	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.226855993 CET	5651	50268	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.226886988 CET	5651	50268	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.822772026 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.823837042 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.823849916 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.823908091 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.823950052 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.823961020 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.823975086 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.823985100 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.824016094 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.829438925 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.829448938 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.829457998 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.829463005 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.839435101 CET	80	50266	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.839487076 CET	50266	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.847449064 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.851548910 CET	80	50267	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.851603985 CET	50267	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.851639986 CET	50267	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.852983952 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.853049040 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.857026100 CET	80	50267	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.920263052 CET	5651	50268	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.920365095 CET	50268	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.920413017 CET	50268	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.926058054 CET	5651	50268	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.956317902 CET	50270	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.961654902 CET	5651	50270	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.961724997 CET	50270	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.971894026 CET	50271	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.977317095 CET	80	50271	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:22.977396011 CET	50271	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:22.987541914 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.987559080 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:22.993128061 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:22.993139982 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:23.096236944 CET	50270	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.096256971 CET	50270	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.101602077 CET	5651	50270	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.101613998 CET	5651	50270	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.111800909 CET	50271	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.111800909 CET	50271	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.119400978 CET	80	50271	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.119414091 CET	80	50271	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.502898932 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.549124002 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.969698906 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:23.970241070 CET	80	50271	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.970274925 CET	5651	50270	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.970312119 CET	465	50246	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.970324993 CET	50271	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.970360041 CET	50270	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.970398903 CET	50246	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.970474005 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:23.970474005 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:23.970474005 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:23.970527887 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:23.970597982 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:23.970608950 CET	50271	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.970695019 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:23.970726013 CET	50270	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.970812082 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:23.971579075 CET	50246	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:23.976064920 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:23.976452112 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:23.976464987 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:23.976495981 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:23.976509094 CET	80	50271	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.976521969 CET	5651	50270	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.977138042 CET	465	50246	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:23.977514029 CET	80	50269	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:23.977652073 CET	50269	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:24.051348925 CET	50272	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.059715033 CET	5651	50272	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.060198069 CET	50272	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.067349911 CET	50273	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.072987080 CET	80	50273	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.073132992 CET	50273	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.081528902 CET	50274	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.091835022 CET	465	50274	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.092075109 CET	50274	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.096926928 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:24.104885101 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:24.105032921 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:24.191755056 CET	50272	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.191771030 CET	50272	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.197033882 CET	5651	50272	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.197045088 CET	5651	50272	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.245615005 CET	50273	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.245825052 CET	50273	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.245824099 CET	50274	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.245874882 CET	50274	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:24.245874882 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:24.245886087 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:24.251038074 CET	80	50273	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.251348972 CET	80	50273	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.251358986 CET	465	50274	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.251365900 CET	465	50274	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.251375914 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:24.251460075 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:24.518291950 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:24.564707041 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.049190998 CET	5651	50272	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.049202919 CET	80	50273	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.049256086 CET	50272	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.049280882 CET	50273	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.049336910 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.049345970 CET	50272	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.049376011 CET	50273	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.049685001 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.049706936 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.049706936 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.049730062 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.049730062 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.055362940 CET	5651	50272	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.055372953 CET	80	50273	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.055826902 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.055835962 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.055845022 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.055855036 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.064124107 CET	80	50275	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.064173937 CET	50275	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.143968105 CET	50276	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.149430037 CET	5651	50276	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.149490118 CET	50276	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.160083055 CET	50277	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.168971062 CET	80	50277	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.169116974 CET	50277	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.175945044 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.181269884 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.181344032 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.284111023 CET	50276	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.284249067 CET	50276	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.289741039 CET	5651	50276	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.289958000 CET	5651	50276	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.299365044 CET	50277	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.299592972 CET	50277	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.304678917 CET	80	50277	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.304928064 CET	80	50277	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.314995050 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.315021038 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.320451975 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.320600986 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.509030104 CET	5555	50247	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.509207964 CET	50247	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.509239912 CET	50247	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.514775038 CET	5555	50247	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.519350052 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.564717054 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.581243038 CET	50279	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.587095976 CET	5555	50279	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.587177992 CET	50279	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.721333027 CET	50279	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.721462011 CET	50279	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:25.727142096 CET	5555	50279	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.727154970 CET	5555	50279	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:25.995232105 CET	5651	50276	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:25.995419979 CET	50276	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:25.995419979 CET	50276	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.001036882 CET	5651	50276	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.009474039 CET	80	50277	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.009531021 CET	50277	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.009608984 CET	50277	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.014988899 CET	80	50277	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.018795013 CET	50280	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.024672031 CET	5651	50280	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.024744987 CET	50280	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.034477949 CET	50281	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.040218115 CET	80	50281	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.040301085 CET	50281	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.052294016 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.052381992 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.052403927 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.052403927 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.052412987 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.052431107 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.057965040 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.057976007 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.057984114 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.057996988 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.058366060 CET	80	50278	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.058423042 CET	50278	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.128006935 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.134352922 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.134452105 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.158740044 CET	50280	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.158761024 CET	50280	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.166739941 CET	5651	50280	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.167063951 CET	5651	50280	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.174143076 CET	50281	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.174215078 CET	50281	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.182311058 CET	80	50281	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.182321072 CET	80	50281	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.268089056 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.268089056 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:26.275341988 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.275355101 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:26.534193993 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.580342054 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.855073929 CET	5651	50280	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.855393887 CET	50280	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.875262976 CET	50280	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.880660057 CET	5651	50280	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.889095068 CET	80	50281	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.891423941 CET	50281	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.891995907 CET	50281	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.898231983 CET	80	50281	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.929438114 CET	50283	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.933085918 CET	50284	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.935930967 CET	5651	50283	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.938844919 CET	80	50284	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:26.939023018 CET	50284	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:26.939028025 CET	50283	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.014765024 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.017501116 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.017533064 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.017533064 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.017533064 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.017533064 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.023020029 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.023030043 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.023082972 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.023092985 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.024307013 CET	80	50282	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.027401924 CET	50282	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.067753077 CET	50283	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.067753077 CET	50283	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.067794085 CET	50284	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.067887068 CET	50284	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.073332071 CET	5651	50283	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.073343039 CET	5651	50283	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.073354959 CET	80	50284	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.073451042 CET	80	50284	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.140630960 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.146015882 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.146104097 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.268003941 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.268148899 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:27.274173021 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.274183989 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:27.550757885 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.595962048 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.769758940 CET	5651	50283	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.769887924 CET	50283	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.769887924 CET	50283	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.776242971 CET	5651	50283	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.822333097 CET	80	50284	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.822391987 CET	50284	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.822438955 CET	50284	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.828037024 CET	80	50284	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.878215075 CET	50286	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.883976936 CET	5651	50286	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.884040117 CET	50286	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.893982887 CET	50287	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:27.899383068 CET	80	50287	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:27.899473906 CET	50287	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.018366098 CET	50286	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.018450022 CET	50286	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.023854971 CET	5651	50286	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.023977995 CET	5651	50286	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.033655882 CET	50287	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.033797026 CET	50287	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.035969973 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.036067963 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.036091089 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.036091089 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.036099911 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.036118984 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.039113998 CET	80	50287	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.039225101 CET	80	50287	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.041498899 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.041510105 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.041520119 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.041537046 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.042362928 CET	80	50285	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.042532921 CET	50285	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.097273111 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.103131056 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.103389025 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.236784935 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.236991882 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.242408991 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.242981911 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.565356016 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.611599922 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.751430988 CET	5651	50286	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.751492023 CET	50286	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.751559019 CET	50286	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.753263950 CET	50289	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.757189035 CET	5651	50286	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.758594036 CET	5651	50289	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.758668900 CET	50289	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.785743952 CET	80	50287	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.785821915 CET	50287	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.786142111 CET	50287	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.791541100 CET	80	50287	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.863138914 CET	50290	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.868593931 CET	80	50290	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.868774891 CET	50290	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.893327951 CET	50289	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.893554926 CET	50289	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:28.898829937 CET	5651	50289	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.899101973 CET	5651	50289	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:28.994409084 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:28.994560003 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.994560003 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.994594097 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.994594097 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:28.994595051 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.000555992 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.000566959 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.000575066 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.000590086 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.001008987 CET	80	50288	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.001163006 CET	50288	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.002437115 CET	50290	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.002499104 CET	50290	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.007766008 CET	80	50290	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.008136034 CET	80	50290	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.081657887 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.087050915 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.087203979 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.221446991 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.221446991 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.227801085 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.228461981 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.852253914 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.852284908 CET	5651	50289	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.852365971 CET	50289	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.852458954 CET	50289	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.852993011 CET	80	50290	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.853065968 CET	50290	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.853243113 CET	50290	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.854233027 CET	5651	50289	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.854304075 CET	50289	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.858268023 CET	5651	50289	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.858829021 CET	80	50290	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.879610062 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.879781008 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.957027912 CET	50292	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.962783098 CET	5651	50292	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.962915897 CET	50292	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.972224951 CET	50293	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.975378036 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.975650072 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.975650072 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.975650072 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.975688934 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.975720882 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:29.977821112 CET	80	50293	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:29.977917910 CET	50293	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:29.981158018 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.981168985 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.981178999 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.981189013 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.982106924 CET	80	50291	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:29.982280016 CET	50291	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:30.096261978 CET	50292	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.096261978 CET	50292	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.101924896 CET	5651	50292	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:30.101989985 CET	5651	50292	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:30.111924887 CET	50293	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.111982107 CET	50293	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.117562056 CET	80	50293	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:30.117672920 CET	80	50293	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:30.758393049 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:30.799180984 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.820005894 CET	5651	50292	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:30.820218086 CET	50292	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.820218086 CET	50292	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.825793028 CET	5651	50292	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:30.837498903 CET	80	50293	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:30.837577105 CET	50293	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.837655067 CET	50293	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:30.843230963 CET	80	50293	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:31.613341093 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:31.658513069 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.020833969 CET	50294	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.026237965 CET	5651	50294	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.026308060 CET	50294	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.035052061 CET	50295	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.040457964 CET	80	50295	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.040534973 CET	50295	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.050800085 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.057090044 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.057168961 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.158878088 CET	50294	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.158905983 CET	50294	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.164294004 CET	5651	50294	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.164304972 CET	5651	50294	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.174942970 CET	50295	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.174962044 CET	50295	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.180495977 CET	80	50295	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.180505991 CET	80	50295	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.190004110 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.190036058 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.195323944 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.195425034 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.577477932 CET	465	50274	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.577554941 CET	50274	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.577620029 CET	50274	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.581574917 CET	50297	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.582987070 CET	465	50274	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.587296009 CET	465	50297	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.587393999 CET	50297	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.628344059 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.674151897 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.721586943 CET	50297	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.721657991 CET	50297	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.727147102 CET	465	50297	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.727169991 CET	465	50297	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.887481928 CET	80	50295	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.887553930 CET	50295	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.887593031 CET	50295	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.893121004 CET	80	50295	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.909828901 CET	50298	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.910828114 CET	5651	50294	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.910902023 CET	50294	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.910963058 CET	50294	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.911231041 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.911339045 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.911364079 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.911364079 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.911390066 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.911406994 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:32.915370941 CET	80	50298	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.915438890 CET	50298	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:32.916625023 CET	5651	50294	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:32.916748047 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.916759014 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.916766882 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.916938066 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.917346001 CET	80	50296	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:32.917397976 CET	50296	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:33.049217939 CET	50298	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:33.049248934 CET	50298	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:33.054709911 CET	80	50298	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:33.054728031 CET	80	50298	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:33.643918037 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:33.689748049 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:33.762754917 CET	80	50298	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:33.762867928 CET	50298	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:33.762912989 CET	50298	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:33.768418074 CET	80	50298	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:34.068562031 CET	5555	50279	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:34.069392920 CET	50279	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:34.070950031 CET	50279	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:34.076253891 CET	5555	50279	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:34.977981091 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:34.981360912 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:34.981455088 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:35.660806894 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:35.705399990 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:36.664817095 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:36.705409050 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.002608061 CET	50299	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.003571987 CET	50300	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.008460045 CET	5651	50299	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.008527040 CET	50299	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.009047031 CET	80	50300	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.009147882 CET	50300	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.018836021 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:37.024776936 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:37.024836063 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:37.034595966 CET	50302	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:37.039946079 CET	5555	50302	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:37.040051937 CET	50302	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:37.142930984 CET	50300	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.142930984 CET	50299	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.142962933 CET	50299	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.142986059 CET	50300	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.148286104 CET	80	50300	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.148314953 CET	5651	50299	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.148324966 CET	5651	50299	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.148680925 CET	80	50300	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.158545971 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:37.158561945 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:37.164589882 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:37.164608955 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:37.174182892 CET	50302	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:37.174241066 CET	50302	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:37.179841995 CET	5555	50302	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:37.179861069 CET	5555	50302	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:37.680675983 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.721040964 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.913104057 CET	5651	50299	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.913193941 CET	50299	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.913229942 CET	50299	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.917730093 CET	80	50300	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.917788982 CET	50300	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.917834044 CET	50300	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.919244051 CET	5651	50299	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.923156023 CET	80	50300	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.940953970 CET	50303	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.946564913 CET	5651	50303	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.946636915 CET	50303	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.956568956 CET	50304	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:37.961971045 CET	80	50304	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:37.962025881 CET	50304	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.035016060 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.035207033 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.035243034 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.035243034 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.035257101 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.035351992 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.040743113 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.040752888 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.040762901 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.040774107 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.046001911 CET	80	50301	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.046053886 CET	50301	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.050671101 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.056114912 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.056174040 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.080724955 CET	50303	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.080840111 CET	50303	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.086164951 CET	5651	50303	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.086253881 CET	5651	50303	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.098678112 CET	50304	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.098710060 CET	50304	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.104075909 CET	80	50304	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.104480028 CET	80	50304	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.189951897 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.190072060 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.195662975 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.196039915 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.692910910 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.736660004 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.790211916 CET	5651	50303	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.790340900 CET	50303	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.790390015 CET	50303	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.795819044 CET	5651	50303	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.816035032 CET	50306	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.821429968 CET	5651	50306	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.821515083 CET	50306	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.837543011 CET	80	50304	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.837616920 CET	50304	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.837766886 CET	50304	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.843282938 CET	80	50304	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.925318003 CET	50307	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.937526941 CET	80	50307	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.937633038 CET	50307	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.943497896 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.943627119 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.943680048 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.943680048 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.943680048 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.943680048 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.949064970 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.949075937 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.949084997 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.949089050 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.949856997 CET	80	50305	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:38.950011969 CET	50305	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:38.955651999 CET	50306	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.955729008 CET	50306	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:38.961244106 CET	5651	50306	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:38.961255074 CET	5651	50306	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.035362959 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.040760994 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.040842056 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.065196991 CET	50307	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.065284014 CET	50307	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.070739985 CET	80	50307	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.070751905 CET	80	50307	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.174438000 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.174474955 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.486649990 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.489989042 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.490000963 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.492806911 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.671008110 CET	5651	50306	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.671106100 CET	50306	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.671139002 CET	50306	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.676543951 CET	5651	50306	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.692713976 CET	50309	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.698045969 CET	5651	50309	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.698113918 CET	50309	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.709336996 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.752279997 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.785008907 CET	80	50307	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.785157919 CET	50307	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.785206079 CET	50307	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.790488005 CET	80	50307	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.800108910 CET	50310	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.805373907 CET	80	50310	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.805447102 CET	50310	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.831347942 CET	50309	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.831370115 CET	50309	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.837053061 CET	5651	50309	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.837147951 CET	5651	50309	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.931248903 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.931380033 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.931380033 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.931410074 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.931410074 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.931432009 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.938364983 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.938370943 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.938380003 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.938389063 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.938611984 CET	80	50308	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:39.938658953 CET	50308	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:39.940344095 CET	50310	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.940356016 CET	50310	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:39.945725918 CET	80	50310	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:39.945736885 CET	80	50310	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.019207001 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.026526928 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.026601076 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.159607887 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.159626007 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.166248083 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.166287899 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.529908895 CET	5651	50309	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.530030966 CET	50309	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.530101061 CET	50309	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.537398100 CET	5651	50309	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.566246986 CET	50312	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.571755886 CET	5651	50312	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.571841955 CET	50312	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.659030914 CET	80	50310	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.659113884 CET	50310	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.659162045 CET	50310	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.666016102 CET	80	50310	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.675035000 CET	50313	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.680845976 CET	80	50313	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.680915117 CET	50313	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.705566883 CET	50312	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.705957890 CET	50312	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.711127996 CET	5651	50312	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.711608887 CET	5651	50312	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.724730015 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.767900944 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.814939022 CET	50313	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.814953089 CET	50313	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:40.820378065 CET	80	50313	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.820430994 CET	80	50313	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:40.898590088 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.901098967 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.901144028 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.901144028 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.901161909 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.901213884 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:40.906769037 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.906814098 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.906826973 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.906840086 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.907222986 CET	80	50311	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:40.907284021 CET	50311	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.003416061 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.010965109 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.011044979 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.072521925 CET	465	50297	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.072596073 CET	50297	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.072674990 CET	50297	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.078952074 CET	465	50297	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.112946033 CET	50315	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.118865967 CET	465	50315	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.119199991 CET	50315	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.143151999 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.143207073 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.149146080 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.149158955 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.252520084 CET	50315	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.252520084 CET	50315	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.258409023 CET	465	50315	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.258424044 CET	465	50315	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.448081017 CET	5651	50312	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.448189020 CET	50312	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.448249102 CET	50312	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.453810930 CET	5651	50312	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.526002884 CET	80	50313	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.526297092 CET	50313	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.526388884 CET	50313	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.532885075 CET	80	50313	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.550282955 CET	50316	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.556684017 CET	5651	50316	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.556843042 CET	50316	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.566616058 CET	50317	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.572299004 CET	80	50317	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.572523117 CET	50317	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.690345049 CET	50316	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.690373898 CET	50316	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.696840048 CET	5651	50316	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.696850061 CET	5651	50316	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.705647945 CET	50317	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.705672979 CET	50317	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.714807034 CET	80	50317	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.714818954 CET	80	50317	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.727936029 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:41.783544064 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:41.897346973 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.897600889 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.897628069 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.897628069 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.897638083 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.897691965 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.903042078 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.903053045 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.903093100 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.903103113 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.903784990 CET	80	50314	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.903848886 CET	50314	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.987806082 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:41.993375063 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:41.993452072 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.127902031 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.128103971 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.134103060 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.134402037 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.401822090 CET	5651	50316	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.402051926 CET	50316	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.402199030 CET	50316	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.407857895 CET	5651	50316	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.425338030 CET	50319	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.431025982 CET	5651	50319	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.431106091 CET	50319	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.448467970 CET	80	50317	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.448540926 CET	50317	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.448575974 CET	50317	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.454372883 CET	80	50317	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.535402060 CET	50320	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.540771008 CET	80	50320	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.540843964 CET	50320	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.565416098 CET	50319	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.565660954 CET	50319	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.571686029 CET	5651	50319	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.571697950 CET	5651	50319	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.674638987 CET	50320	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.674653053 CET	50320	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.680094957 CET	80	50320	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.680109978 CET	80	50320	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.739356041 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:42.783580065 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:42.856179953 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.856323004 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.856362104 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.856362104 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.856375933 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.856400967 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.861984015 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.861994982 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.862004995 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.862015009 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.862736940 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.863307953 CET	80	50318	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.863452911 CET	50318	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:42.869496107 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:42.869569063 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:43.002624035 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:43.002624035 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:43.008136988 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:43.008191109 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:43.283104897 CET	5651	50319	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.283189058 CET	50319	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.283616066 CET	50319	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.288948059 CET	5651	50319	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.300337076 CET	50322	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.305727959 CET	5651	50322	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.305797100 CET	50322	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.377166986 CET	80	50320	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.377221107 CET	50320	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.377276897 CET	50320	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.382750034 CET	80	50320	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.409676075 CET	50323	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.414999008 CET	80	50323	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.415267944 CET	50323	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.440154076 CET	50322	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.440172911 CET	50322	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.445518017 CET	5651	50322	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.445529938 CET	5651	50322	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.549495935 CET	50323	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.549495935 CET	50323	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:43.554800987 CET	80	50323	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:43.554863930 CET	80	50323	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.115659952 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.115691900 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.115864038 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.115895033 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.115895033 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.115916014 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.115923882 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.116332054 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.116384029 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.116452932 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.116580963 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.180377960 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.365480900 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.365510941 CET	5651	50322	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.365531921 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.365561962 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.365592957 CET	50322	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.365592957 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.365613937 CET	50322	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.366015911 CET	80	50323	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.366046906 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.366097927 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.366099119 CET	50323	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.366153955 CET	50323	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.367913008 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.367945910 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.367958069 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.367969990 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.367980003 CET	50321	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.367985010 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.367996931 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.372904062 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.373064041 CET	5651	50322	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.373102903 CET	50322	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.373816967 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.373924017 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.375396967 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.375420094 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.375431061 CET	5651	50322	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.376260996 CET	80	50323	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.377078056 CET	80	50321	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.395237923 CET	50325	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.400640011 CET	5651	50325	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.400738001 CET	50325	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.410096884 CET	50326	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.416251898 CET	80	50326	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.416313887 CET	50326	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.455614090 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.455614090 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:44.461229086 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.461240053 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:44.533704042 CET	50325	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.533704042 CET	50325	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.539273977 CET	5651	50325	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.539288998 CET	5651	50325	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.549451113 CET	50326	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.549451113 CET	50326	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:44.555685043 CET	80	50326	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.555696011 CET	80	50326	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.771761894 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:44.814789057 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.238953114 CET	5651	50325	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:45.239154100 CET	50325	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.239221096 CET	50325	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.244803905 CET	5651	50325	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:45.269985914 CET	50327	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.275413036 CET	5651	50327	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:45.275537014 CET	50327	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.275574923 CET	80	50326	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:45.275626898 CET	50326	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.275726080 CET	50326	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.282289982 CET	80	50326	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:45.284647942 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.284807920 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.284828901 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.284828901 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.284840107 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.284928083 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.290157080 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.290167093 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.290177107 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.290185928 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.290725946 CET	80	50324	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.290776014 CET	50324	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.422825098 CET	50327	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.422897100 CET	50327	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:45.428385973 CET	5651	50327	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:45.428441048 CET	5651	50327	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:45.868324995 CET	5555	50302	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.868385077 CET	50302	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.868429899 CET	50302	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.872462988 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:45.875823021 CET	5555	50302	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.875880003 CET	50302	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:45.876322985 CET	5555	50302	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:45.924160004 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:46.112765074 CET	5651	50327	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:46.112829924 CET	50327	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:46.112905979 CET	50327	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:46.118258953 CET	5651	50327	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:46.801934958 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:46.846106052 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:47.804507971 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:47.846051931 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:48.818290949 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:48.861676931 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:49.659174919 CET	465	50315	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:49.659254074 CET	50315	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:49.659385920 CET	50315	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:49.664649010 CET	465	50315	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:49.833292961 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:49.877417088 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:50.848938942 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:50.892988920 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.457750082 CET	50328	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.463449955 CET	5651	50328	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.463526011 CET	50328	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.472196102 CET	50329	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.478774071 CET	80	50329	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.478861094 CET	50329	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.487673044 CET	50330	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.493113995 CET	465	50330	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.493175983 CET	50330	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.503227949 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:51.509927988 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:51.509989023 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:51.519341946 CET	50332	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:51.525032043 CET	5555	50332	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:51.525093079 CET	50332	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:51.596164942 CET	50328	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.596180916 CET	50328	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.601664066 CET	5651	50328	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.602032900 CET	5651	50328	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.611785889 CET	50329	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.611824989 CET	50329	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.617492914 CET	80	50329	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.617503881 CET	80	50329	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.627424002 CET	50330	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.627437115 CET	50330	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:51.632951975 CET	465	50330	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.633002043 CET	465	50330	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.643441916 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:51.643455982 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:51.648986101 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:51.648998022 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:51.658606052 CET	50332	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:51.658618927 CET	50332	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:51.663891077 CET	5555	50332	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:51.664016962 CET	5555	50332	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:51.864295006 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:51.908562899 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.316663980 CET	5651	50328	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.316762924 CET	50328	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.316816092 CET	50328	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.322154045 CET	5651	50328	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.330215931 CET	80	50329	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.330276966 CET	50329	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.330327034 CET	50329	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.335653067 CET	80	50329	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.369448900 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.369611025 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.369611979 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.369661093 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.369661093 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.369661093 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.375936985 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.375952005 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.375961065 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.375993967 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.376492977 CET	80	50331	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.376553059 CET	50331	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.378284931 CET	50333	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.383831978 CET	5651	50333	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.383897066 CET	50333	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.393954039 CET	50334	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.399580002 CET	80	50334	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.399648905 CET	50334	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.409497976 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.414772987 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.414839983 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.518969059 CET	50333	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.519257069 CET	50333	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.524214983 CET	5651	50333	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.524557114 CET	5651	50333	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.533766985 CET	50334	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.537348032 CET	50334	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:52.539213896 CET	80	50334	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.543255091 CET	80	50334	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.552036047 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.552052975 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:52.557356119 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.557769060 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:52.864970922 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:52.908602953 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.217792988 CET	5651	50333	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.217855930 CET	50333	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.217897892 CET	50333	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.223253012 CET	5651	50333	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.244663954 CET	80	50334	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.244729042 CET	50334	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.244858027 CET	50334	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.250228882 CET	80	50334	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.253547907 CET	50336	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.259411097 CET	5651	50336	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.259507895 CET	50336	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.264893055 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:53.265041113 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:53.265068054 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:53.265068054 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:53.265085936 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:53.265166044 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:53.269165993 CET	50337	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.270476103 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:53.270493984 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:53.270508051 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:53.270520926 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:53.270978928 CET	80	50335	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:53.273379087 CET	50335	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:53.274450064 CET	80	50337	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.274960995 CET	50337	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.393069983 CET	50336	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.393081903 CET	50336	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.398576021 CET	5651	50336	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.398679018 CET	5651	50336	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.408673048 CET	50337	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.408715963 CET	50337	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:53.413912058 CET	80	50337	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.413985014 CET	80	50337	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:53.968487024 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:54.017963886 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:54.120887041 CET	80	50337	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:54.121030092 CET	50337	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:54.121030092 CET	50337	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:54.126626015 CET	80	50337	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:54.127511024 CET	5651	50336	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:54.127568960 CET	50336	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:54.127603054 CET	50336	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:54.132940054 CET	5651	50336	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:54.880469084 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:54.924257040 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.318444967 CET	50338	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.324592113 CET	5651	50338	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:55.324681044 CET	50338	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.331398964 CET	50339	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.336818933 CET	80	50339	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:55.336922884 CET	50339	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.347297907 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:55.352951050 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:55.353672981 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:55.455689907 CET	50338	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.455691099 CET	50338	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.461260080 CET	5651	50338	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:55.461272955 CET	5651	50338	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:55.471661091 CET	50339	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.471661091 CET	50339	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:55.477060080 CET	80	50339	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:55.477340937 CET	80	50339	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:55.487030029 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:55.487112999 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:55.492435932 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:55.492449045 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:55.896370888 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:55.939841986 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.190507889 CET	80	50339	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.190597057 CET	50339	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.190618992 CET	50339	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.196475029 CET	80	50339	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.206449032 CET	50341	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.210468054 CET	5651	50338	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.210525990 CET	50338	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.210558891 CET	50338	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.212106943 CET	80	50341	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.212179899 CET	50341	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.216167927 CET	5651	50338	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.221297979 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.221393108 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.221412897 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.221412897 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.221446991 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.221446991 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.227180004 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.227191925 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.227308035 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.227327108 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.227638006 CET	80	50340	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.227690935 CET	50340	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.316049099 CET	50342	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.321382046 CET	5651	50342	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.321465015 CET	50342	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.332304955 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.337832928 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.337893009 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.346302032 CET	50341	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.346357107 CET	50341	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.351689100 CET	80	50341	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.351747990 CET	80	50341	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.455914974 CET	50342	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.455929995 CET	50342	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:56.461252928 CET	5651	50342	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.461275101 CET	5651	50342	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.471205950 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.471266031 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:56.476607084 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.476619959 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:56.912866116 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:56.955514908 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.048804045 CET	80	50341	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.048898935 CET	50341	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.049027920 CET	50341	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.054513931 CET	80	50341	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.082160950 CET	50344	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.089025021 CET	80	50344	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.089129925 CET	50344	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.214850903 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.215017080 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.215035915 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.215035915 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.215070009 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.215070009 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.219433069 CET	5651	50342	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.219494104 CET	50342	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.219528913 CET	50342	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.220496893 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.220535040 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.220547915 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.220561028 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.221365929 CET	50344	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.221366882 CET	50344	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.221887112 CET	80	50343	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.222112894 CET	50343	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.224963903 CET	5651	50342	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.226771116 CET	80	50344	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.227039099 CET	80	50344	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.301462889 CET	50345	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.306852102 CET	5651	50345	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.306991100 CET	50345	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.316333055 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.321888924 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.321950912 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.440397024 CET	50345	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.440499067 CET	50345	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.445753098 CET	5651	50345	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.445802927 CET	5651	50345	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.455729961 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.455729961 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:57.461059093 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.461150885 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:57.927350044 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.943659067 CET	80	50344	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.943723917 CET	50344	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.943862915 CET	50344	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.949300051 CET	80	50344	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.956763029 CET	50347	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.971095085 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:57.971908092 CET	80	50347	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:57.971992970 CET	50347	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.097485065 CET	50347	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.097485065 CET	50347	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.102955103 CET	80	50347	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.103013992 CET	80	50347	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.202689886 CET	5651	50345	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.202797890 CET	50345	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.202841997 CET	50345	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.209943056 CET	5651	50345	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.217361927 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.217468023 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.217468023 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.217495918 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.217495918 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.217540979 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.222872019 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.222897053 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.222907066 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.222917080 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.229501009 CET	80	50346	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.229600906 CET	50346	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.284645081 CET	50348	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.290338039 CET	5651	50348	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.290539026 CET	50348	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.300231934 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.307966948 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.308140039 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.424942970 CET	50348	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.424983025 CET	50348	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.430852890 CET	5651	50348	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.430880070 CET	5651	50348	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.440071106 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.440171003 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:58.445946932 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.445993900 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:58.907434940 CET	80	50347	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.907548904 CET	50347	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.907548904 CET	50347	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.913290977 CET	80	50347	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.940814018 CET	50350	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.943244934 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.947179079 CET	80	50350	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:58.947308064 CET	50350	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:58.987272978 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.081259966 CET	50350	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.081387043 CET	50350	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.087233067 CET	80	50350	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.087454081 CET	80	50350	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.173161983 CET	5651	50348	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.173398018 CET	50348	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.173398018 CET	50348	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.179039001 CET	5651	50348	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.198813915 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.199098110 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.199098110 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.199111938 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.199111938 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.199275970 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.205343962 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.205359936 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.205389977 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.205401897 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.206597090 CET	80	50349	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.206803083 CET	50349	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.269074917 CET	50351	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.274477959 CET	5651	50351	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.274553061 CET	50351	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.284715891 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.290257931 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.290334940 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.409059048 CET	50351	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.409147024 CET	50351	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.414468050 CET	5651	50351	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.414601088 CET	5651	50351	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.424501896 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.424520016 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:48:59.429945946 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.429994106 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:48:59.778371096 CET	80	50350	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.778439999 CET	50350	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.778482914 CET	50350	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.783828020 CET	80	50350	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.815993071 CET	50353	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.821266890 CET	80	50353	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.821337938 CET	50353	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.943829060 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.955794096 CET	50353	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.955806017 CET	50353	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:48:59.961271048 CET	80	50353	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.961355925 CET	80	50353	111.90.140.76	192.168.2.7
Oct 29, 2024 16:48:59.986733913 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.007328033 CET	5555	50332	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.007390976 CET	50332	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.007426977 CET	50332	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.007447958 CET	465	50330	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.007497072 CET	50330	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.007570982 CET	50330	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.013212919 CET	5555	50332	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.013267040 CET	465	50330	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.034552097 CET	50354	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.040209055 CET	465	50354	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.040276051 CET	50354	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.050271988 CET	50355	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.055619001 CET	5555	50355	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.055679083 CET	50355	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.124486923 CET	5651	50351	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.124624014 CET	50351	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.124624014 CET	50351	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.130038023 CET	5651	50351	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.144742966 CET	50356	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.150199890 CET	5651	50356	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.150285959 CET	50356	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.161901951 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.162018061 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.162031889 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.162049055 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.162060976 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.162081003 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.167403936 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.167414904 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.167423964 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.167435884 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.167802095 CET	80	50352	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.167848110 CET	50352	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.174824953 CET	50354	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.175106049 CET	50354	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.180219889 CET	465	50354	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.180398941 CET	465	50354	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.190043926 CET	50355	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.190058947 CET	50355	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.195585966 CET	5555	50355	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.195703983 CET	5555	50355	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.253267050 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.258836031 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.258899927 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.283930063 CET	50356	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.283947945 CET	50356	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.289294958 CET	5651	50356	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.289307117 CET	5651	50356	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.393273115 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.393331051 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:00.398682117 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.398772001 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:00.666502953 CET	80	50353	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.666568995 CET	50353	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.666606903 CET	50353	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.672003031 CET	80	50353	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.690767050 CET	50358	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.696283102 CET	80	50358	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.696383953 CET	50358	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.831240892 CET	50358	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.831269026 CET	50358	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.836663008 CET	80	50358	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.836724043 CET	80	50358	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.959049940 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.992240906 CET	5651	50356	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:00.992305040 CET	50356	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.992345095 CET	50356	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:00.997945070 CET	5651	50356	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.002666950 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.018979073 CET	50359	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.024416924 CET	5651	50359	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.024488926 CET	50359	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.159270048 CET	50359	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.159287930 CET	50359	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.164573908 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.164694071 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.164710999 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.164710999 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.164719105 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.164746046 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.164834023 CET	5651	50359	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.164844036 CET	5651	50359	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.170336008 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.170346022 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.170355082 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.170532942 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.173312902 CET	80	50357	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.173371077 CET	50357	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.238404036 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.243702888 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.243840933 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.378016949 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.378072977 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:01.383955956 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.383996010 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:01.535846949 CET	80	50358	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.535923958 CET	50358	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.536195040 CET	50358	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.541541100 CET	80	50358	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.566211939 CET	50361	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.572149038 CET	80	50361	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.572216034 CET	50361	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.705734968 CET	50361	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.705734968 CET	50361	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.711121082 CET	80	50361	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.711401939 CET	80	50361	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.898253918 CET	5651	50359	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.898320913 CET	50359	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.898439884 CET	50359	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:01.903834105 CET	5651	50359	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:01.976579905 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.003412008 CET	50362	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.008794069 CET	5651	50362	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.008872032 CET	50362	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.017987967 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.112763882 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.112905979 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.112905979 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.112905979 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.112929106 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.112977028 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.118379116 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.118388891 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.118397951 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.118407011 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.121006012 CET	80	50360	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.121068001 CET	50360	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.143248081 CET	50362	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.143420935 CET	50362	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.149795055 CET	5651	50362	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.150197983 CET	5651	50362	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.222404957 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.227988958 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.228133917 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.362149000 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.362237930 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:02.367475033 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.367571115 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:02.420828104 CET	80	50361	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.420897961 CET	50361	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.420944929 CET	50361	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.430852890 CET	80	50361	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.440923929 CET	50364	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.446207047 CET	80	50364	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.446268082 CET	50364	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.580857038 CET	50364	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.580857038 CET	50364	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.586636066 CET	80	50364	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.586647034 CET	80	50364	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.871815920 CET	5651	50362	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.871918917 CET	50362	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.871918917 CET	50362	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.877222061 CET	5651	50362	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.878674984 CET	50365	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.884339094 CET	5651	50365	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:02.884399891 CET	50365	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:02.991657019 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.018532991 CET	50365	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.018588066 CET	50365	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.024228096 CET	5651	50365	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.024255991 CET	5651	50365	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.033612013 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.086239100 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.086337090 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.086378098 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.086378098 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.086396933 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.086452961 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.091995001 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.092091084 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.092102051 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.092111111 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.093003035 CET	80	50363	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.093158007 CET	50363	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.101134062 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.106622934 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.106693029 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.264159918 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.264214039 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.269750118 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.269759893 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.292603016 CET	80	50364	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.292669058 CET	50364	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.292711973 CET	50364	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.298130989 CET	80	50364	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.317044973 CET	50367	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.322746992 CET	80	50367	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.322824955 CET	50367	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.455831051 CET	50367	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.455924034 CET	50367	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.463041067 CET	80	50367	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.463176966 CET	80	50367	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.719878912 CET	5651	50365	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.719944000 CET	50365	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.719995022 CET	50365	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.725358009 CET	5651	50365	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.753629923 CET	50368	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.759057999 CET	5651	50368	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.759155989 CET	50368	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.893630981 CET	50368	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.893652916 CET	50368	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:03.898976088 CET	5651	50368	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.899094105 CET	5651	50368	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:03.990720987 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.990860939 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.990885973 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.990885973 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.990906954 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.990993977 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:03.996202946 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.996212959 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.996223927 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.996232986 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.996887922 CET	80	50366	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:03.996937037 CET	50366	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.007822990 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.049278021 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.081370115 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.087160110 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.087225914 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.175518036 CET	80	50367	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.175573111 CET	50367	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.175616980 CET	50367	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.183928967 CET	80	50367	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.190964937 CET	50370	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.196679115 CET	80	50370	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.196744919 CET	50370	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.221528053 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.221550941 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.227077961 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.228415966 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.330954075 CET	50370	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.331110001 CET	50370	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.336268902 CET	80	50370	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.336638927 CET	80	50370	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.812938929 CET	5651	50368	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.813004971 CET	50368	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.813040972 CET	50368	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.814671993 CET	5651	50368	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.814733982 CET	50368	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.818717957 CET	5651	50368	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.847434044 CET	50371	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.852957964 CET	5651	50371	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.853059053 CET	50371	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.935188055 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.935283899 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.935297966 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.935297966 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.935329914 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.935467958 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.944777012 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.944787979 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.944797039 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.944814920 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.955343962 CET	80	50369	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.955686092 CET	50369	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.958023071 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.964371920 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:04.964478970 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:04.987237930 CET	50371	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.987237930 CET	50371	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:04.992841005 CET	5651	50371	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:04.992846012 CET	5651	50371	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.021634102 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.052522898 CET	80	50370	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.052586079 CET	50370	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.052634001 CET	50370	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.059020996 CET	80	50370	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.065067053 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.065902948 CET	50373	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.071248055 CET	80	50373	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.071324110 CET	50373	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.096329927 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.096329927 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.102024078 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.102035046 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.205688953 CET	50373	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.205688953 CET	50373	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.211332083 CET	80	50373	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.211344957 CET	80	50373	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.680603981 CET	5651	50371	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.680666924 CET	50371	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.680726051 CET	50371	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.686224937 CET	5651	50371	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.722347021 CET	50374	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.727950096 CET	5651	50374	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.728017092 CET	50374	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.819338083 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.819439888 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.819473982 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.819515944 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.819516897 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.819572926 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.825032949 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.825500965 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.825511932 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.825520039 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.826685905 CET	80	50372	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.826771975 CET	50372	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.831537008 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.837403059 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.837466002 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.862257957 CET	50374	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.862274885 CET	50374	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.868110895 CET	5651	50374	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.868699074 CET	5651	50374	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.919843912 CET	80	50373	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.919910908 CET	50373	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.920066118 CET	50373	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.925457954 CET	80	50373	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.940968990 CET	50376	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.946484089 CET	80	50376	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:05.946576118 CET	50376	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:05.971540928 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.971560001 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:05.976864100 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:05.977018118 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.022042036 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.064874887 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.080730915 CET	50376	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.080914021 CET	50376	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.086251974 CET	80	50376	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.086369991 CET	80	50376	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.559506893 CET	5651	50374	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.561865091 CET	50374	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.561865091 CET	50374	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.567493916 CET	5651	50374	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.598491907 CET	50377	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.605086088 CET	5651	50377	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.605186939 CET	50377	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.724132061 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.724256992 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.724256992 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.724292040 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.724292040 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.724430084 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.729701996 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.729895115 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.729955912 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.729965925 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.731651068 CET	80	50375	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.731849909 CET	50375	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.737164974 CET	50377	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.737164974 CET	50377	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.742696047 CET	5651	50377	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.742954016 CET	5651	50377	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.819359064 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.821028948 CET	80	50376	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.821142912 CET	50376	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.821144104 CET	50376	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.824748039 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.824896097 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.826647997 CET	80	50376	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.925326109 CET	50379	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.930811882 CET	80	50379	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:06.931029081 CET	50379	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:06.955733061 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.955879927 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:06.961201906 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:06.961314917 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.037389040 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.065345049 CET	50379	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.065345049 CET	50379	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.070841074 CET	80	50379	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.070866108 CET	80	50379	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.080526114 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.441409111 CET	5651	50377	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.441479921 CET	50377	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.441525936 CET	50377	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.447278023 CET	5651	50377	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.472166061 CET	50380	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.477986097 CET	5651	50380	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.478095055 CET	50380	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.611973047 CET	50380	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.611973047 CET	50380	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.617321968 CET	5651	50380	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.617362022 CET	5651	50380	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.711328030 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.713643074 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.713675976 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.713676929 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.713676929 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.713732004 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.719031096 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.719060898 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.719167948 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.719253063 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.719949007 CET	80	50378	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.720010042 CET	50378	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.769860029 CET	80	50379	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.769918919 CET	50379	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.769959927 CET	50379	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.775439978 CET	80	50379	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.800251961 CET	50381	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.805607080 CET	80	50381	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.805675983 CET	50381	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.815897942 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.821356058 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.821422100 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.940357924 CET	50381	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.940468073 CET	50381	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:07.945851088 CET	80	50381	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.945880890 CET	80	50381	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:07.955550909 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.955672979 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:07.961040020 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:07.961255074 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.057642937 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:08.111746073 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.517815113 CET	465	50354	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:08.517882109 CET	50354	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.517931938 CET	50354	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.524168968 CET	465	50354	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:08.565911055 CET	50383	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.571358919 CET	465	50383	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:08.571430922 CET	50383	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.573402882 CET	5555	50355	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.573466063 CET	50355	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:08.573503971 CET	50355	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:08.578855991 CET	5555	50355	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.689687967 CET	80	50381	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:08.689748049 CET	50381	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.689841032 CET	50381	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.695267916 CET	80	50381	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:08.705898046 CET	50383	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.705924988 CET	50383	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:08.711395025 CET	465	50383	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:08.711600065 CET	465	50383	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:08.736677885 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.736814976 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:08.736833096 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:08.736833096 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:08.737082005 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:08.737123013 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:08.742983103 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.742995024 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.743004084 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.743197918 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.746156931 CET	80	50382	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:08.746228933 CET	50382	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:09.071011066 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:09.111768961 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:09.365272045 CET	5651	50380	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:09.365339041 CET	50380	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:09.365382910 CET	50380	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:09.370651007 CET	5651	50380	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:10.068715096 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:10.111779928 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.613773108 CET	50384	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.619157076 CET	5651	50384	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:10.619235039 CET	50384	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.628595114 CET	50385	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.634388924 CET	80	50385	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:10.634459019 CET	50385	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.643838882 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:10.649374962 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:10.650198936 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:10.659826040 CET	50387	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:10.665762901 CET	5555	50387	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:10.665853977 CET	50387	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:10.752490997 CET	50384	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.752517939 CET	50384	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.757886887 CET	5651	50384	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:10.757898092 CET	5651	50384	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:10.768403053 CET	50385	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.768436909 CET	50385	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:10.773895025 CET	80	50385	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:10.773905039 CET	80	50385	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:10.783801079 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:10.783832073 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:10.789371967 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:10.789381981 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:10.799525976 CET	50387	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:10.799542904 CET	50387	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:10.805059910 CET	5555	50387	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:10.805071115 CET	5555	50387	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:11.087239027 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.127398014 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.481591940 CET	5651	50384	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.481682062 CET	50384	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.506277084 CET	50384	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.511899948 CET	5651	50384	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.513782978 CET	80	50385	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.513837099 CET	50385	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.513873100 CET	50385	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.519975901 CET	80	50385	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.529387951 CET	50388	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.530307055 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:11.530395031 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:11.530436039 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:11.530436993 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:11.530436993 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:11.530811071 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:11.535481930 CET	5651	50388	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.535548925 CET	50388	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.536263943 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:11.536274910 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:11.536278963 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:11.536288977 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:11.539710045 CET	50389	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.539843082 CET	80	50386	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:11.539899111 CET	50386	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:11.545393944 CET	80	50389	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.545454979 CET	50389	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.659127951 CET	50388	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.659152985 CET	50388	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.664638042 CET	5651	50388	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.664649963 CET	5651	50388	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.674639940 CET	50389	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.674654961 CET	50389	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:11.680277109 CET	80	50389	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:11.680314064 CET	80	50389	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:12.099879026 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:12.143254995 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:12.372255087 CET	80	50389	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:12.372319937 CET	50389	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:12.372365952 CET	50389	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:12.376249075 CET	5651	50388	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:12.376310110 CET	50388	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:12.376338005 CET	50388	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:12.377830029 CET	80	50389	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:12.381814957 CET	5651	50388	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:13.115690947 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:13.158648014 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.593766928 CET	50390	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.597565889 CET	50391	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.599757910 CET	5651	50390	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:13.599828005 CET	50390	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.606319904 CET	80	50391	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:13.606378078 CET	50391	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.624207020 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:13.633145094 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:13.633222103 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:13.722208023 CET	50390	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.722222090 CET	50390	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.727864981 CET	5651	50390	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:13.728178978 CET	5651	50390	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:13.737575054 CET	50391	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.737575054 CET	50391	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:13.742940903 CET	80	50391	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:13.743632078 CET	80	50391	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:13.752996922 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:13.753077984 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:13.758630991 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:13.758654118 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:14.173186064 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.221157074 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.437031984 CET	5651	50390	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.437131882 CET	50390	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.437176943 CET	50390	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.440531015 CET	80	50391	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.440581083 CET	50391	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.440774918 CET	50391	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.442545891 CET	5651	50390	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.446192026 CET	80	50391	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.472902060 CET	50393	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.478271961 CET	5651	50393	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.478353024 CET	50393	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.487946033 CET	50394	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.491344929 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:14.491457939 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:14.491475105 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:14.491483927 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:14.491503000 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:14.491559029 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:14.493716955 CET	80	50394	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.493782043 CET	50394	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.496819973 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:14.496875048 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:14.497092009 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:14.497538090 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:14.497754097 CET	80	50392	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:14.497812033 CET	50392	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:14.612051010 CET	50393	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.612076998 CET	50393	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.617388964 CET	5651	50393	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.617489100 CET	5651	50393	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.627440929 CET	50394	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.627454996 CET	50394	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:14.633097887 CET	80	50394	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:14.633116007 CET	80	50394	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:15.131870985 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:15.174459934 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:15.309201956 CET	5651	50393	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:15.309292078 CET	50393	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:15.309397936 CET	50393	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:15.314918995 CET	5651	50393	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:15.343413115 CET	80	50394	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:15.343585968 CET	50394	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:15.343787909 CET	50394	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:15.349090099 CET	80	50394	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:16.181534052 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:16.236790895 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.016413927 CET	50395	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.021898031 CET	5651	50395	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.023463011 CET	50395	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.046412945 CET	50396	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.051808119 CET	80	50396	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.051896095 CET	50396	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.054904938 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.060260057 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.060343981 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.061408997 CET	465	50383	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.061472893 CET	50383	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.061564922 CET	50383	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.066818953 CET	465	50383	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.097234011 CET	50398	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.102699041 CET	465	50398	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.102833986 CET	50398	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.143404961 CET	50395	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.143440008 CET	50395	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.148751020 CET	5651	50395	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.148767948 CET	5651	50395	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.171493053 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.174518108 CET	50396	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.174573898 CET	50396	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.179862976 CET	80	50396	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.179881096 CET	80	50396	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.190406084 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.190490961 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.195771933 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.196254015 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.221149921 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.237644911 CET	50398	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.237644911 CET	50398	465	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.243027925 CET	465	50398	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.243169069 CET	465	50398	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.885092974 CET	80	50396	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.885183096 CET	50396	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.885216951 CET	50396	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.890964985 CET	80	50396	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.901501894 CET	5651	50395	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.901561022 CET	50395	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.901591063 CET	50395	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.907205105 CET	5651	50395	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.924614906 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.924705982 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.924730062 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.924730062 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.924740076 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.924761057 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.930145025 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.930155993 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.930160046 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.930164099 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.931889057 CET	80	50397	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:17.932086945 CET	50397	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:17.972527027 CET	50399	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.977967978 CET	5651	50399	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.978039980 CET	50399	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.987802029 CET	50400	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:17.993169069 CET	80	50400	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:17.993230104 CET	50400	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.005287886 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.010632992 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.010699987 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.112251043 CET	50399	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.112251043 CET	50399	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.117655039 CET	5651	50399	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.117667913 CET	5651	50399	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.127650976 CET	50400	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.127679110 CET	50400	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.132993937 CET	80	50400	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.133073092 CET	80	50400	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.143162966 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.143162966 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.148585081 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.148787022 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.180612087 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.221266031 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.841911077 CET	5651	50399	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.842081070 CET	50399	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.842081070 CET	50399	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.842552900 CET	80	50400	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.842648029 CET	50400	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.842648029 CET	50400	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.847208023 CET	50402	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.847544909 CET	5651	50399	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.848035097 CET	80	50400	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.852575064 CET	5651	50402	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.852718115 CET	50402	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.862766981 CET	50403	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.868422985 CET	80	50403	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.868493080 CET	50403	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.898571968 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.898689032 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.898689032 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.898705006 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.898705006 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.899007082 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.903947115 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.904146910 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.904156923 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.904165030 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.904659986 CET	80	50401	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.904772043 CET	50401	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.956680059 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.962157965 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:18.962235928 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:18.987164974 CET	50402	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.987282038 CET	50402	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:18.992472887 CET	5651	50402	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:18.992561102 CET	5651	50402	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:19.002718925 CET	50403	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:19.002718925 CET	50403	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:19.008074045 CET	80	50403	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:19.008733034 CET	80	50403	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:19.096417904 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:19.096417904 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:19.101821899 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:19.101830959 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:19.176316977 CET	5555	50387	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:19.176451921 CET	50387	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:19.176451921 CET	50387	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:19.182571888 CET	5555	50387	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:19.203856945 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:19.252420902 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:19.284851074 CET	50405	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:19.293190956 CET	5555	50405	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:19.293258905 CET	50405	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:19.425668001 CET	50405	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:19.425803900 CET	50405	5555	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:19.431152105 CET	5555	50405	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:19.431247950 CET	5555	50405	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:19.706058025 CET	5651	50402	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:19.706125975 CET	50402	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:19.712546110 CET	80	50403	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:19.712605953 CET	50403	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:19.835783005 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:19.877427101 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.180727005 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:20.181058884 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.210577965 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.252497911 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.745417118 CET	50402	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.745805025 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.745807886 CET	50403	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.745843887 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.745843887 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.745843887 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.745860100 CET	50404	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.750977993 CET	5651	50402	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.751357079 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:20.751368999 CET	80	50403	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.751379013 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:20.751475096 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:20.751483917 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:20.751657009 CET	80	50404	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:20.828471899 CET	50406	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.834146023 CET	50407	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.834420919 CET	5651	50406	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.834573984 CET	50406	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.839603901 CET	80	50407	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.839936018 CET	50407	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.848323107 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.854788065 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:20.855065107 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.955810070 CET	50406	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.955810070 CET	50406	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.961469889 CET	5651	50406	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.961683035 CET	5651	50406	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.972183943 CET	50407	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.972183943 CET	50407	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:20.977638960 CET	80	50407	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.977771044 CET	80	50407	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:20.986885071 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.986885071 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:20.992469072 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:20.992495060 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.226238966 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.268285990 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.685372114 CET	5651	50406	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.685437918 CET	50406	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.685486078 CET	50406	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.690891027 CET	50409	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.691416979 CET	5651	50406	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.696573973 CET	5651	50409	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.696646929 CET	50409	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.722662926 CET	80	50407	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.722821951 CET	50407	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.722865105 CET	50407	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.728133917 CET	80	50407	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.744887114 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.745003939 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.745003939 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.745022058 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.745031118 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.745062113 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.750385046 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.750461102 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.750469923 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.750555992 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.750916004 CET	80	50408	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.750961065 CET	50408	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.800373077 CET	50410	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.805705070 CET	80	50410	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.805784941 CET	50410	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.816000938 CET	50411	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.821326971 CET	80	50411	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.821403027 CET	50411	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.830914974 CET	50409	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.830971003 CET	50409	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.836301088 CET	5651	50409	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.836311102 CET	5651	50409	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.940198898 CET	50410	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.940198898 CET	50410	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:21.945652008 CET	80	50410	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.945765972 CET	80	50410	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:21.955652952 CET	50411	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.955724001 CET	50411	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:21.961175919 CET	80	50411	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:21.961242914 CET	80	50411	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:22.241873980 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:22.283751011 CET	49723	8080	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:22.546936989 CET	5651	50409	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:22.547004938 CET	50409	5651	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:22.644259930 CET	80	50410	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:22.644335985 CET	50410	80	192.168.2.7	111.90.140.76
Oct 29, 2024 16:49:22.688787937 CET	80	50411	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:22.737155914 CET	50411	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:23.036710024 CET	80	50411	65.21.245.7	192.168.2.7
Oct 29, 2024 16:49:23.036902905 CET	50411	80	192.168.2.7	65.21.245.7
Oct 29, 2024 16:49:23.257144928 CET	8080	49723	111.90.140.76	192.168.2.7
Oct 29, 2024 16:49:23.299607992 CET	49723	8080	192.168.2.7	111.90.140.76

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 16:45:17.953414917 CET	55409	53	192.168.2.7	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 16:45:17.953414917 CET	192.168.2.7	1.1.1.1	0x2e2d	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 16:45:17.960598946 CET	1.1.1.1	192.168.2.7	0x2e2d	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49724	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:44.315789938 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:44.315789938 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49726	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:44.353516102 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:44.353516102 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:45.110183954 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:44 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:45.110392094 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:45.110392094 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:45.110419989 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:45.110419989 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49729	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:45.470789909 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:45.470789909 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49730	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:45.486237049 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:45.486411095 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:46.292349100 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:45 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:46.319192886 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:46.319194078 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:46.319252968 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:46.319252968 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49732	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:46.721143007 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:46.721172094 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49733	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:46.736569881 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:46.736594915 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:47.465682030 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:46 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:47.465806961 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:47.465830088 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:47.465848923 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:47.465869904 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49735	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:47.783090115 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:47.783137083 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49736	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:47.798867941 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:47.798902988 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:48.546021938 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:47 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:48.546170950 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:48.546196938 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:48.546205044 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:48.546224117 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49738	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:48.564228058 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:48.564270973 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49739	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:48.769993067 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:48.770092010 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:49.503297091 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:48 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:49.503441095 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:49.503469944 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:49.503487110 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:49.503520966 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49742	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:55.470499992 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:55.470546007 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49744	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:55.501784086 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:55.501914978 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:56.235563993 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:55 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:56.235964060 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:56.235964060 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:56.235964060 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:56.235964060 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49746	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:56.204993963 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:56.205801010 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49748	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:56.425007105 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:56.425007105 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:57.165908098 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:56 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:57.166244984 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:57.166245937 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:57.166245937 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:57.166245937 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49749	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:56.970607042 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:56.970624924 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49751	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:57.408214092 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:57.408267021 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:58.152532101 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:56 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:58.152854919 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:58.152854919 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:58.152854919 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:58.152854919 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49752	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:57.736399889 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:57.736399889 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49754	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:58.392906904 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:58.393105984 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:45:59.141084909 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:45:57 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:45:59.141246080 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:45:59.141246080 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:59.141246080 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:45:59.141298056 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49755	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:58.502115011 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:58.502115965 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49759	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:45:59.267527103 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:45:59.267527103 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49761	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:01.329957962 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:01.329958916 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49762	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:01.346065998 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:01.346714020 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:02.076998949 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:01 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:02.077090025 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:02.077115059 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:02.077115059 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:02.077115059 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49764	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:02.126724958 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:02.126812935 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49765	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:02.220679998 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:02.221098900 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:02.951858997 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:01 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:02.953308105 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:02.953345060 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:02.953345060 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:02.953367949 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49767	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:02.894648075 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:02.895385981 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49768	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:03.106194019 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:03.106221914 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:03.815782070 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:02 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:03.815886021 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:03.815910101 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:03.815910101 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:03.815918922 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49770	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:03.658252001 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:03.658278942 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49771	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:03.970552921 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:03.970576048 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:04.700416088 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:03 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:04.700676918 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:04.700676918 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:04.700676918 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:04.700676918 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49774	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:04.519484043 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:04.519517899 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49775	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:04.845710993 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:04.845710993 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:05.576780081 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:04 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:05.626976013 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:05.626987934 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:05.627000093 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:05.627012014 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49776	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:05.283874989 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:05.283874989 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49778	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:05.856143951 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:05.856161118 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:06.500452042 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:05 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:06.500547886 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:06.500583887 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:06.500583887 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:06.500595093 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49779	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:06.048732996 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:06.048755884 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49781	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:06.705948114 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:06.705948114 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:07.447204113 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:05 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:07.447304010 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:07.447304010 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:07.447336912 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:07.447336912 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49782	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:06.815906048 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:06.817107916 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49784	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:07.579955101 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:07.580003023 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49786	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:09.642462969 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:09.642487049 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49787	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:09.658158064 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:09.658179998 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:10.419078112 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:09 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:10.419198036 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:10.419223070 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:10.419223070 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:10.419261932 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49790	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:10.439651012 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:10.441147089 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49791	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:10.644423962 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:10.644479036 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:11.392987967 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:09 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:11.393115997 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:11.393166065 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:11.393166065 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:11.393166065 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49793	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:11.315079927 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:11.315119982 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49794	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:11.628599882 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:11.628631115 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:12.372549057 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:10 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:12.377867937 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:12.377868891 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:12.377868891 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:12.377868891 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49796	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:12.080301046 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:12.080351114 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49798	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:12.627669096 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:12.627686024 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:13.384890079 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:12 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:13.385196924 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:13.385196924 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:13.385196924 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:13.385196924 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49801	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:12.845632076 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:12.845674038 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49802	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:13.736932039 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:13.736953020 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:14.566942930 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:13 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:14.567065954 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:14.567091942 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:14.567102909 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:14.567123890 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49804	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:13.939412117 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:13.939440966 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49805	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:14.689614058 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:14.691133022 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49807	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:14.814424038 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:14.815087080 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:15.556030989 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:13 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:15.556157112 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:15.556194067 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:15.556359053 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:15.556375980 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49808	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:15.455300093 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:15.455329895 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49810	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:15.784415960 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:15.784481049 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:16.568419933 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:14 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:16.569242954 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:16.569277048 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:16.569277048 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:16.569319010 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49811	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:16.220761061 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:16.220807076 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49813	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:16.767946959 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:16.768516064 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:17.523242950 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:15 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:17.523412943 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:17.523468018 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:17.523468018 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:17.523477077 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49814	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:16.986337900 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:16.986407042 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49816	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:17.751934052 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:17.751981020 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49817	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:17.767546892 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:17.767580986 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:18.506680965 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:17 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:18.515883923 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:18.515908003 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:18.515908003 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:18.515928030 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49819	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:18.534810066 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:18.534846067 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49822	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:20.705173016 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:20.705653906 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49823	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:20.720768929 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:20.720957994 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:21.946594000 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:20 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:21.946685076 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:21.946703911 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:21.946703911 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:21.946713924 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49827	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:21.736210108 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:21.736210108 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49828	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:22.127185106 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:22.129132986 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:22.866338015 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:21 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:22.866480112 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:22.866504908 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:22.866504908 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:22.866504908 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49830	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:22.720587969 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:22.720623016 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49831	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:23.111635923 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:23.111676931 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:23.842854977 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:21 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:23.843022108 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:23.843054056 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:23.843054056 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:23.843070984 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49833	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:23.673681974 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:23.675156116 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	49834	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:23.986988068 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:23.987000942 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:24.724673986 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:23 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:24.724783897 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:24.724823952 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:24.724823952 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:24.724824905 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	49836	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:24.658036947 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:24.658077002 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	49837	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:24.971014977 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:24.971014977 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:25.705903053 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:24 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:25.706056118 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:25.706115007 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:25.706115007 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:25.706115007 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	49839	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:25.533246040 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:25.533269882 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	49840	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:26.314464092 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:26.314465046 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:27.123948097 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:26 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:27.124119043 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:27.124138117 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:27.124138117 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:27.124150038 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	49841	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:26.392842054 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:26.392865896 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	49842	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:26.611401081 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:26.611443996 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	49843	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:27.268008947 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:27.268035889 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:28.004812956 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:26 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:28.004920959 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:28.004937887 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:28.004937887 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:28.004975080 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	49845	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:27.392601967 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:27.392625093 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	49847	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:28.158221960 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:28.158221960 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	49849	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:32.251964092 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:32.251964092 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	49851	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:32.283400059 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:32.283400059 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:32.997615099 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:31 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:32.997859001 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:32.998034954 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:32.998034954 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:32.998035908 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.7	49854	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:33.136030912 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:33.136030912 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	49855	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:33.197323084 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:33.197432995 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:33.899934053 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:32 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:33.900105953 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:33.900165081 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:33.900185108 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:33.900212049 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	49857	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:33.845839024 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:33.848153114 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	49858	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:34.049364090 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:34.049396992 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:34.788263083 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:32 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:34.788472891 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:34.788506031 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:34.788544893 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:34.788578987 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	49860	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:34.642469883 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:34.642515898 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	49861	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:35.033565998 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:35.037156105 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:35.779797077 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:34 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:35.823204041 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:35.823244095 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:35.823244095 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:35.823244095 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	49864	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:39.470695019 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:39.470730066 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	49865	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:39.486373901 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:39.486407042 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:40.228687048 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:39 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:40.228826046 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:40.228854895 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:40.228854895 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:40.228854895 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	49867	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:40.298851013 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:40.299298048 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	49868	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:40.393013000 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:40.395278931 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:41.115267992 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:39 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:41.115452051 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:41.115494967 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:41.115494967 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:41.115494967 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	49872	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:41.050620079 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:41.053231001 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	49874	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:41.283286095 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:41.283315897 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:42.040828943 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:41 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:42.041079998 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:42.041080952 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:42.041080952 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:42.041080952 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	49875	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:41.816190958 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:41.816256046 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.7	49877	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:42.252650976 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:42.252650976 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:42.988089085 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:41 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:42.988209963 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:42.988236904 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:42.988250017 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:42.988274097 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	49878	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:42.580406904 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:42.580542088 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49880	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:43.236859083 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:43.236882925 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:43.971951008 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:42 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:43.972063065 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:43.972075939 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:43.972100019 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:43.972114086 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	49881	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:43.345856905 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:43.345901966 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	49883	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:44.111445904 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:44.111506939 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	49885	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:46.174323082 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:46.174355030 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	49886	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:46.190006018 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:46.190006018 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:46.909029961 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:45 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:46.909132957 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:46.909166098 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:46.909166098 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:46.909184933 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	49888	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:46.970782042 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:46.970941067 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.7	49889	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:47.064951897 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:47.064980984 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:47.795118093 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:46 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:47.795500994 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:47.795558929 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:47.795614958 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:47.795665026 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	49891	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:47.736390114 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:47.736390114 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.7	49892	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:47.939800024 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:47.939800978 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:48.669361115 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:47 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:48.669538975 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:48.669574022 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:48.669574022 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:48.669574022 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	49894	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:48.502058029 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:48.505172014 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	49895	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:48.815043926 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:48.815190077 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:49.556152105 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:48 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:49.556312084 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:49.556344032 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:49.556370974 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:49.556396961 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	49924	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:57.412539005 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:57.412539005 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	49926	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:57.440686941 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:57.440735102 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:58.205586910 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:56 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:58.206393957 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:58.206393957 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:58.206434011 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:58.206566095 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	49934	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:58.439740896 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:58.439740896 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:46:59.169389963 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:57 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:46:59.169959068 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:46:59.169972897 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:59.170022011 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:46:59.170031071 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	49949	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:46:59.318157911 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:46:59.318157911 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:00.047478914 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:46:59 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:00.053309917 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:00.053309917 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:00.053311110 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:00.053311110 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	49956	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:00.298940897 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:00.298940897 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:01.047739983 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:00 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:01.047992945 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:01.048006058 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:01.048019886 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:01.048034906 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	49966	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:01.292222023 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:01.292222023 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	49967	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:01.299824953 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:01.299824953 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:02.050343990 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:01 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:02.052136898 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:02.052136898 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:02.052136898 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:02.052181959 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.7	49973	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:02.158536911 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:02.158536911 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	49976	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:02.267710924 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:02.267817020 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:02.999382019 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:01 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:02.999614954 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:02.999614954 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:02.999614954 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:02.999695063 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	49980	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:02.924143076 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:02.924143076 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	49984	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:03.143492937 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:03.143520117 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:03.905237913 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:02 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:03.905343056 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:03.905353069 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:03.905360937 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:03.905373096 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	49988	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:03.709598064 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:03.709599018 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	49989	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:03.908642054 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:03.908680916 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.7	49995	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:04.128586054 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:04.128787041 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:04.933136940 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:03 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:04.933350086 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:04.933350086 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:04.933350086 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:04.933391094 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.7	49999	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:04.674066067 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:04.674150944 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	50002	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:05.113401890 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:05.113401890 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:06.020204067 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:05 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:06.020339012 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:06.020339012 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:06.020376921 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:06.020376921 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	50007	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:05.549303055 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:05.549321890 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.7	50013	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:06.205513000 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:06.205600023 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:06.934586048 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:05 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:06.934726954 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:06.934726954 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:06.934768915 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:06.934768915 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.7	50015	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:06.315073967 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:06.315073967 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.7	50021	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:07.081136942 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:07.081202984 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.7	50023	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:07.100392103 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:07.100392103 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:07.824706078 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:06 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:07.824812889 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:07.824812889 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:07.824857950 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:07.825012922 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	50028	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:07.846399069 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:07.846468925 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.7	50031	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:08.064744949 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:08.064853907 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	50034	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:08.283771038 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:08.283771038 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:09.062179089 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:07 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:09.062316895 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:09.062333107 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:09.062349081 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:09.062374115 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.7	50036	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:08.611962080 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:08.611962080 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.7	50042	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:09.268899918 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:09.268899918 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:09.580037117 CET	8	OUT	Data Raw: 00 00 00 01 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:10.011307001 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:08 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:10.011423111 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:10.011423111 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:10.011423111 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:10.011456013 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.7	50043	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:09.658392906 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:09.658392906 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	50055	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:10.252314091 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:10.252314091 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:11.002696991 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:09 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:11.003334999 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:11.003334999 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:11.003354073 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:11.003354073 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	50056	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:10.580415010 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:10.580604076 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.7	50058	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:11.237040043 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:11.237061977 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:11.957961082 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:10 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:11.958218098 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:11.958240986 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:11.958240986 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:11.958249092 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	50059	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:11.346343040 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:11.346374989 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	50061	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:12.111726999 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:12.111881018 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	50062	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:12.127110958 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:12.127110958 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:12.859932899 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:11 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:12.860084057 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:12.860136986 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:12.860136986 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:12.860136986 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	50064	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:12.879117012 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:12.879117012 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	50065	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:13.096071959 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:13.096120119 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.7	50066	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:13.323431969 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:13.323772907 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:14.077939034 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:12 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:14.078123093 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:14.078123093 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:14.078178883 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:14.078178883 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.7	50068	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:13.652226925 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:13.652226925 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.7	50070	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:14.300086021 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:14.300101995 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:15.019016027 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:14 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:15.019162893 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:15.019171953 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:15.019192934 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:15.019212961 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	50071	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:14.408859015 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:14.408998966 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	50075	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:15.175357103 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:15.175357103 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	50076	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:15.190437078 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:15.190470934 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:15.931024075 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:14 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:15.978657961 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:15.978918076 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:15.978929043 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:15.978952885 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	50078	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:15.986022949 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:15.986067057 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	50079	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:16.427670002 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:16.427915096 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:17.174415112 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:15 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:17.174518108 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:17.174575090 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:17.174575090 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:17.174575090 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	50080	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:17.317584038 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:17.317994118 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	50082	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:19.377393961 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:19.377394915 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	50083	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:19.392863989 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:19.392864943 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:20.129036903 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:18 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:20.129188061 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:20.129204035 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:20.129225016 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:20.129241943 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	50085	111.90.140.76	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:20.206255913 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:20.206284046 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	50086	65.21.245.7	80	8052	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 16:47:20.315331936 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:20.315331936 CET	6	OUT	Data Raw: 00 00 00 03 Data Ascii:
Oct 29, 2024 16:47:21.060691118 CET	505	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Tue, 29 Oct 2024 15:47:19 GMT Connection: close Content-Length: 326 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 56 65 72 62 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 76 65 72 62 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid Verb</h2><hr><p>HTTP Error 400. The request verb is invalid.</p></BODY></HTML>
Oct 29, 2024 16:47:21.060801983 CET	6	OUT	Data Raw: 00 00 10 18 Data Ascii:
Oct 29, 2024 16:47:21.060827971 CET	6	OUT	Data Raw: 00 00 00 01 Data Ascii:
Oct 29, 2024 16:47:21.060827971 CET	6	OUT	Data Raw: 2d 2d 0d 0a Data Ascii: --
Oct 29, 2024 16:47:21.060841084 CET	6	OUT	Data Raw: 00 00 00 00 Data Ascii:

Target ID:	0
Start time:	11:45:12
Start date:	29/10/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\gBYz86HSwI.msi"
Imagebase:	0x7ff7d4ca0000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	11:45:12
Start date:	29/10/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff7d4ca0000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:45:12
Start date:	29/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k NetworkService -p
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:45:12
Start date:	29/10/2024
Path:	C:\Windows\System32\SgrmBroker.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\SgrmBroker.exe
Imagebase:	0x7ff727160000
File size:	329'504 bytes
MD5 hash:	3BA1A18A0DC30A0545E7765CB97D8E63
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	11:45:13
Start date:	29/10/2024
Path:	C:\Windows\System32\sppsvc.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\sppsvc.exe
Imagebase:	0x7ff7f4f30000
File size:	4'630'384 bytes
MD5 hash:	320823F03672CEB82CC3A169989ABD12
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	11:45:13
Start date:	29/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k UnistackSvcGroup
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	11:45:13
Start date:	29/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	11:45:14
Start date:	29/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k wsappx -p -s ClipSVC
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	11:45:14
Start date:	29/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s wscsvc
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	11:45:17
Start date:	29/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k LocalService -s W32Time
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	13:39:10
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /msiinstall /silentinstall /SETSECURITY
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 0000000D.00000000.1481971634.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe, Author: Joe Security
Antivirus matches:	Detection: 3%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	13:39:11
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /msiinstall /silentinstall /SETSECURITY
Imagebase:	0x400000
File size:	7'753'808 bytes
MD5 hash:	F3D74B072B9697CF64B0B8445FDC8128
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 0000000E.00000000.1491178939.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe, Author: Joe Security
Antivirus matches:	Detection: 3%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	13:39:12
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray /config
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	13:39:15
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /server /start
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	13:39:15
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe" /start
Imagebase:	0x400000
File size:	7'753'808 bytes
MD5 hash:	F3D74B072B9697CF64B0B8445FDC8128
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	13:39:15
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe"
Imagebase:	0x400000
File size:	7'753'808 bytes
MD5 hash:	F3D74B072B9697CF64B0B8445FDC8128
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	13:39:18
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe"
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	13:39:18
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	13:39:18
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	13:39:19
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	13:39:20
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	13:39:21
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	13:39:32
Start date:	29/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	13:39:50
Start date:	29/10/2024
Path:	C:\Program Files\Windows Defender\MpCmdRun.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
Imagebase:	0x7ff66a910000
File size:	468'120 bytes
MD5 hash:	B3676839B2EE96983F9ED735CD044159
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	13:39:50
Start date:	29/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	13:40:51
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	13:41:42
Start date:	29/10/2024
Path:	C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe" /tray
Imagebase:	0x400000
File size:	6'307'408 bytes
MD5 hash:	63D0964168B927D00064AA684E79A300
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP). The adversary may then perform actions as the logged-on user.
Tactics:	Lateral Movement
Data Sources:	Logon Session: Logon Session Creation, Logon Session: Logon Session Metadata, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report gBYz86HSwI.msi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Config.Msi\6a346b.rbs

C:\Program Files (x86)\LiteManager Pro - Server\AledensoftIpcServer.dll

C:\Program Files (x86)\LiteManager Pro - Server\EULA.rtf

C:\Program Files (x86)\LiteManager Pro - Server\English.lg

C:\Program Files (x86)\LiteManager Pro - Server\HookDrv.dll

C:\Program Files (x86)\LiteManager Pro - Server\Lang\Taiwan.lg

C:\Program Files (x86)\LiteManager Pro - Server\Lang\Turkish.lg

C:\Program Files (x86)\LiteManager Pro - Server\Lang\Ukrainian.lg

C:\Program Files (x86)\LiteManager Pro - Server\ROMFUSClient.exe

C:\Program Files (x86)\LiteManager Pro - Server\ROMServer.exe

C:\Program Files (x86)\LiteManager Pro - Server\ROMwln.dll

C:\Program Files (x86)\LiteManager Pro - Server\Russian.lg

C:\Program Files (x86)\LiteManager Pro - Server\files\ROMServer.exe

C:\Program Files (x86)\LiteManager Pro - Server\files\ROMViewer.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Settings for LM-Server.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Start LM-Server.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Stop LM-Server.lnk

Windows Analysis Report
gBYz86HSwI.msi

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre