Edit tour

Windows Analysis Report
iFD9jPLjXC.exe

Overview

General Information

Sample name:	iFD9jPLjXC.exe renamed because original name is a hash value
Original sample name:	f1d2ceaf32e6e7f864e31faafdeb308653a10fa177c55ab0af111ad6affe58e5.exe
Analysis ID:	1548564
MD5:	732bba29e4283036d0fce29331d71577
SHA1:	c2a5ef70e605a4dd1f12f5e28511b85a357c0ea6
SHA256:	f1d2ceaf32e6e7f864e31faafdeb308653a10fa177c55ab0af111ad6affe58e5
Tags:	79-124-58-130exeuser-JAMESWT_MHT
Infos:

Detection

SystemBC

Score:	92
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected SystemBC

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Creates autostart registry keys with suspicious values (likely registry only malware)

Machine Learning detection for sample

Suspicious powershell command line found

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found decision node followed by non-executed suspicious APIs

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Suspicious Powershell In Registry Run Keys

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Classification

Process Tree

System is w10x64

iFD9jPLjXC.exe (PID: 7804 cmdline: "C:\Users\user\Desktop\iFD9jPLjXC.exe" MD5: 732BBA29E4283036D0FCE29331D71577)

powershell.exe (PID: 7948 cmdline: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7960 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

iFD9jPLjXC.exe (PID: 8184 cmdline: "C:\Users\user\Desktop\iFD9jPLjXC.exe" MD5: 732BBA29E4283036D0FCE29331D71577)

powershell.exe (PID: 7236 cmdline: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7260 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

iFD9jPLjXC.exe (PID: 7608 cmdline: "C:\Users\user\Desktop\iFD9jPLjXC.exe" MD5: 732BBA29E4283036D0FCE29331D71577)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
SystemBC	SystemBC is a proxy malware leveraging SOCKS5. Based on screenshots used in ads on a underground marketplace, Proofpoint decided to call it SystemBC.SystemBC has been observed occasionally, but more pronounced since June 2019. First samples goes back to October 2018.	No Attribution	https://asec.ahnlab.com/en/33600/ https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders https://blog.talosintelligence.com/2022/08/modernloader-delivers-multiple-stealers.html https://blogs.vmware.com/security/2023/06/8base-ransomware-a-heavy-hitting-player.html https://cloud.google.com/blog/topics/threat-intelligence/unc4393-goes-gently-into-silentnight	https://malpedia.caad.fkie.fraunhofer.de/details/win.systembc

Malware Configuration

Threatname: SystemBC

{"NDATAHOST1": "79.124.58.130", "HOST2": "79.124.58.130", "PORT1": "4378"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
iFD9jPLjXC.exe	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000000.00000000.1367522575.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000008.00000000.1578335832.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000008.00000002.2607686416.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000005.00000000.1547329773.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000005.00000002.2607738021.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author
0.2.iFD9jPLjXC.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
8.2.iFD9jPLjXC.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
0.0.iFD9jPLjXC.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
5.0.iFD9jPLjXC.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
8.0.iFD9jPLjXC.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
5.2.iFD9jPLjXC.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Click to see the 1 entries

Sigma Signatures

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: powershell.exe -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'", EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\iFD9jPLjXC.exe, ProcessId: 7804, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\socks5

Sigma detected: Suspicious Powershell In Registry Run Keys

Source: Registry Key set

Author: frack113, Florian Roth (Nextron Systems): Data: Details: powershell.exe -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'", EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\iFD9jPLjXC.exe, ProcessId: 7804, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\socks5

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'", CommandLine: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'", CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 3504, ProcessCommandLine: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'", ProcessId: 7948, ProcessName: powershell.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-04T16:33:39.954964+0100	2022930	1	A Network Trojan was detected	4.175.87.197	443	192.168.2.9	49829	TCP
2024-11-04T16:34:18.057416+0100	2022930	1	A Network Trojan was detected	4.175.87.197	443	192.168.2.9	50144	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: iFD9jPLjXC.exe

Avira: detected

Found malware configuration

Source: iFD9jPLjXC.exe

Malware Configuration Extractor: SystemBC {"NDATAHOST1": "79.124.58.130", "HOST2": "79.124.58.130", "PORT1": "4378"}

Multi AV Scanner detection for submitted file

Source: iFD9jPLjXC.exe

ReversingLabs: Detection: 73%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.5% probability

Machine Learning detection for sample

Source: iFD9jPLjXC.exe

Joe Sandbox ML: detected

Source: iFD9jPLjXC.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user

Networking

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 79.124.58.130

Source: global traffic

TCP traffic: 192.168.2.9:49736 -> 79.124.58.130:4378

Source: Joe Sandbox View

ASN Name: TAMATIYA-ASBG TAMATIYA-ASBG

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 4.175.87.197:443 -> 192.168.2.9:49829
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 4.175.87.197:443 -> 192.168.2.9:50144

Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130
Source: unknown	TCP traffic detected without corresponding DNS query: 79.124.58.130

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe

Code function: 0_2_0040146A VirtualAlloc,CreateEventA,GetUserNameExA,GetVolumeInformationA,select,recv,LocalAlloc,socket,socket,setsockopt,CreateThread,recv,CloseHandle,VirtualFree,ExitProcess,

0_2_0040146A

Source: iFD9jPLjXC.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: classification engine

Classification label: mal92.troj.winEXE@9/9@0/1

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\590aee7bdd69b59b.customDesusertions-ms~RF3a1ce4.TMP

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7960:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7260:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zeoa2sns.mso.ps1

Jump to behavior

Source: iFD9jPLjXC.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: iFD9jPLjXC.exe

ReversingLabs: Detection: 73%

Source: unknown	Process created: C:\Users\user\Desktop\iFD9jPLjXC.exe "C:\Users\user\Desktop\iFD9jPLjXC.exe"
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\Desktop\iFD9jPLjXC.exe "C:\Users\user\Desktop\iFD9jPLjXC.exe"
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\Desktop\iFD9jPLjXC.exe "C:\Users\user\Desktop\iFD9jPLjXC.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\Desktop\iFD9jPLjXC.exe "C:\Users\user\Desktop\iFD9jPLjXC.exe"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\Desktop\iFD9jPLjXC.exe "C:\Users\user\Desktop\iFD9jPLjXC.exe"

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: taskflowdataengine.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cdp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: linkinfo.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntshrui.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cscapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: taskflowdataengine.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cdp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dsreg.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Section loaded: mswsock.dll	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Data Obfuscation

Suspicious powershell command line found

Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"

Boot Survival

Creates autostart registry keys with suspicious values (likely registry only malware)

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe

Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run socks5 powershell.exe -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"

Jump to behavior

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run socks5			Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run socks5			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Thread delayed: delay time: 180000	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1853	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1250	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1144

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_0-388

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe TID: 7828	Thread sleep count: 86 > 30	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe TID: 7828	Thread sleep time: -15480000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8160	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe TID: 7172	Thread sleep count: 73 > 30	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe TID: 7172	Thread sleep time: -13140000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7540	Thread sleep count: 1144 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7488	Thread sleep count: 282 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7612	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe TID: 3100	Thread sleep count: 71 > 30	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe TID: 3100	Thread sleep time: -12780000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Thread delayed: delay time: 180000	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user

Source: iFD9jPLjXC.exe, 00000008.00000002.2607944580.0000000000648000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll)
Source: iFD9jPLjXC.exe, 00000000.00000002.2608106389.000000000073E000.00000004.00000020.00020000.00000000.sdmp, iFD9jPLjXC.exe, 00000005.00000002.2608034805.00000000005B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	API call chain: ExitProcess graph end node			graph_0-387
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	API call chain: ExitProcess graph end node			graph_0-480

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\Desktop\iFD9jPLjXC.exe "C:\Users\user\Desktop\iFD9jPLjXC.exe"			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\Desktop\iFD9jPLjXC.exe "C:\Users\user\Desktop\iFD9jPLjXC.exe"

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\iFD9jPLjXC.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\iFD9jPLjXC.exe

Code function: 0_2_0040146A VirtualAlloc,CreateEventA,GetUserNameExA,GetVolumeInformationA,select,recv,LocalAlloc,socket,socket,setsockopt,CreateThread,recv,CloseHandle,VirtualFree,ExitProcess,

0_2_0040146A

Stealing of Sensitive Information

Yara detected SystemBC

Source: Yara match	File source: iFD9jPLjXC.exe, type: SAMPLE
Source: Yara match	File source: 0.2.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.0.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.1367522575.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000000.1578335832.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2607686416.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1547329773.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2607738021.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY

Remote Access Functionality

Yara detected SystemBC

Source: Yara match	File source: iFD9jPLjXC.exe, type: SAMPLE
Source: Yara match	File source: 0.2.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.0.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.iFD9jPLjXC.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.1367522575.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000000.1578335832.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2607686416.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1547329773.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2607738021.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 PowerShell	11 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	11 Registry Run Keys / Startup Folder	21 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	1 Account Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	1 System Owner/User Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	2 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	11 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
iFD9jPLjXC.exe	74%	ReversingLabs	Win32.Trojan.InfostealerTinba
iFD9jPLjXC.exe	100%	Avira	TR/Coroxy.gafen
iFD9jPLjXC.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
79.124.58.130	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
79.124.58.130	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
79.124.58.130	unknown	Bulgaria		50360	TAMATIYA-ASBG	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1548564
Start date and time:	2024-11-04 16:32:26 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	iFD9jPLjXC.exe renamed because original name is a hash value
Original Sample Name:	f1d2ceaf32e6e7f864e31faafdeb308653a10fa177c55ab0af111ad6affe58e5.exe
Detection:	MAL
Classification:	mal92.troj.winEXE@9/9@0/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 8 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
VT rate limit hit for: iFD9jPLjXC.exe

Simulations

Behavior and APIs

Time	Type	Description
10:33:24	API Interceptor	231x Sleep call for process: iFD9jPLjXC.exe modified
15:33:25	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run socks5 powershell.exe -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"
15:33:33	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run socks5 powershell.exe -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
79.124.58.130	report.pdf.lnk	Get hash	malicious	Unknown	Browse	79.124.58.130:443/VisitorLevy.exe
79.124.58.130	2HSalvXIJE.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	79.124.58.130:7698/en_US/all.js

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TAMATIYA-ASBG	report.pdf.lnk	Get hash	malicious	Unknown	Browse	79.124.58.130
	2HSalvXIJE.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	79.124.58.130
	https://bastionesan.gay/teleforser51/	Get hash	malicious	Unknown	Browse	79.124.49.200
	http://condenast-hub-okta-emea-7d5ea512.aibels.com/	Get hash	malicious	Unknown	Browse	78.128.114.103
	https://click.snapchat.com/aVHG?pid=snapchat_download_page&af_dp=http://gwf.ebay.com&af_web_dp=http%3A%2F%2Fdsena3.web.app%2FlH05rnad0TrainQ3b07xgwfd0TR3wH05nZ1d0Tau	Get hash	malicious	HTMLPhisher	Browse	78.128.114.103
	https://click.snapchat.com/aVHG?pid=snapchat_download_page&af_dp=http://davidson-tech.ebay.com&af_web_dp=http%3A%2F%2Fdsena3.web.app%2FjH05hnhH05lly07xdavid5kZH05n-tQ3bR3whd0TR3wH05nZ1	Get hash	malicious	HTMLPhisher	Browse	78.128.114.103
	hmsLm3zv4e	Get hash	malicious	Mirai	Browse	78.128.114.66
	WDPKg5l9gb	Get hash	malicious	Mirai	Browse	78.128.114.66
	x86	Get hash	malicious	Mirai	Browse	78.128.114.66
	TaTYytHaBk.exe	Get hash	malicious	Unknown	Browse	87.121.98.43

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2scmmshx.13o.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	high, very likely benign file
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_sbfvzsov.mys.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	high, very likely benign file
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vx3nagyt.vt3.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zeoa2sns.mso.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\590aee7bdd69b59b.customDesusertions-ms (copy)

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6220
Entropy (8bit):	3.7238548578784747
Encrypted:	false
SSDEEP:	48:uPstGdUCWU2bHlRwwukvhkvklCywGabWulUWYSogZoC6bWulKYSogZom1:p0dUCPQPgkvhkvCCtpbWu3HabWugHx
MD5:	1B6F7A3824BDC9BFF6635F80EF491FE5
SHA1:	6F5B498D85437730D9B35370BCAAA4C19B6793B9
SHA-256:	FC81232778C8DEECA1DD3690D38EE6995DA88C73768B47B1BF294FA960368506
SHA-512:	644F18D9F171C718E06A87F98949EE02EA622CBE4BEC0408B5D77DF615F6303C9393EA7E08D8D8C61608F16F908A45B3B803B3D8A80284678FC0B7C08A5F378C
Malicious:	false
Preview:	...................................FL..................F.".. ....'GDj...=.......z.:{.............................:..DG..Yr?.D..U..k0.&...&.......bBDj.....{.......3.........t...CFSF..1.....EWsG..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EWsGdY*\|..........................=...A.p.p.D.a.t.a...B.V.1.....dY'\|..Roaming.@......EWsGdY'\|...........................HK.R.o.a.m.i.n.g.....\.1.....EWiI..MICROS~1..D......EWsGdY%\|..........................p.q.M.i.c.r.o.s.o.f.t.....V.1.....EW.J..Windows.@......EWsGdY%\|.............................W.i.n.d.o.w.s.......1.....EWuG..STARTM~1..n......EWsGdY%\|....................D.........S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....EW.I..Programs..j......EWsGdY%\|....................@.....?5..P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......EWsGEWsG..........................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......EWsGdY2\|................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\590aee7bdd69b59b.customDesusertions-ms~RF3a1ce4.TMP (copy)

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6220
Entropy (8bit):	3.7238548578784747
Encrypted:	false
SSDEEP:	48:uPstGdUCWU2bHlRwwukvhkvklCywGabWulUWYSogZoC6bWulKYSogZom1:p0dUCPQPgkvhkvCCtpbWu3HabWugHx
MD5:	1B6F7A3824BDC9BFF6635F80EF491FE5
SHA1:	6F5B498D85437730D9B35370BCAAA4C19B6793B9
SHA-256:	FC81232778C8DEECA1DD3690D38EE6995DA88C73768B47B1BF294FA960368506
SHA-512:	644F18D9F171C718E06A87F98949EE02EA622CBE4BEC0408B5D77DF615F6303C9393EA7E08D8D8C61608F16F908A45B3B803B3D8A80284678FC0B7C08A5F378C
Malicious:	false
Preview:	...................................FL..................F.".. ....'GDj...=.......z.:{.............................:..DG..Yr?.D..U..k0.&...&.......bBDj.....{.......3.........t...CFSF..1.....EWsG..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EWsGdY*\|..........................=...A.p.p.D.a.t.a...B.V.1.....dY'\|..Roaming.@......EWsGdY'\|...........................HK.R.o.a.m.i.n.g.....\.1.....EWiI..MICROS~1..D......EWsGdY%\|..........................p.q.M.i.c.r.o.s.o.f.t.....V.1.....EW.J..Windows.@......EWsGdY%\|.............................W.i.n.d.o.w.s.......1.....EWuG..STARTM~1..n......EWsGdY%\|....................D.........S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....EW.I..Programs..j......EWsGdY%\|....................@.....?5..P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......EWsGEWsG..........................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......EWsGdY2\|................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\M5F0DIJ8OF00YGHZZHXL.temp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6220
Entropy (8bit):	3.7238548578784747
Encrypted:	false
SSDEEP:	48:uPstGdUCWU2bHlRwwukvhkvklCywGabWulUWYSogZoC6bWulKYSogZom1:p0dUCPQPgkvhkvCCtpbWu3HabWugHx
MD5:	1B6F7A3824BDC9BFF6635F80EF491FE5
SHA1:	6F5B498D85437730D9B35370BCAAA4C19B6793B9
SHA-256:	FC81232778C8DEECA1DD3690D38EE6995DA88C73768B47B1BF294FA960368506
SHA-512:	644F18D9F171C718E06A87F98949EE02EA622CBE4BEC0408B5D77DF615F6303C9393EA7E08D8D8C61608F16F908A45B3B803B3D8A80284678FC0B7C08A5F378C
Malicious:	false
Preview:	...................................FL..................F.".. ....'GDj...=.......z.:{.............................:..DG..Yr?.D..U..k0.&...&.......bBDj.....{.......3.........t...CFSF..1.....EWsG..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EWsGdY*\|..........................=...A.p.p.D.a.t.a...B.V.1.....dY'\|..Roaming.@......EWsGdY'\|...........................HK.R.o.a.m.i.n.g.....\.1.....EWiI..MICROS~1..D......EWsGdY%\|..........................p.q.M.i.c.r.o.s.o.f.t.....V.1.....EW.J..Windows.@......EWsGdY%\|.............................W.i.n.d.o.w.s.......1.....EWuG..STARTM~1..n......EWsGdY%\|....................D.........S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....EW.I..Programs..j......EWsGdY%\|....................@.....?5..P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......EWsGEWsG..........................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......EWsGdY2\|................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\WJCO6WSJ9K8O1CXOXO51.temp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6220
Entropy (8bit):	3.7246853831358604
Encrypted:	false
SSDEEP:	48:uQtGdUCWU20lRwwukvhkvklCywGabWulKYSogZoC6bWulKYSogZom1:50dUCPvPgkvhkvCCtpbWugHabWugHx
MD5:	6F6C6AFF6E7682BFA644454BBF46796B
SHA1:	7483A0C07E20910B912BB20ED485337752D90F43
SHA-256:	3CEBEE14D1FF843871843DAD8697AE9A7BF4E8BA317300FE2E9B1FD28F080169
SHA-512:	F4B0F385318DBB6C68AB01FD15A02844C4FE8D2FEA85B05E5B04FBE406843F6F6C70F118BDD6C22AF9E7A15CA4DBFF6E189241D26FF29DF75A9CB1BBB9D88862
Malicious:	false
Preview:	...................................FL..................F.".. ....'GDj...=.......z.:{.............................:..DG..Yr?.D..U..k0.&...&.......bBDj.....{......,..........t...CFSF..1.....EWsG..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EWsGdY*\|..........................=...A.p.p.D.a.t.a...B.V.1.....dY'\|..Roaming.@......EWsGdY'\|...........................HK.R.o.a.m.i.n.g.....\.1.....EWiI..MICROS~1..D......EWsGdY%\|..........................p.q.M.i.c.r.o.s.o.f.t.....V.1.....EW.J..Windows.@......EWsGdY%\|.............................W.i.n.d.o.w.s.......1.....EWuG..STARTM~1..n......EWsGdY%\|....................D.........S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....EW.I..Programs..j......EWsGdY%\|....................@.....?5..P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......EWsGdY2\|..........................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......EWsGdY2\|................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	4.880511061956073
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	iFD9jPLjXC.exe
File size:	7'680 bytes
MD5:	732bba29e4283036d0fce29331d71577
SHA1:	c2a5ef70e605a4dd1f12f5e28511b85a357c0ea6
SHA256:	f1d2ceaf32e6e7f864e31faafdeb308653a10fa177c55ab0af111ad6affe58e5
SHA512:	31ce8d7dfa415ce28e65385efa4b6f92459c8065762552e8a9482eacc67541f18fa16735d56119a03cc10d85fe724d65b5710d4d747c767f52de945ccd61bf91
SSDEEP:	96:TxJTv8DAhxmQmATEkm3avBzzCQgDl+C+DRZB+LWqcpOoL:TxNMAhxakDFlDRZB+qD
TLSH:	A4F193177C628471D2068EB63E4F6390AEBBA133E274A00D8FB30DD1E531D27C71A209
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........=.JwS.JwS.JwS..h@..wS..WA.KwS.RichJwS.................PE..L......f..................................... ....@................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x401000
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:
Time Stamp:	0x6681030F [Sun Jun 30 07:02:39 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	2623d8e6c0cd976fa9682386c6a3c4c7

Entrypoint Preview

Instruction
push 00000001h
push 00000000h
push 00000000h
push 00000001h
push 004030AFh
push 004030B6h
push 80000001h
call 00007F1170BCB9FAh
push 00000000h
push 00000000h
push 00000000h
push 00401B79h
push 00000000h
push 00000000h
call 00007F1170BCC789h
ret
push ebp
mov ebp, esp
add esp, FFFFFBF8h
push ecx
push edx
push ebx
push edi
push esi
cmp dword ptr [ebp+20h], 01h
jne 00007F1170BCBA59h
lea eax, dword ptr [ebp-08h]
push eax
lea eax, dword ptr [ebp-04h]
push eax
push 00000000h
push 000F003Fh
push 00000000h
push 00000000h
push 00000000h
push dword ptr [ebp+0Ch]
push dword ptr [ebp+08h]
call 00007F1170BCC79Ch
push 00000100h
lea eax, dword ptr [ebp-00000408h]
push eax
push 00000000h
call 00007F1170BCC74Dh
lea eax, dword ptr [ebp-00000408h]
push eax
push 004030E8h
lea eax, dword ptr [ebp-00000308h]
push eax
call 00007F1170BCC717h
add esp, 0Ch
lea eax, dword ptr [ebp-00000308h]
push eax
call 00007F1170BCC4A4h
lea ecx, dword ptr [ebp-00000308h]
lea eax, dword ptr [eax+01h]
push eax
push ecx
push dword ptr [ebp+14h]
push 00000000h
push dword ptr [ebp+10h]
push dword ptr [ebp-04h]
call 00007F1170BCC759h
jmp 00007F1170BCBA03h
lea eax, dword ptr [ebp-04h]
push eax
push 000F003Fh
push 00000000h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x20a8	0x8c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4000	0x8c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0xa8	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xe9a	0x1000	cc69db88557b194073d28c07d430519a	False	0.542724609375	data	5.58163857898463	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x2000	0x422	0x600	ac4c1eb33fa0398af27c87a28f9923a1	False	0.3619791666666667	data	3.4936546973620373	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x3000	0x120	0x200	348e410480780bedf2ddf3a4b8441fcb	False	0.45703125	data	4.324908374450215	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.reloc	0x4000	0xe8	0x200	1dd6750d76794b648742651305c4ca88	False	0.302734375	data	2.1795345155745305	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
user32.dll	wsprintfA
kernel32.dll	GetModuleFileNameA, GetVolumeInformationA, LocalAlloc, ExitProcess, SetEvent, CreateThread, VirtualAlloc, VirtualFree, WaitForSingleObject, CreateEventA, CloseHandle, LocalFree, Sleep
advapi32.dll	RegSetValueExA, RegCreateKeyExA, RegCloseKey, RegOpenKeyExA, RegDeleteValueA
wsock32.dll	WSAStartup, closesocket, connect, htons, inet_addr, inet_ntoa, ioctlsocket, recv, select, send, setsockopt, shutdown, socket
ws2_32.dll	freeaddrinfo, WSAIoctl, getaddrinfo
secur32.dll	GetUserNameExA

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-04T16:33:39.954964+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	4.175.87.197	443	192.168.2.9	49829	TCP
2024-11-04T16:34:18.057416+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	4.175.87.197	443	192.168.2.9	50144	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 4, 2024 16:33:23.494522095 CET	49736	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:23.499849081 CET	4378	49736	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:23.499918938 CET	49736	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:23.500307083 CET	49736	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:23.505167961 CET	4378	49736	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:24.121944904 CET	4378	49736	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:24.122095108 CET	49736	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.136465073 CET	49736	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.141222000 CET	49738	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.141242027 CET	4378	49736	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:24.146162033 CET	4378	49738	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:24.146245003 CET	49738	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.154314995 CET	49738	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.159362078 CET	4378	49738	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:24.808783054 CET	4378	49738	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:24.808912992 CET	49738	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.815783024 CET	49738	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.820739031 CET	4378	49738	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:24.926749945 CET	49743	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.931571960 CET	4378	49743	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:24.931747913 CET	49743	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.931945086 CET	49743	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:24.936702013 CET	4378	49743	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:25.583652020 CET	4378	49743	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:25.583978891 CET	49743	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:25.584253073 CET	49743	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:25.586467028 CET	49747	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:25.589241982 CET	4378	49743	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:25.591499090 CET	4378	49747	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:25.591594934 CET	49747	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:25.591818094 CET	49747	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:25.597178936 CET	4378	49747	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:26.206854105 CET	4378	49747	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:26.206927061 CET	49747	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.206991911 CET	49747	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.211895943 CET	4378	49747	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:26.326312065 CET	49752	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.331310987 CET	4378	49752	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:26.331398010 CET	49752	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.335056067 CET	49752	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.340111017 CET	4378	49752	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:26.962655067 CET	4378	49752	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:26.962730885 CET	49752	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.962827921 CET	49752	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.965445042 CET	49753	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.968120098 CET	4378	49752	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:26.970247984 CET	4378	49753	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:26.970313072 CET	49753	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.970685959 CET	49753	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:26.975529909 CET	4378	49753	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:27.592196941 CET	4378	49753	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:27.592289925 CET	49753	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:27.592340946 CET	49753	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:27.597255945 CET	4378	49753	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:27.707572937 CET	49758	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:27.712352991 CET	4378	49758	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:27.712436914 CET	49758	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:27.712841988 CET	49758	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:27.717559099 CET	4378	49758	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:28.336163044 CET	4378	49758	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:28.336304903 CET	49758	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:28.336385965 CET	49758	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:28.339075089 CET	49763	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:28.342431068 CET	4378	49758	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:28.344737053 CET	4378	49763	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:28.344818115 CET	49763	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:28.345074892 CET	49763	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:28.349986076 CET	4378	49763	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:28.963649988 CET	4378	49763	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:28.963782072 CET	49763	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:28.963871956 CET	49763	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:28.968662977 CET	4378	49763	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:29.082789898 CET	49768	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:29.088144064 CET	4378	49768	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:29.088231087 CET	49768	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:29.088504076 CET	49768	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:29.093413115 CET	4378	49768	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:29.708050013 CET	4378	49768	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:29.708174944 CET	49768	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:29.708240986 CET	49768	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:29.711154938 CET	49770	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:29.713073969 CET	4378	49768	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:29.716314077 CET	4378	49770	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:29.716459036 CET	49770	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:29.716662884 CET	49770	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:29.721832037 CET	4378	49770	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:30.339684010 CET	4378	49770	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:30.339808941 CET	49770	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:30.339931965 CET	49770	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:30.344875097 CET	4378	49770	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:30.457670927 CET	49775	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:30.469005108 CET	4378	49775	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:30.469115019 CET	49775	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:30.469475031 CET	49775	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:30.480979919 CET	4378	49775	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:31.102376938 CET	4378	49775	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:31.102618933 CET	49775	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.102806091 CET	49775	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.105396032 CET	49779	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.107913971 CET	4378	49775	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:31.110661983 CET	4378	49779	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:31.110743999 CET	49779	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.110995054 CET	49779	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.116408110 CET	4378	49779	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:31.738497972 CET	4378	49779	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:31.738627911 CET	49779	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.766506910 CET	49779	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.771501064 CET	4378	49779	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:31.890656948 CET	49784	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.896867037 CET	4378	49784	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:31.896982908 CET	49784	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.898392916 CET	49784	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:31.904109001 CET	4378	49784	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:32.524245024 CET	4378	49784	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:32.524307966 CET	49784	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:32.524385929 CET	49784	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:32.526835918 CET	49789	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:32.529494047 CET	4378	49784	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:32.531697989 CET	4378	49789	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:32.531765938 CET	49789	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:32.532018900 CET	49789	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:32.537173033 CET	4378	49789	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:33.201896906 CET	4378	49789	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:33.201981068 CET	49789	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.202060938 CET	49789	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.207055092 CET	4378	49789	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:33.316912889 CET	49795	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.321856022 CET	4378	49795	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:33.321937084 CET	49795	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.322192907 CET	49795	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.327369928 CET	4378	49795	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:33.972347021 CET	4378	49795	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:33.972445965 CET	49795	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.972521067 CET	49795	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.975137949 CET	49799	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.977365971 CET	4378	49795	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:33.980189085 CET	4378	49799	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:33.980401993 CET	49799	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.980628014 CET	49799	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:33.985888004 CET	4378	49799	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:34.602633953 CET	4378	49799	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:34.602698088 CET	49799	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:34.602751970 CET	49799	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:34.607747078 CET	4378	49799	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:34.710437059 CET	49803	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:34.715482950 CET	4378	49803	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:34.715569973 CET	49803	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:34.715856075 CET	49803	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:34.720679998 CET	4378	49803	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:35.354342937 CET	4378	49803	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:35.354500055 CET	49803	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:35.354609013 CET	49803	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:35.357805014 CET	49809	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:35.359934092 CET	4378	49803	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:35.363454103 CET	4378	49809	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:35.363590002 CET	49809	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:35.363940001 CET	49809	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:35.371211052 CET	4378	49809	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:35.996593952 CET	4378	49809	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:35.996728897 CET	49809	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:35.996906042 CET	49809	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.001744986 CET	4378	49809	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:36.114136934 CET	49814	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.119195938 CET	4378	49814	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:36.119304895 CET	49814	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.119592905 CET	49814	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.124604940 CET	4378	49814	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:36.756452084 CET	4378	49814	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:36.756510973 CET	49814	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.759299040 CET	49814	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.765230894 CET	4378	49814	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:36.775497913 CET	49817	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.780565977 CET	4378	49817	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:36.780644894 CET	49817	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.784352064 CET	49817	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:36.789243937 CET	4378	49817	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:37.438802958 CET	4378	49817	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:37.438879967 CET	49817	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:37.438977003 CET	49817	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:37.443800926 CET	4378	49817	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:37.552956104 CET	49822	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:37.558276892 CET	4378	49822	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:37.558374882 CET	49822	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:37.558701038 CET	49822	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:37.563817978 CET	4378	49822	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:38.211195946 CET	4378	49822	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:38.211277962 CET	49822	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.211374998 CET	49822	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.213939905 CET	49828	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.216259956 CET	4378	49822	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:38.219888926 CET	4378	49828	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:38.219994068 CET	49828	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.220254898 CET	49828	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.227066040 CET	4378	49828	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:38.855767012 CET	4378	49828	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:38.855878115 CET	49828	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.856021881 CET	49828	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.860925913 CET	4378	49828	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:38.974474907 CET	49835	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.979739904 CET	4378	49835	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:38.979835987 CET	49835	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.980309010 CET	49835	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:38.985200882 CET	4378	49835	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:39.608299971 CET	4378	49835	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:39.608390093 CET	49835	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:39.608458996 CET	49835	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:39.611592054 CET	49839	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:39.613363028 CET	4378	49835	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:39.616429090 CET	4378	49839	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:39.616512060 CET	49839	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:39.616841078 CET	49839	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:39.621822119 CET	4378	49839	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:40.239044905 CET	4378	49839	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:40.239128113 CET	49839	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:40.239265919 CET	49839	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:40.244096994 CET	4378	49839	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:40.348239899 CET	49841	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:40.353169918 CET	4378	49841	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:40.353255033 CET	49841	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:40.353518963 CET	49841	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:40.358407021 CET	4378	49841	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.003870964 CET	4378	49841	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.004350901 CET	49841	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.004439116 CET	49841	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.006736040 CET	49847	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.009304047 CET	4378	49841	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.012028933 CET	4378	49847	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.012141943 CET	49847	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.012402058 CET	49847	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.017584085 CET	4378	49847	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.357412100 CET	49850	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.362456083 CET	4378	49850	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.363692045 CET	49850	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.364675045 CET	49850	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.369765997 CET	4378	49850	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.634212017 CET	4378	49847	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.634287119 CET	49847	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.634412050 CET	49847	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.639408112 CET	4378	49847	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.779849052 CET	49854	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.784980059 CET	4378	49854	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.785068035 CET	49854	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.789242983 CET	49854	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.794200897 CET	4378	49854	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.998511076 CET	4378	49850	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:41.998606920 CET	49850	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:41.998722076 CET	49850	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.004719973 CET	4378	49850	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.009408951 CET	49855	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.014513016 CET	4378	49855	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.014595032 CET	49855	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.016402960 CET	49855	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.021318913 CET	4378	49855	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.419899940 CET	4378	49854	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.421108007 CET	49854	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.421165943 CET	49854	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.423696995 CET	49859	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.426084995 CET	4378	49854	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.428730011 CET	4378	49859	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.432384014 CET	49859	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.432743073 CET	49859	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.437609911 CET	4378	49859	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.645837069 CET	4378	49855	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.645977020 CET	49855	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.646119118 CET	49855	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.651007891 CET	4378	49855	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.755350113 CET	49862	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.760385036 CET	4378	49862	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:42.760481119 CET	49862	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.760844946 CET	49862	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:42.766094923 CET	4378	49862	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.078330040 CET	4378	49859	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.078404903 CET	49859	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.078495026 CET	49859	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.083295107 CET	4378	49859	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.213840008 CET	49864	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.218733072 CET	4378	49864	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.218846083 CET	49864	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.219060898 CET	49864	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.223850012 CET	4378	49864	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.389723063 CET	4378	49862	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.389786005 CET	49862	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.389878035 CET	49862	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.392422915 CET	49867	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.394741058 CET	4378	49862	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.397422075 CET	4378	49867	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.397531033 CET	49867	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.397742033 CET	49867	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.402561903 CET	4378	49867	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.844115019 CET	4378	49864	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.844187021 CET	49864	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.844253063 CET	49864	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.846817017 CET	49870	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.849140882 CET	4378	49864	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.851674080 CET	4378	49870	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:43.851761103 CET	49870	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.852013111 CET	49870	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:43.857767105 CET	4378	49870	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.026088953 CET	4378	49867	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.026154995 CET	49867	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.026221037 CET	49867	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.031815052 CET	4378	49867	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.140079975 CET	49873	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.145418882 CET	4378	49873	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.145490885 CET	49873	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.149678946 CET	49873	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.155402899 CET	4378	49873	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.476344109 CET	4378	49870	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.480480909 CET	49870	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.480547905 CET	49870	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.485507011 CET	4378	49870	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.560565948 CET	49876	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.566587925 CET	4378	49876	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.567867994 CET	49876	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.601736069 CET	49876	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.606852055 CET	4378	49876	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.776387930 CET	4378	49873	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.776462078 CET	49873	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.776561022 CET	49873	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.778990030 CET	49877	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.781630039 CET	4378	49873	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.784351110 CET	4378	49877	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.784427881 CET	49877	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.784667969 CET	49877	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.789531946 CET	4378	49877	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.832535982 CET	49878	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.837533951 CET	4378	49878	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:44.837606907 CET	49878	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:44.837855101 CET	49878	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.120858908 CET	4378	49878	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.213772058 CET	4378	49876	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.217685938 CET	49876	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.217812061 CET	49876	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.220571995 CET	49880	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.222676992 CET	4378	49876	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.225500107 CET	4378	49880	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.225579977 CET	49880	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.225840092 CET	49880	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.231153011 CET	4378	49880	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.445049047 CET	4378	49877	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.445143938 CET	49877	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.445231915 CET	49877	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.451615095 CET	4378	49877	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.551531076 CET	49885	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.556469917 CET	4378	49885	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.556570053 CET	49885	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.556881905 CET	49885	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.562659025 CET	4378	49885	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.747466087 CET	4378	49878	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.747524977 CET	49878	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.747602940 CET	49878	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.750356913 CET	49886	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.753043890 CET	4378	49878	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.755338907 CET	4378	49886	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.755413055 CET	49886	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.755650043 CET	49886	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.760576010 CET	4378	49886	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.849997044 CET	4378	49880	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.850091934 CET	49880	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.850243092 CET	49880	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.855159998 CET	4378	49880	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.961685896 CET	49887	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.966751099 CET	4378	49887	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:45.966845989 CET	49887	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.970659971 CET	49887	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:45.975584030 CET	4378	49887	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.192639112 CET	4378	49885	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.192708969 CET	49885	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.192806005 CET	49885	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.195743084 CET	49890	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.197655916 CET	4378	49885	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.200767994 CET	4378	49890	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.201025963 CET	49890	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.201092005 CET	49890	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.206253052 CET	4378	49890	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.393114090 CET	4378	49886	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.393296957 CET	49886	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.393395901 CET	49886	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.398293972 CET	4378	49886	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.504559994 CET	49894	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.509473085 CET	4378	49894	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.509547949 CET	49894	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.509809971 CET	49894	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.515095949 CET	4378	49894	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.587837934 CET	4378	49887	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.587985039 CET	49887	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.588107109 CET	49887	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.593492031 CET	4378	49887	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.593643904 CET	49895	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.598665953 CET	4378	49895	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.598807096 CET	49895	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.599062920 CET	49895	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.604134083 CET	4378	49895	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.831650972 CET	4378	49890	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.831811905 CET	49890	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.831890106 CET	49890	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.836811066 CET	4378	49890	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.941986084 CET	49896	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.947041988 CET	4378	49896	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:46.947120905 CET	49896	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.947388887 CET	49896	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:46.952311993 CET	4378	49896	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.136297941 CET	4378	49894	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.136373997 CET	49894	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.136454105 CET	49894	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.138814926 CET	49899	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.141869068 CET	4378	49894	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.143734932 CET	4378	49899	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.143799067 CET	49899	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.144017935 CET	49899	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.151051998 CET	4378	49899	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.226818085 CET	4378	49895	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.226881027 CET	49895	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.226953030 CET	49895	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.232913017 CET	4378	49895	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.332575083 CET	49903	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.337990999 CET	4378	49903	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.338104963 CET	49903	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.338396072 CET	49903	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.344033957 CET	4378	49903	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.566792965 CET	4378	49896	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.566989899 CET	49896	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.567094088 CET	49896	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.569782019 CET	49904	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.572544098 CET	4378	49896	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.574695110 CET	4378	49904	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.574760914 CET	49904	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.575062990 CET	49904	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.579932928 CET	4378	49904	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.772177935 CET	4378	49899	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.772239923 CET	49899	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.772346973 CET	49899	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.777472019 CET	4378	49899	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.879396915 CET	49906	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.884706974 CET	4378	49906	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.884807110 CET	49906	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.885014057 CET	49906	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.890681982 CET	4378	49906	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.985140085 CET	4378	49903	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.985248089 CET	49903	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.985357046 CET	49903	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.988141060 CET	49907	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.991020918 CET	4378	49903	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.993983030 CET	4378	49907	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:47.994093895 CET	49907	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.994440079 CET	49907	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:47.999650002 CET	4378	49907	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.196681976 CET	4378	49904	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.196801901 CET	49904	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.196881056 CET	49904	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.201890945 CET	4378	49904	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.301412106 CET	49912	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.306499004 CET	4378	49912	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.306577921 CET	49912	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.306843042 CET	49912	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.311866045 CET	4378	49912	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.500433922 CET	4378	49906	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.500516891 CET	49906	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.500593901 CET	49906	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.503684044 CET	49913	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.505539894 CET	4378	49906	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.508719921 CET	4378	49913	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.508868933 CET	49913	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.509099007 CET	49913	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.514630079 CET	4378	49913	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.628715992 CET	4378	49907	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.628828049 CET	49907	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.628921986 CET	49907	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.633825064 CET	4378	49907	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.738864899 CET	49914	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.744200945 CET	4378	49914	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.744262934 CET	49914	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.744590044 CET	49914	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.749545097 CET	4378	49914	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.936717033 CET	4378	49912	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.936795950 CET	49912	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.936886072 CET	49912	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.939470053 CET	49917	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.941751003 CET	4378	49912	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.944428921 CET	4378	49917	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:48.944504976 CET	49917	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.944776058 CET	49917	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:48.949760914 CET	4378	49917	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.140430927 CET	4378	49913	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.140594006 CET	49913	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.140731096 CET	49913	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.145701885 CET	4378	49913	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.254919052 CET	49921	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.260011911 CET	4378	49921	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.260163069 CET	49921	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.260430098 CET	49921	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.265285015 CET	4378	49921	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.367605925 CET	4378	49914	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.367727041 CET	49914	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.367811918 CET	49914	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.370573997 CET	49922	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.372700930 CET	4378	49914	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.375565052 CET	4378	49922	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.375647068 CET	49922	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.375945091 CET	49922	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.380899906 CET	4378	49922	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.569885969 CET	4378	49917	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.570014954 CET	49917	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.570091963 CET	49917	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.574920893 CET	4378	49917	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.676352024 CET	49924	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.681188107 CET	4378	49924	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.681266069 CET	49924	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.681478024 CET	49924	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.686638117 CET	4378	49924	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.889878035 CET	4378	49921	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.890023947 CET	49921	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.890146971 CET	49921	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.893136978 CET	49928	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.894975901 CET	4378	49921	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.898277998 CET	4378	49928	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.898370981 CET	49928	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.898601055 CET	49928	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.903382063 CET	4378	49928	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.999046087 CET	4378	49922	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:49.999120951 CET	49922	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:49.999187946 CET	49922	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.005671024 CET	4378	49922	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.113890886 CET	49930	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.118901014 CET	4378	49930	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.119102955 CET	49930	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.119473934 CET	49930	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.124238014 CET	4378	49930	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.309598923 CET	4378	49924	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.309688091 CET	49924	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.309782028 CET	49924	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.313014984 CET	49931	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.314824104 CET	4378	49924	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.318073034 CET	4378	49931	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.318181992 CET	49931	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.318424940 CET	49931	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.323540926 CET	4378	49931	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.547707081 CET	4378	49928	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.547787905 CET	49928	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.547851086 CET	49928	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.552721977 CET	4378	49928	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.660826921 CET	49933	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.665826082 CET	4378	49933	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.665920019 CET	49933	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.666208982 CET	49933	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.671319008 CET	4378	49933	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.738297939 CET	4378	49930	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.738378048 CET	49930	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.738531113 CET	49930	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.742084980 CET	49937	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.743570089 CET	4378	49930	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.747057915 CET	4378	49937	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.747153044 CET	49937	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.747514009 CET	49937	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.753437042 CET	4378	49937	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.943887949 CET	4378	49931	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:50.944056988 CET	49931	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.944106102 CET	49931	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:50.950731039 CET	4378	49931	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.051492929 CET	49939	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.056576014 CET	4378	49939	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.056694031 CET	49939	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.057065010 CET	49939	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.062213898 CET	4378	49939	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.310684919 CET	4378	49933	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.310779095 CET	49933	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.310858011 CET	49933	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.313674927 CET	49940	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.315865040 CET	4378	49933	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.318722963 CET	4378	49940	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.318797112 CET	49940	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.319103003 CET	49940	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.324290037 CET	4378	49940	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.369822025 CET	4378	49937	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.369910002 CET	49937	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.370086908 CET	49937	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.374947071 CET	4378	49937	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.473288059 CET	49942	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.478318930 CET	4378	49942	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.478411913 CET	49942	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.478642941 CET	49942	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.483464003 CET	4378	49942	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.679558039 CET	4378	49939	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.679658890 CET	49939	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.679753065 CET	49939	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.682579994 CET	49946	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.685110092 CET	4378	49939	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.689121962 CET	4378	49946	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.689203978 CET	49946	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.689486027 CET	49946	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.694822073 CET	4378	49946	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.949117899 CET	4378	49940	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:51.949254990 CET	49940	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.949379921 CET	49940	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:51.954354048 CET	4378	49940	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.067112923 CET	49947	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.071913004 CET	4378	49947	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.072021961 CET	49947	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.072355986 CET	49947	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.077275038 CET	4378	49947	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.142608881 CET	4378	49942	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.142725945 CET	49942	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.142823935 CET	49942	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.145991087 CET	49949	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.147674084 CET	4378	49942	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.150836945 CET	4378	49949	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.150923014 CET	49949	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.156858921 CET	49949	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.161875010 CET	4378	49949	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.314496040 CET	4378	49946	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.314557076 CET	49946	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.314611912 CET	49946	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.319524050 CET	4378	49946	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.426588058 CET	49951	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.432002068 CET	4378	49951	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.432073116 CET	49951	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.432333946 CET	49951	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.438657045 CET	4378	49951	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.686388969 CET	4378	49947	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.686454058 CET	49947	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.686518908 CET	49947	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.689166069 CET	49955	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.691457987 CET	4378	49947	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.694283962 CET	4378	49955	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.694351912 CET	49955	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.694586992 CET	49955	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.699517965 CET	4378	49955	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.808831930 CET	4378	49949	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.808897972 CET	49949	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.808962107 CET	49949	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.816171885 CET	4378	49949	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.927540064 CET	49956	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.932646036 CET	4378	49956	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:52.932733059 CET	49956	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.933039904 CET	49956	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:52.938011885 CET	4378	49956	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.078677893 CET	4378	49951	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.078810930 CET	49951	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.078937054 CET	49951	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.081545115 CET	49958	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.083818913 CET	4378	49951	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.086491108 CET	4378	49958	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.086549044 CET	49958	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.086772919 CET	49958	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.091774940 CET	4378	49958	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.844949007 CET	4378	49955	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.845083952 CET	49955	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.845339060 CET	49955	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.845798016 CET	4378	49955	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.845837116 CET	4378	49956	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.845839024 CET	49955	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.845881939 CET	49956	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.845959902 CET	49956	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.846071959 CET	4378	49958	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.846120119 CET	49958	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.846129894 CET	4378	49955	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.846147060 CET	4378	49956	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.846174002 CET	49955	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.846174955 CET	49958	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.846188068 CET	49956	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.849544048 CET	49961	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.851439953 CET	4378	49955	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.851638079 CET	4378	49956	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.851963043 CET	4378	49958	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.854538918 CET	4378	49961	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.854595900 CET	49961	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.854862928 CET	49961	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.859987974 CET	4378	49961	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.957854986 CET	49965	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.961735010 CET	49964	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.962781906 CET	4378	49965	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.962867975 CET	49965	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.963139057 CET	49965	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.967263937 CET	4378	49964	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.967333078 CET	49964	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.967511892 CET	49964	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:53.968107939 CET	4378	49965	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:53.972558975 CET	4378	49964	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.490206003 CET	4378	49961	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.490271091 CET	49961	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.490365028 CET	49961	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.495253086 CET	4378	49961	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.587872982 CET	4378	49965	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.587933064 CET	49965	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.588016987 CET	49965	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.590442896 CET	49969	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.592848063 CET	4378	49965	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.595310926 CET	4378	49969	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.595382929 CET	49969	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.595602989 CET	49969	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.598179102 CET	49970	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.599384069 CET	4378	49964	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.599441051 CET	49964	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.599483967 CET	49964	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.600496054 CET	4378	49969	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.601397038 CET	49971	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.603044033 CET	4378	49970	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.603111982 CET	49970	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.603430986 CET	49970	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.604259968 CET	4378	49964	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.606334925 CET	4378	49971	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.606389999 CET	49971	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.606585026 CET	49971	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:54.608302116 CET	4378	49970	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:54.611326933 CET	4378	49971	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.215755939 CET	4378	49969	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.215828896 CET	49969	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.215897083 CET	49969	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.220798016 CET	4378	49969	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.224356890 CET	4378	49970	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.224436998 CET	49970	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.224495888 CET	49970	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.226711988 CET	49977	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.228190899 CET	4378	49971	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.228264093 CET	49971	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.228302002 CET	49971	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.231812000 CET	4378	49970	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.231822968 CET	4378	49977	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.231903076 CET	49977	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.232176065 CET	49977	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.233516932 CET	4378	49971	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.237102985 CET	4378	49977	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.332772970 CET	49978	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.332808971 CET	49979	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.337793112 CET	4378	49978	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.337809086 CET	4378	49979	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.337899923 CET	49978	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.338171005 CET	49979	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.338171005 CET	49978	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.338243008 CET	49979	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.343103886 CET	4378	49978	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.343125105 CET	4378	49979	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.845804930 CET	4378	49977	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.845874071 CET	49977	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.845961094 CET	49977	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.851609945 CET	4378	49977	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.957710028 CET	49984	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.960299969 CET	4378	49979	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.960406065 CET	49979	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.960448980 CET	49979	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.962630033 CET	4378	49984	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.962693930 CET	49984	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.962920904 CET	49984	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.962955952 CET	49985	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.964409113 CET	4378	49978	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.964477062 CET	49978	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.964513063 CET	49978	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.965483904 CET	4378	49979	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.966541052 CET	49986	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.967817068 CET	4378	49984	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.967828989 CET	4378	49985	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.967896938 CET	49985	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.968069077 CET	49985	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.969320059 CET	4378	49978	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.971448898 CET	4378	49986	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.971512079 CET	49986	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.971771955 CET	49986	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:55.972883940 CET	4378	49985	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:55.976588964 CET	4378	49986	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.585095882 CET	4378	49985	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.585184097 CET	49985	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.585299969 CET	49985	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.593677998 CET	4378	49985	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.595558882 CET	4378	49984	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.595649958 CET	49984	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.595737934 CET	49984	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.598371983 CET	49988	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.601222038 CET	4378	49986	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.601314068 CET	49986	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.601378918 CET	49986	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.601547956 CET	4378	49984	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.605036020 CET	4378	49988	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.605146885 CET	49988	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.605407953 CET	49988	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.610785007 CET	4378	49986	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.616575956 CET	4378	49988	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.692286968 CET	49989	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.697103024 CET	4378	49989	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.697180986 CET	49989	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.697467089 CET	49989	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.702472925 CET	4378	49989	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.707705975 CET	49991	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.712861061 CET	4378	49991	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:56.712961912 CET	49991	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.713243961 CET	49991	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:56.718086004 CET	4378	49991	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.225874901 CET	4378	49988	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.226015091 CET	49988	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.226125002 CET	49988	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.231116056 CET	4378	49988	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.326606035 CET	4378	49989	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.326713085 CET	49989	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.326817989 CET	49989	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.328213930 CET	4378	49991	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.328270912 CET	49991	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.328341007 CET	49991	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.330657005 CET	49996	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.331078053 CET	49997	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.331615925 CET	4378	49989	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.332506895 CET	49998	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.333359957 CET	4378	49991	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.335532904 CET	4378	49996	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.335602045 CET	49996	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.335848093 CET	49996	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.336025000 CET	4378	49997	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.336082935 CET	49997	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.336246014 CET	49997	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.338782072 CET	4378	49998	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.338836908 CET	49998	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.338994026 CET	49998	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.342125893 CET	4378	49996	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.343347073 CET	4378	49997	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.345807076 CET	4378	49998	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.957607031 CET	4378	49996	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.957731009 CET	49996	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.957871914 CET	49996	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.960437059 CET	4378	49997	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.960500956 CET	49997	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.960553885 CET	49997	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.962798119 CET	4378	49996	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.965389967 CET	4378	49997	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.970544100 CET	4378	49998	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.970626116 CET	49998	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.970704079 CET	49998	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.973347902 CET	50004	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.975558043 CET	4378	49998	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.978281975 CET	4378	50004	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:57.978378057 CET	50004	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.978666067 CET	50004	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:57.983553886 CET	4378	50004	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.067011118 CET	50005	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.067193985 CET	50006	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.071980953 CET	4378	50005	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.072055101 CET	50005	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.072067022 CET	4378	50006	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.072110891 CET	50006	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.072385073 CET	50006	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.072498083 CET	50005	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.077187061 CET	4378	50006	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.077550888 CET	4378	50005	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.604135036 CET	4378	50004	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.604204893 CET	50004	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.604285002 CET	50004	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.609159946 CET	4378	50004	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.700594902 CET	4378	50005	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.700733900 CET	50005	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.700834036 CET	50005	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.701245070 CET	4378	50006	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.702291012 CET	50006	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.702415943 CET	50006	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.704384089 CET	50011	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.705319881 CET	50012	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.705686092 CET	4378	50005	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.707222939 CET	4378	50006	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.707477093 CET	50013	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.710690022 CET	4378	50011	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.710707903 CET	4378	50012	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.710758924 CET	50011	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.710793018 CET	50012	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.710949898 CET	50011	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.711055994 CET	50012	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.712447882 CET	4378	50013	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.712513924 CET	50013	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.712716103 CET	50013	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:58.715862036 CET	4378	50011	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.716118097 CET	4378	50012	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:58.717900991 CET	4378	50013	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.331888914 CET	4378	50013	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.332005024 CET	50013	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.335180998 CET	4378	50012	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.335256100 CET	50012	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.340676069 CET	4378	50011	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.340764999 CET	50011	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.409773111 CET	50013	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.410115004 CET	50012	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.411551952 CET	50011	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.414580107 CET	4378	50013	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.414983034 CET	4378	50012	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.415148973 CET	50016	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.416378975 CET	4378	50011	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.420118093 CET	4378	50016	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.420238972 CET	50016	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.420491934 CET	50016	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.426001072 CET	4378	50016	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.534008980 CET	50018	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.538825989 CET	4378	50018	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.540113926 CET	50018	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.541888952 CET	50018	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.545587063 CET	50019	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.546638012 CET	4378	50018	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.550447941 CET	4378	50019	79.124.58.130	192.168.2.9
Nov 4, 2024 16:33:59.552208900 CET	50019	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.553649902 CET	50019	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:33:59.558582067 CET	4378	50019	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.035726070 CET	4378	50016	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.035819054 CET	50016	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.035891056 CET	50016	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.041317940 CET	4378	50016	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.145386934 CET	50022	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.150373936 CET	4378	50022	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.150520086 CET	50022	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.150785923 CET	50022	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.155615091 CET	4378	50022	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.187995911 CET	4378	50018	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.188117981 CET	50018	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.188172102 CET	50018	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.191061974 CET	50023	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.193097115 CET	4378	50018	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.196208000 CET	4378	50023	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.196507931 CET	50023	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.196707964 CET	50023	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.198935986 CET	4378	50019	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.199002028 CET	50019	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.199054003 CET	50019	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.201584101 CET	50025	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.201704979 CET	4378	50023	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.203885078 CET	4378	50019	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.206540108 CET	4378	50025	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.206633091 CET	50025	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.206929922 CET	50025	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.212029934 CET	4378	50025	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.805934906 CET	4378	50022	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.806005001 CET	50022	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.806068897 CET	50022	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.808703899 CET	50029	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.810833931 CET	4378	50022	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.813512087 CET	4378	50029	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.813587904 CET	50029	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.813898087 CET	50029	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.819098949 CET	4378	50023	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.819145918 CET	50023	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.819191933 CET	50023	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.819755077 CET	4378	50029	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.824093103 CET	4378	50023	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.845393896 CET	4378	50025	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.845463037 CET	50025	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.845518112 CET	50025	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.850723982 CET	4378	50025	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.926441908 CET	50030	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.931332111 CET	4378	50030	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.931410074 CET	50030	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.931629896 CET	50030	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.936469078 CET	4378	50030	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.957743883 CET	50032	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.962670088 CET	4378	50032	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:00.962734938 CET	50032	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.962964058 CET	50032	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:00.967745066 CET	4378	50032	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.439193010 CET	4378	50029	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.439299107 CET	50029	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.439488888 CET	50029	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.444339037 CET	4378	50029	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.552172899 CET	50037	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.557096004 CET	4378	50037	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.557228088 CET	50037	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.557531118 CET	50037	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.562349081 CET	4378	50037	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.579777002 CET	4378	50030	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.579864025 CET	50030	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.579955101 CET	50030	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.582700014 CET	50038	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.585829973 CET	4378	50032	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.585905075 CET	50032	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.585942030 CET	50032	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.586848974 CET	4378	50030	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.587965012 CET	4378	50038	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.588023901 CET	50039	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.588290930 CET	50038	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.588290930 CET	50038	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.590847015 CET	4378	50032	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.592941999 CET	4378	50039	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.593009949 CET	50039	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.593162060 CET	4378	50038	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:01.593194008 CET	50039	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:01.597950935 CET	4378	50039	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.186950922 CET	4378	50037	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.187093973 CET	50037	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.189780951 CET	50037	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.194854975 CET	4378	50037	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.214973927 CET	4378	50039	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.215081930 CET	50039	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.217557907 CET	4378	50038	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.217634916 CET	50038	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.232196093 CET	50039	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.236239910 CET	50038	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.237107992 CET	4378	50039	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.241156101 CET	4378	50038	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.260183096 CET	50043	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.265247107 CET	4378	50043	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.265355110 CET	50043	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.267607927 CET	50043	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.272492886 CET	4378	50043	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.372026920 CET	50044	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.372220993 CET	50045	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.377209902 CET	4378	50044	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.377326965 CET	50044	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.377378941 CET	4378	50045	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.377445936 CET	50045	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.377686024 CET	50044	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.377862930 CET	50045	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.382559061 CET	4378	50044	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.383647919 CET	4378	50045	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.908716917 CET	4378	50043	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:02.908811092 CET	50043	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.908864975 CET	50043	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:02.914369106 CET	4378	50043	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.010447979 CET	4378	50045	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.010503054 CET	50045	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.010576963 CET	50045	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.012579918 CET	50051	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.014061928 CET	4378	50044	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.014111042 CET	50044	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.014183998 CET	50044	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.015455961 CET	4378	50045	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.016268969 CET	50052	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.017910957 CET	4378	50051	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.017962933 CET	50051	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.018203974 CET	50051	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.019243956 CET	4378	50044	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.020248890 CET	50053	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.021243095 CET	4378	50052	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.021301985 CET	50052	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.021518946 CET	50052	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.023233891 CET	4378	50051	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.025209904 CET	4378	50053	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.025263071 CET	50053	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.025460958 CET	50053	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.026376963 CET	4378	50052	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.030312061 CET	4378	50053	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.646459103 CET	4378	50051	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.646539927 CET	50051	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.646650076 CET	50051	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.649152040 CET	4378	50052	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.649219990 CET	50052	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.649271011 CET	50052	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.650963068 CET	4378	50053	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.651026011 CET	50053	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.651082039 CET	50053	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.651443005 CET	4378	50051	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.653278112 CET	50056	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.654078007 CET	4378	50052	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.656354904 CET	4378	50053	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.658219099 CET	4378	50056	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.658314943 CET	50056	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.658529997 CET	50056	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.663897038 CET	4378	50056	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.754698038 CET	50058	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.754708052 CET	50057	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.760201931 CET	4378	50058	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.760389090 CET	50058	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.760395050 CET	4378	50057	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.760456085 CET	50057	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.760787010 CET	50057	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.760870934 CET	50058	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:03.766058922 CET	4378	50057	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:03.766191959 CET	4378	50058	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.325778008 CET	4378	50056	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.325933933 CET	50056	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.326015949 CET	50056	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.331758022 CET	4378	50056	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.396599054 CET	4378	50058	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.396653891 CET	50058	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.396728039 CET	50058	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.399322033 CET	50064	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.401998043 CET	4378	50058	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.403451920 CET	4378	50057	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.403525114 CET	50057	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.403577089 CET	50057	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.404614925 CET	4378	50064	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.404687881 CET	50064	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.404937983 CET	50064	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.405839920 CET	50065	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.408947945 CET	4378	50057	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.410042048 CET	4378	50064	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.410913944 CET	4378	50065	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.410990953 CET	50065	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.411163092 CET	50065	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.416541100 CET	4378	50065	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.442008018 CET	50066	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.447277069 CET	4378	50066	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:04.447370052 CET	50066	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.447593927 CET	50066	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:04.452650070 CET	4378	50066	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.027719021 CET	4378	50064	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.027803898 CET	50064	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.027905941 CET	50064	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.033076048 CET	4378	50064	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.041865110 CET	4378	50065	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.041941881 CET	50065	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.042072058 CET	50065	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.046850920 CET	4378	50065	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.085678101 CET	4378	50066	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.085748911 CET	50066	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.085875034 CET	50066	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.088625908 CET	50070	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.090749979 CET	4378	50066	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.093614101 CET	4378	50070	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.093694925 CET	50070	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.093966007 CET	50070	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.098764896 CET	4378	50070	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.145294905 CET	50071	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.145500898 CET	50072	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.150175095 CET	4378	50071	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.150304079 CET	4378	50072	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.150379896 CET	50071	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.150403976 CET	50072	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.150603056 CET	50071	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.150762081 CET	50072	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.155720949 CET	4378	50071	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.155731916 CET	4378	50072	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.742331982 CET	4378	50070	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.742408991 CET	50070	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.742501020 CET	50070	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.747395992 CET	4378	50070	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.776556015 CET	4378	50072	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.776664972 CET	50072	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.776717901 CET	50072	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.779350996 CET	50077	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.781557083 CET	4378	50072	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.784691095 CET	4378	50077	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.784766912 CET	50077	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.785068035 CET	50077	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.790251970 CET	4378	50077	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.822824001 CET	4378	50071	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.822936058 CET	50071	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.822983980 CET	50071	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.825076103 CET	50078	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.827790976 CET	4378	50071	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.830044985 CET	4378	50078	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.830106974 CET	50078	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.830349922 CET	50078	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.835328102 CET	4378	50078	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.848534107 CET	50080	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.853457928 CET	4378	50080	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:05.853523016 CET	50080	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.853907108 CET	50080	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:05.858880997 CET	4378	50080	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.447360992 CET	4378	50077	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.447436094 CET	50077	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.447519064 CET	50077	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.452403069 CET	4378	50077	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.480273008 CET	4378	50078	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.480433941 CET	50078	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.480487108 CET	50078	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.485322952 CET	4378	50078	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.499866962 CET	4378	50080	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.499953985 CET	50080	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.500070095 CET	50080	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.502578974 CET	50084	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.504828930 CET	4378	50080	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.507471085 CET	4378	50084	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.507549047 CET	50084	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.507797956 CET	50084	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.513381004 CET	4378	50084	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.551810026 CET	50085	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.556746960 CET	4378	50085	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.556816101 CET	50085	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.557065964 CET	50085	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.562064886 CET	4378	50085	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.598690987 CET	50087	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.603538990 CET	4378	50087	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:06.603681087 CET	50087	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.603921890 CET	50087	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:06.608887911 CET	4378	50087	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.128856897 CET	4378	50084	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.128963947 CET	50084	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.129096985 CET	50084	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.134223938 CET	4378	50084	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.187618017 CET	4378	50085	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.187714100 CET	50085	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.187823057 CET	50085	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.190301895 CET	50091	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.192673922 CET	4378	50085	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.195672035 CET	4378	50091	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.195740938 CET	50091	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.196187973 CET	50091	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.201348066 CET	4378	50091	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.225409985 CET	4378	50087	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.225492001 CET	50087	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.225563049 CET	50087	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.227937937 CET	50092	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.230397940 CET	4378	50087	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.232863903 CET	4378	50092	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.232933998 CET	50092	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.233161926 CET	50092	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.238358974 CET	4378	50092	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.241590977 CET	50093	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.246572971 CET	4378	50093	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.246639013 CET	50093	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.246896982 CET	50093	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.252015114 CET	4378	50093	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.816849947 CET	4378	50091	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.816906929 CET	50091	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.816970110 CET	50091	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.821960926 CET	4378	50091	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.856466055 CET	4378	50092	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.856530905 CET	50092	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.856636047 CET	50092	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.861500025 CET	4378	50092	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.868920088 CET	4378	50093	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.868984938 CET	50093	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.869044065 CET	50093	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.871604919 CET	50098	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.874314070 CET	4378	50093	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.876754999 CET	4378	50098	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.876820087 CET	50098	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.877094030 CET	50098	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.882019043 CET	4378	50098	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.926784039 CET	50099	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.931611061 CET	4378	50099	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.931687117 CET	50099	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.932005882 CET	50099	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.937906981 CET	4378	50099	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.973316908 CET	50100	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.978445053 CET	4378	50100	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:07.978518963 CET	50100	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.978760958 CET	50100	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:07.984239101 CET	4378	50100	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.498145103 CET	4378	50098	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.498222113 CET	50098	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.498353004 CET	50098	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.503505945 CET	4378	50098	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.554702044 CET	4378	50099	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.554912090 CET	50099	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.555032969 CET	50099	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.557449102 CET	50104	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.559772968 CET	4378	50099	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.562196016 CET	4378	50104	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.562308073 CET	50104	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.562578917 CET	50104	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.567568064 CET	4378	50104	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.608236074 CET	4378	50100	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.608340025 CET	50100	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.608437061 CET	50100	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.610945940 CET	50105	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.613220930 CET	4378	50100	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.613683939 CET	50106	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.615937948 CET	4378	50105	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.616029978 CET	50105	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.616328001 CET	50105	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.618648052 CET	4378	50106	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.618716955 CET	50106	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.618864059 CET	50106	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:08.621140003 CET	4378	50105	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:08.623815060 CET	4378	50106	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.204303980 CET	4378	50104	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.204411030 CET	50104	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.204504967 CET	50104	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.209465027 CET	4378	50104	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.248068094 CET	4378	50106	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.248121977 CET	50106	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.248193026 CET	50106	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.250005960 CET	4378	50105	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.250058889 CET	50105	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.250124931 CET	50105	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.250771046 CET	50111	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.252985001 CET	4378	50106	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.255239010 CET	4378	50105	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.255853891 CET	4378	50111	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.255918980 CET	50111	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.256176949 CET	50111	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.261653900 CET	4378	50111	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.317130089 CET	50112	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.322026968 CET	4378	50112	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.322138071 CET	50112	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.322494984 CET	50112	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.327425003 CET	4378	50112	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.364015102 CET	50113	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.368927956 CET	4378	50113	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.369045019 CET	50113	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.369332075 CET	50113	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.374231100 CET	4378	50113	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.879604101 CET	4378	50111	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.879815102 CET	50111	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.879940033 CET	50111	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.884808064 CET	4378	50111	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.943892002 CET	4378	50112	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.944008112 CET	50112	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.944083929 CET	50112	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.946738958 CET	50114	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.948915005 CET	4378	50112	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.951733112 CET	4378	50114	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.951826096 CET	50114	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.952111006 CET	50114	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.957304001 CET	4378	50114	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.988984108 CET	50115	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.994174957 CET	4378	50115	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.994314909 CET	50115	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.994574070 CET	50115	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.997621059 CET	4378	50113	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:09.997705936 CET	50113	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.997833014 CET	50113	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:09.999340057 CET	4378	50115	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.000478029 CET	50116	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.002680063 CET	4378	50113	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.005600929 CET	4378	50116	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.005687952 CET	50116	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.005954027 CET	50116	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.010776043 CET	4378	50116	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.575356007 CET	4378	50114	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.575486898 CET	50114	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.575571060 CET	50114	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.580825090 CET	4378	50114	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.624918938 CET	4378	50116	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.624986887 CET	50116	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.625071049 CET	50116	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.626602888 CET	4378	50115	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.626655102 CET	50115	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.626741886 CET	50115	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.629100084 CET	50117	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.629920006 CET	4378	50116	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.631536961 CET	4378	50115	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.634161949 CET	4378	50117	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.634228945 CET	50117	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.634490967 CET	50117	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.639364958 CET	4378	50117	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.692177057 CET	50118	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.697153091 CET	4378	50118	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.697283030 CET	50118	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.697546005 CET	50118	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.702605009 CET	4378	50118	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.738945007 CET	50119	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.743861914 CET	4378	50119	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:10.744050980 CET	50119	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.744318962 CET	50119	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:10.749253035 CET	4378	50119	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.254057884 CET	4378	50117	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.254113913 CET	50117	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.254182100 CET	50117	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.259195089 CET	4378	50117	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.325048923 CET	4378	50118	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.325141907 CET	50118	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.325231075 CET	50118	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.327960014 CET	50120	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.330650091 CET	4378	50118	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.333081007 CET	4378	50120	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.333147049 CET	50120	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.333374977 CET	50120	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.338809013 CET	4378	50120	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.364293098 CET	50121	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.369393110 CET	4378	50121	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.369504929 CET	50121	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.369780064 CET	50121	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.375029087 CET	4378	50121	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.386151075 CET	4378	50119	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.386249065 CET	50119	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.386317015 CET	50119	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.389015913 CET	50122	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.392074108 CET	4378	50119	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.394414902 CET	4378	50122	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.394524097 CET	50122	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.395057917 CET	50122	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.400397062 CET	4378	50122	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.957164049 CET	4378	50120	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.957237959 CET	50120	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.957315922 CET	50120	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.962282896 CET	4378	50120	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.991992950 CET	4378	50121	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.992078066 CET	50121	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.992166996 CET	50121	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.994679928 CET	50123	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:11.998675108 CET	4378	50121	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.999751091 CET	4378	50123	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:11.999828100 CET	50123	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.000051022 CET	50123	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.005069971 CET	4378	50123	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.021248102 CET	4378	50122	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.021322966 CET	50122	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.021400928 CET	50122	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.026675940 CET	4378	50122	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.067143917 CET	50124	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.072141886 CET	4378	50124	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.072254896 CET	50124	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.072603941 CET	50124	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.077771902 CET	4378	50124	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.129710913 CET	50125	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.134644985 CET	4378	50125	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.134752035 CET	50125	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.140343904 CET	50125	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.145227909 CET	4378	50125	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.629930019 CET	4378	50123	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.630038977 CET	50123	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.630172014 CET	50123	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.635060072 CET	4378	50123	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.694458008 CET	4378	50124	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.694580078 CET	50124	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.694638014 CET	50124	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.697299004 CET	50126	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.699520111 CET	4378	50124	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.702208042 CET	4378	50126	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.702280998 CET	50126	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.702522039 CET	50126	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.707426071 CET	4378	50126	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.738985062 CET	50127	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.745271921 CET	4378	50127	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.745367050 CET	50127	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.745727062 CET	50127	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.751005888 CET	4378	50127	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.765065908 CET	4378	50125	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.765156031 CET	50125	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.765217066 CET	50125	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.767983913 CET	50128	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.770821095 CET	4378	50125	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.772963047 CET	4378	50128	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:12.773039103 CET	50128	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.773288965 CET	50128	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:12.778553009 CET	4378	50128	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.352859020 CET	4378	50126	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.352924109 CET	50126	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.353009939 CET	50126	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.357827902 CET	4378	50126	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.366942883 CET	4378	50127	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.366995096 CET	50127	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.367049932 CET	50127	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.369190931 CET	50129	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.372000933 CET	4378	50127	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.374090910 CET	4378	50129	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.374150038 CET	50129	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.374387980 CET	50129	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.379187107 CET	4378	50129	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.385924101 CET	4378	50128	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.385970116 CET	50128	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.386050940 CET	50128	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.390888929 CET	4378	50128	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.459500074 CET	50130	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.464623928 CET	4378	50130	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.464692116 CET	50130	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.464958906 CET	50130	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.469703913 CET	4378	50130	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.584537983 CET	50131	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.589524984 CET	4378	50131	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:13.589607954 CET	50131	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.589893103 CET	50131	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:13.595166922 CET	4378	50131	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.000215054 CET	4378	50129	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.000284910 CET	50129	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.000366926 CET	50129	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.006056070 CET	4378	50129	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.094608068 CET	4378	50130	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.094681025 CET	50130	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.094780922 CET	50130	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.097228050 CET	50132	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.099951029 CET	4378	50130	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.102222919 CET	4378	50132	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.102286100 CET	50132	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.102562904 CET	50132	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.107561111 CET	4378	50132	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.113890886 CET	50133	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.118783951 CET	4378	50133	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.118870020 CET	50133	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.119205952 CET	50133	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.124269962 CET	4378	50133	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.212992907 CET	4378	50131	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.213119030 CET	50131	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.213222027 CET	50131	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.215894938 CET	50134	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.218132019 CET	4378	50131	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.220769882 CET	4378	50134	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.220858097 CET	50134	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.221049070 CET	50134	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.226171017 CET	4378	50134	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.725454092 CET	4378	50132	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.725553989 CET	50132	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.725631952 CET	50132	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.731020927 CET	4378	50132	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.746154070 CET	4378	50133	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.746264935 CET	50133	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.746340990 CET	50133	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.748733997 CET	50135	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.751346111 CET	4378	50133	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.753810883 CET	4378	50135	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.753905058 CET	50135	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.754179001 CET	50135	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.759624004 CET	4378	50135	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.832739115 CET	50136	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.838692904 CET	4378	50136	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.838788986 CET	50136	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.839018106 CET	50136	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.844219923 CET	4378	50136	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.851605892 CET	4378	50134	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.851666927 CET	50134	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.851785898 CET	50134	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.856720924 CET	4378	50134	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.957782984 CET	50137	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.962724924 CET	4378	50137	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:14.962811947 CET	50137	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.963049889 CET	50137	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:14.967968941 CET	4378	50137	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.377458096 CET	4378	50135	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.377680063 CET	50135	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.377819061 CET	50135	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.383328915 CET	4378	50135	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.467444897 CET	4378	50136	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.467576981 CET	50136	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.467633963 CET	50136	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.470316887 CET	50138	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.474149942 CET	4378	50136	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.475574970 CET	4378	50138	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.475641012 CET	50138	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.475873947 CET	50138	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.480964899 CET	4378	50138	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.488816023 CET	50139	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.495728016 CET	4378	50139	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.495811939 CET	50139	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.496009111 CET	50139	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.501235962 CET	4378	50139	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.618808985 CET	4378	50137	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.618870974 CET	50137	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.618942976 CET	50137	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.621345997 CET	50140	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.623805046 CET	4378	50137	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.626199007 CET	4378	50140	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:15.626257896 CET	50140	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.626466036 CET	50140	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:15.631992102 CET	4378	50140	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.117806911 CET	4378	50138	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.117975950 CET	50138	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.118046999 CET	50138	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.123006105 CET	4378	50138	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.124747992 CET	4378	50139	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.124806881 CET	50139	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.124860048 CET	50139	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.130002975 CET	4378	50139	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.199731112 CET	50141	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.204945087 CET	4378	50141	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.205033064 CET	50141	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.205329895 CET	50141	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.210108995 CET	4378	50141	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.224457979 CET	50142	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.229507923 CET	4378	50142	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.229603052 CET	50142	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.232414961 CET	50142	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.238590002 CET	4378	50142	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.253199100 CET	4378	50140	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.253319979 CET	50140	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.255112886 CET	50140	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.260292053 CET	4378	50140	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.395512104 CET	50143	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.401285887 CET	4378	50143	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.401448011 CET	50143	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.401742935 CET	50143	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.406920910 CET	4378	50143	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.829843044 CET	4378	50141	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.830033064 CET	50141	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.830161095 CET	50141	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.834985971 CET	4378	50141	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.885037899 CET	4378	50142	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.885090113 CET	50142	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.885178089 CET	50142	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.887239933 CET	50145	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.889996052 CET	4378	50142	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.892607927 CET	4378	50145	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.892672062 CET	50145	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.892926931 CET	50145	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.898452044 CET	4378	50145	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.942799091 CET	50146	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.947958946 CET	4378	50146	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:16.948035002 CET	50146	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.954010010 CET	50146	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:16.960438013 CET	4378	50146	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.027733088 CET	4378	50143	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.027798891 CET	50143	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.027880907 CET	50143	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.030056000 CET	50147	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.035964966 CET	4378	50143	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.036088943 CET	4378	50147	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.036160946 CET	50147	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.036456108 CET	50147	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.042134047 CET	4378	50147	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.522432089 CET	4378	50145	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.522511005 CET	50145	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.522639990 CET	50145	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.527569056 CET	4378	50145	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.563991070 CET	4378	50146	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.564049006 CET	50146	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.564122915 CET	50146	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.567094088 CET	50148	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.569176912 CET	4378	50146	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.572048903 CET	4378	50148	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.572107077 CET	50148	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.572345972 CET	50148	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.578511953 CET	4378	50148	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.630247116 CET	50149	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.636868954 CET	4378	50149	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.636955023 CET	50149	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.637334108 CET	50149	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.643943071 CET	4378	50149	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.675717115 CET	4378	50147	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.675776958 CET	50147	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.675828934 CET	50147	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.682285070 CET	4378	50147	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.785891056 CET	50150	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.790930986 CET	4378	50150	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:17.791008949 CET	50150	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.791235924 CET	50150	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:17.796606064 CET	4378	50150	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.219710112 CET	4378	50148	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.219769955 CET	50148	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.219835043 CET	50148	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.224661112 CET	4378	50148	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.259851933 CET	4378	50149	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.259915113 CET	50149	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.259987116 CET	50149	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.262458086 CET	50151	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.264755964 CET	4378	50149	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.267419100 CET	4378	50151	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.267507076 CET	50151	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.267734051 CET	50151	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.272583961 CET	4378	50151	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.332813025 CET	50152	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.337764025 CET	4378	50152	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.337846994 CET	50152	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.338107109 CET	50152	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.343410015 CET	4378	50152	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.452549934 CET	4378	50150	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.452668905 CET	50150	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.452804089 CET	50150	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.455646992 CET	50153	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.457694054 CET	4378	50150	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.460617065 CET	4378	50153	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.460690975 CET	50153	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.461016893 CET	50153	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.466360092 CET	4378	50153	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.896382093 CET	4378	50151	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.899812937 CET	50151	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.899858952 CET	50151	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.905044079 CET	4378	50151	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.968674898 CET	4378	50152	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.971784115 CET	50152	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.971863031 CET	50152	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.976077080 CET	50154	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.976969004 CET	4378	50152	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.981609106 CET	4378	50154	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:18.981748104 CET	50154	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.982040882 CET	50154	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:18.986902952 CET	4378	50154	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.004609108 CET	50155	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.009690046 CET	4378	50155	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.009767056 CET	50155	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.010023117 CET	50155	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.015086889 CET	4378	50155	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.091434956 CET	4378	50153	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.091569901 CET	50153	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.091666937 CET	50153	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.096632004 CET	4378	50153	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.207912922 CET	50156	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.213567019 CET	4378	50156	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.213649035 CET	50156	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.213958025 CET	50156	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.227866888 CET	4378	50156	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.610908985 CET	4378	50154	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.611068010 CET	50154	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.611146927 CET	50154	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.616379976 CET	4378	50154	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.646210909 CET	4378	50155	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.646323919 CET	50155	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.646414042 CET	50155	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.649038076 CET	50157	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.651279926 CET	4378	50155	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.655927896 CET	4378	50157	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.655997992 CET	50157	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.656265974 CET	50157	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.661453009 CET	4378	50157	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.723371029 CET	50158	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.728303909 CET	4378	50158	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.728393078 CET	50158	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.728759050 CET	50158	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.733541012 CET	4378	50158	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.847218990 CET	4378	50156	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.847404957 CET	50156	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.847707987 CET	50156	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.850399017 CET	50159	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.852494955 CET	4378	50156	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.855228901 CET	4378	50159	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:19.855289936 CET	50159	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.855509996 CET	50159	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:19.860342979 CET	4378	50159	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.271121979 CET	4378	50157	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.271331072 CET	50157	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.271413088 CET	50157	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.276175976 CET	4378	50157	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.363869905 CET	4378	50158	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.363933086 CET	50158	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.364007950 CET	50158	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.370022058 CET	4378	50158	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.373450041 CET	50160	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.379566908 CET	50161	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.382092953 CET	4378	50160	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.382186890 CET	50160	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.382409096 CET	50160	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.384670973 CET	4378	50161	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.384746075 CET	50161	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.385087967 CET	50161	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.387507915 CET	4378	50160	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.390131950 CET	4378	50161	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.480099916 CET	4378	50159	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.480185032 CET	50159	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.480256081 CET	50159	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.485399961 CET	4378	50159	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.598299026 CET	50162	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.603693008 CET	4378	50162	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:20.603791952 CET	50162	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.604127884 CET	50162	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:20.609074116 CET	4378	50162	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.014277935 CET	4378	50161	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.014388084 CET	50161	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.014455080 CET	50161	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.017695904 CET	50163	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.019357920 CET	4378	50161	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.019383907 CET	4378	50160	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.019433022 CET	50160	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.019484043 CET	50160	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.022571087 CET	4378	50163	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.022654057 CET	50163	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.023387909 CET	50163	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.024521112 CET	4378	50160	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.028177023 CET	4378	50163	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.129720926 CET	50164	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.134730101 CET	4378	50164	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.134825945 CET	50164	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.135042906 CET	50164	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.139887094 CET	4378	50164	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.224770069 CET	4378	50162	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.224911928 CET	50162	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.225001097 CET	50162	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.227785110 CET	50165	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.229834080 CET	4378	50162	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.232747078 CET	4378	50165	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.232820988 CET	50165	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.233069897 CET	50165	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.238006115 CET	4378	50165	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.651110888 CET	4378	50163	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.651232958 CET	50163	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.651390076 CET	50163	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.656244040 CET	4378	50163	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.755702972 CET	4378	50164	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.755799055 CET	50164	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.755906105 CET	50164	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.758166075 CET	50166	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.760718107 CET	4378	50164	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.763061047 CET	4378	50166	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.763142109 CET	50166	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.769033909 CET	50166	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.770253897 CET	50167	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.773803949 CET	4378	50166	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.775152922 CET	4378	50167	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.775202990 CET	50167	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.775410891 CET	50167	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.780535936 CET	4378	50167	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.853630066 CET	4378	50165	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.853686094 CET	50165	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.853759050 CET	50165	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.858597994 CET	4378	50165	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.957750082 CET	50168	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.962796926 CET	4378	50168	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:21.962933064 CET	50168	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.963148117 CET	50168	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:21.967969894 CET	4378	50168	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.377969027 CET	4378	50166	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.378171921 CET	50166	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.378635883 CET	50166	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.383455038 CET	4378	50166	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.398216963 CET	4378	50167	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.398293972 CET	50167	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.398377895 CET	50167	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.400942087 CET	50169	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.403239012 CET	4378	50167	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.405750036 CET	4378	50169	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.405812025 CET	50169	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.406022072 CET	50169	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.410902977 CET	4378	50169	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.489084959 CET	50170	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.494215965 CET	4378	50170	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.494321108 CET	50170	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.494683981 CET	50170	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.499501944 CET	4378	50170	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.584882975 CET	4378	50168	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.584954023 CET	50168	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.585098028 CET	50168	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.587804079 CET	50171	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.590213060 CET	4378	50168	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.592993975 CET	4378	50171	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:22.593065977 CET	50171	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.593333960 CET	50171	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:22.598416090 CET	4378	50171	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.193892956 CET	4378	50169	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.193989038 CET	50169	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.194082022 CET	50169	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.194935083 CET	4378	50170	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.194993019 CET	50170	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.195051908 CET	50170	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.197628975 CET	50172	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.199167013 CET	4378	50169	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.199939013 CET	4378	50170	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.202502012 CET	4378	50172	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.202570915 CET	50172	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.202810049 CET	50172	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.207906961 CET	4378	50172	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.220220089 CET	4378	50171	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.220313072 CET	50171	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.220386028 CET	50171	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.225651026 CET	4378	50171	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.301522970 CET	50173	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.306415081 CET	4378	50173	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.306483984 CET	50173	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.306720018 CET	50173	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.311711073 CET	4378	50173	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.332849979 CET	50174	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.337996960 CET	4378	50174	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.338093042 CET	50174	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.338521004 CET	50174	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.343271017 CET	4378	50174	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.824032068 CET	4378	50172	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.824103117 CET	50172	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.824255943 CET	50172	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.829157114 CET	4378	50172	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.942162991 CET	50175	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.947189093 CET	4378	50175	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.947320938 CET	50175	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.947715044 CET	50175	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.952517033 CET	4378	50175	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.954977036 CET	4378	50173	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.955054045 CET	50173	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.955207109 CET	50173	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.958231926 CET	50176	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.960613966 CET	4378	50173	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.962877035 CET	4378	50174	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.962954044 CET	50174	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.963084936 CET	50174	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.963694096 CET	4378	50176	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.963759899 CET	50176	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.964077950 CET	50176	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.965708971 CET	50177	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.967941999 CET	4378	50174	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.970180035 CET	4378	50176	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.970551968 CET	4378	50177	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:23.970642090 CET	50177	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.971044064 CET	50177	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:23.976474047 CET	4378	50177	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.570595980 CET	4378	50175	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.570673943 CET	50175	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.570779085 CET	50175	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.573841095 CET	50178	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.575934887 CET	4378	50175	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.578860044 CET	4378	50178	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.578931093 CET	50178	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.579171896 CET	50178	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.583981037 CET	4378	50178	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.588359118 CET	4378	50176	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.588412046 CET	50176	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.588468075 CET	50176	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.593313932 CET	4378	50176	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.620323896 CET	4378	50177	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.620426893 CET	50177	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.620474100 CET	50177	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.625510931 CET	4378	50177	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.692404032 CET	50179	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.697575092 CET	4378	50179	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.697662115 CET	50179	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.697937012 CET	50179	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.702917099 CET	4378	50179	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.723419905 CET	50180	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.729010105 CET	4378	50180	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:24.729193926 CET	50180	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.729429960 CET	50180	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:24.734224081 CET	4378	50180	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.223213911 CET	4378	50178	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.223334074 CET	50178	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.223443985 CET	50178	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.228240013 CET	4378	50178	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.333467007 CET	50181	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.338663101 CET	4378	50181	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.338764906 CET	50181	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.339303970 CET	50181	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.344455004 CET	4378	50181	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.354950905 CET	4378	50179	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.355102062 CET	50179	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.355148077 CET	50179	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.357908010 CET	4378	50180	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.357995987 CET	50180	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.358130932 CET	50180	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.358195066 CET	50182	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.360101938 CET	4378	50179	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.362204075 CET	50183	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.362900972 CET	4378	50180	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.363012075 CET	4378	50182	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.363126040 CET	50182	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.363605022 CET	50182	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.367660046 CET	4378	50183	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.367753029 CET	50183	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.367968082 CET	50183	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.368468046 CET	4378	50182	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.373249054 CET	4378	50183	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.980402946 CET	4378	50181	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.980480909 CET	50181	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.980566025 CET	50181	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.981779099 CET	4378	50182	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.981837034 CET	50182	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.981923103 CET	50182	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.983799934 CET	50184	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.985677004 CET	4378	50181	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.987135887 CET	4378	50182	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.989331007 CET	4378	50184	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:25.989409924 CET	50184	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.989676952 CET	50184	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:25.995335102 CET	4378	50184	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.005779028 CET	4378	50183	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.005865097 CET	50183	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.005925894 CET	50183	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.010853052 CET	4378	50183	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.098525047 CET	50185	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.103447914 CET	4378	50185	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.103529930 CET	50185	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.103782892 CET	50185	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.108800888 CET	4378	50185	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.114010096 CET	50186	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.119148970 CET	4378	50186	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.119219065 CET	50186	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.119450092 CET	50186	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.124258041 CET	4378	50186	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.625451088 CET	4378	50184	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.625638962 CET	50184	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.625731945 CET	50184	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.631794930 CET	4378	50184	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.738975048 CET	50187	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.746156931 CET	4378	50187	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.746248007 CET	50187	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.746649027 CET	50187	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.755178928 CET	4378	50187	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.757200956 CET	4378	50185	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.757256031 CET	50185	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.757314920 CET	50185	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.759702921 CET	50188	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.763263941 CET	4378	50186	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.763324022 CET	50186	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.763384104 CET	50186	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.765615940 CET	50189	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.766069889 CET	4378	50185	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.767546892 CET	4378	50188	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.767606020 CET	50188	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.767831087 CET	50188	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.771327972 CET	4378	50186	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.775048971 CET	4378	50189	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.775137901 CET	50189	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.775408983 CET	50189	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:26.776336908 CET	4378	50188	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:26.782269001 CET	4378	50189	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.394256115 CET	4378	50187	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.394340992 CET	50187	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.394424915 CET	50187	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.397469997 CET	50190	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.399329901 CET	4378	50187	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.402519941 CET	4378	50190	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.402585030 CET	50190	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.402776003 CET	50190	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.407567978 CET	4378	50190	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.415576935 CET	4378	50189	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.415640116 CET	50189	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.415819883 CET	50189	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.420985937 CET	4378	50189	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.427710056 CET	4378	50188	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.427786112 CET	50188	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.427849054 CET	50188	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.432668924 CET	4378	50188	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.520159960 CET	50191	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.526356936 CET	4378	50191	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.526432037 CET	50191	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.526705980 CET	50191	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.531768084 CET	4378	50191	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.535698891 CET	50192	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.540869951 CET	4378	50192	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:27.540930033 CET	50192	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.541152954 CET	50192	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:27.546278000 CET	4378	50192	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.102447987 CET	4378	50190	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.102539062 CET	50190	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.102788925 CET	50190	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.107836962 CET	4378	50190	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.171505928 CET	4378	50191	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.171869040 CET	50191	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.171869040 CET	50191	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.176371098 CET	50193	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.177634954 CET	4378	50191	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.181411982 CET	4378	50193	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.181477070 CET	50193	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.182023048 CET	50193	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.187432051 CET	4378	50193	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.207633018 CET	50194	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.213649988 CET	4378	50194	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.213726044 CET	50194	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.214416027 CET	50194	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.219460964 CET	4378	50194	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.234520912 CET	4378	50192	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.234586000 CET	50192	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.234647036 CET	50192	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.237209082 CET	50195	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.239789009 CET	4378	50192	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.242152929 CET	4378	50195	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.242211103 CET	50195	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.242432117 CET	50195	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.247339964 CET	4378	50195	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.833683014 CET	4378	50193	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.833785057 CET	50193	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.833893061 CET	50193	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.839243889 CET	4378	50193	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.857376099 CET	4378	50194	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.857497931 CET	50194	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.857573032 CET	50194	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.860292912 CET	50196	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.862529993 CET	4378	50194	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.865197897 CET	4378	50196	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.865281105 CET	50196	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.865502119 CET	50196	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.868128061 CET	4378	50195	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.868177891 CET	50195	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.868243933 CET	50195	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.870374918 CET	4378	50196	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.873143911 CET	4378	50195	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.946830988 CET	50197	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.952035904 CET	4378	50197	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.952121019 CET	50197	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.952399015 CET	50197	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.957165003 CET	4378	50197	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.973402977 CET	50198	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.979201078 CET	4378	50198	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:28.979266882 CET	50198	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.979523897 CET	50198	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:28.985477924 CET	4378	50198	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.488308907 CET	4378	50196	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.488600016 CET	50196	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.488697052 CET	50196	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.493681908 CET	4378	50196	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.587639093 CET	4378	50197	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.587697029 CET	50197	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.587793112 CET	50197	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.591206074 CET	50199	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.592717886 CET	4378	50197	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.596218109 CET	4378	50199	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.596291065 CET	50199	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.596519947 CET	50199	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.598275900 CET	50200	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.602483034 CET	4378	50199	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.603487015 CET	4378	50200	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.603583097 CET	50200	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.604024887 CET	50200	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.606010914 CET	4378	50198	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.606072903 CET	50198	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.606151104 CET	50198	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.608828068 CET	50201	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.609468937 CET	4378	50200	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.610893011 CET	4378	50198	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.613626003 CET	4378	50201	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:29.613693953 CET	50201	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.613960028 CET	50201	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:29.619154930 CET	4378	50201	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.218810081 CET	4378	50199	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.219012976 CET	50199	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.219165087 CET	50199	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.223998070 CET	4378	50199	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.236777067 CET	4378	50201	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.237004042 CET	50201	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.237004042 CET	50201	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.241833925 CET	4378	50201	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.253997087 CET	4378	50200	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.254075050 CET	50200	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.254158020 CET	50200	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.256743908 CET	50202	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.259238005 CET	4378	50200	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.261693954 CET	4378	50202	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.261766911 CET	50202	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.262003899 CET	50202	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.267185926 CET	4378	50202	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.332732916 CET	50203	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.338063002 CET	4378	50203	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.338251114 CET	50203	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.343425989 CET	50203	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.348400116 CET	4378	50203	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.348423958 CET	50204	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.354818106 CET	4378	50204	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.354901075 CET	50204	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.355151892 CET	50204	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.359997988 CET	4378	50204	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.885973930 CET	4378	50202	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.886157990 CET	50202	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.886250973 CET	50202	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.891269922 CET	4378	50202	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.969875097 CET	4378	50203	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.969960928 CET	50203	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.970141888 CET	50203	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.972603083 CET	50205	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.975266933 CET	4378	50203	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.977636099 CET	4378	50205	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.977802038 CET	50205	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.978173018 CET	50205	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.980993986 CET	4378	50204	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.981116056 CET	50204	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.981364965 CET	50204	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.983510971 CET	50206	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.983555079 CET	4378	50205	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.986150980 CET	4378	50204	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.988856077 CET	4378	50206	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:30.989093065 CET	50206	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.990557909 CET	50206	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:30.995502949 CET	4378	50206	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.004744053 CET	50207	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.009612083 CET	4378	50207	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.009777069 CET	50207	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.010044098 CET	50207	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.015305042 CET	4378	50207	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.608381033 CET	4378	50205	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.608551025 CET	50205	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.608781099 CET	50205	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.613589048 CET	4378	50205	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.616075993 CET	4378	50206	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.616250992 CET	50206	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.616343021 CET	50206	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.621223927 CET	4378	50206	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.630719900 CET	4378	50207	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.630927086 CET	50207	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.630927086 CET	50207	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.635328054 CET	50208	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.635849953 CET	4378	50207	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.640758038 CET	4378	50208	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.640886068 CET	50208	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.641454935 CET	50208	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.646255016 CET	4378	50208	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.723526955 CET	50209	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.723709106 CET	50210	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.728427887 CET	4378	50209	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.728583097 CET	4378	50210	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.728583097 CET	50209	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.728671074 CET	50210	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.728869915 CET	50209	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.729043961 CET	50210	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:31.733823061 CET	4378	50209	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:31.734069109 CET	4378	50210	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.264532089 CET	4378	50208	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.264627934 CET	50208	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.264858007 CET	50208	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.269726992 CET	4378	50208	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.344407082 CET	4378	50210	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.344481945 CET	50210	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.344552994 CET	50210	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.347106934 CET	50211	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.349308014 CET	4378	50210	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.351977110 CET	4378	50211	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.352049112 CET	50211	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.352296114 CET	50211	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.357146978 CET	4378	50211	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.359138966 CET	4378	50209	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.359214067 CET	50209	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.359271049 CET	50209	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.363007069 CET	50212	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.364032984 CET	4378	50209	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.369107962 CET	4378	50212	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.369179964 CET	50212	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.369416952 CET	50212	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.375400066 CET	4378	50212	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.379443884 CET	50213	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.390963078 CET	4378	50213	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.391052008 CET	50213	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.391330957 CET	50213	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.401701927 CET	4378	50213	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.976391077 CET	4378	50211	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:32.976488113 CET	50211	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.976581097 CET	50211	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:32.981475115 CET	4378	50211	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.000927925 CET	4378	50212	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.001045942 CET	50212	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.001137972 CET	50212	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.006302118 CET	4378	50212	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.011949062 CET	4378	50213	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.012007952 CET	50213	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.012077093 CET	50213	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.014565945 CET	50214	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.017185926 CET	4378	50213	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.019639969 CET	4378	50214	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.019818068 CET	50214	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.020036936 CET	50214	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.025072098 CET	4378	50214	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.084155083 CET	50215	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.090807915 CET	4378	50215	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.090974092 CET	50215	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.095001936 CET	50215	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.100264072 CET	4378	50215	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.114007950 CET	50216	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.119556904 CET	4378	50216	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.119698048 CET	50216	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.119891882 CET	50216	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.124845028 CET	4378	50216	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.669842958 CET	4378	50214	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.670041084 CET	50214	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.670205116 CET	50214	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.675270081 CET	4378	50214	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.722121954 CET	4378	50215	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.722220898 CET	50215	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.722471952 CET	50215	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.727011919 CET	50217	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.727750063 CET	4378	50215	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.731906891 CET	4378	50217	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.732014894 CET	50217	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.732580900 CET	50217	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.737391949 CET	4378	50217	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.746953964 CET	4378	50216	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.747014999 CET	50216	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.747132063 CET	50216	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.749336958 CET	50218	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.752029896 CET	4378	50216	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.754976034 CET	4378	50218	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.755033970 CET	50218	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.755258083 CET	50218	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.761701107 CET	4378	50218	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.799858093 CET	50219	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.804764986 CET	4378	50219	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:33.804833889 CET	50219	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.806654930 CET	50219	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:33.811408043 CET	4378	50219	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.379291058 CET	4378	50218	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.379422903 CET	50218	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.379591942 CET	50218	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.384562969 CET	4378	50218	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.438117027 CET	4378	50219	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.438174009 CET	50219	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.438235998 CET	50219	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.440531015 CET	50220	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.443748951 CET	4378	50219	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.445291996 CET	4378	50220	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.445363998 CET	50220	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.445652008 CET	50220	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.451725960 CET	4378	50220	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.488907099 CET	50221	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.494055986 CET	4378	50221	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.494121075 CET	50221	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.494352102 CET	50221	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.499227047 CET	4378	50221	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.722129107 CET	4378	50217	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.722237110 CET	50217	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.722343922 CET	50217	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.727319002 CET	4378	50217	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.832737923 CET	50222	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.839359045 CET	4378	50222	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:34.839467049 CET	50222	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.839746952 CET	50222	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:34.844656944 CET	4378	50222	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.086011887 CET	4378	50220	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.086102009 CET	50220	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.086308002 CET	50220	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.091056108 CET	4378	50220	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.122651100 CET	4378	50221	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.122740030 CET	50221	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.122817993 CET	50221	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.125524044 CET	50223	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.127837896 CET	4378	50221	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.130541086 CET	4378	50223	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.130619049 CET	50223	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.130801916 CET	50223	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.135544062 CET	4378	50223	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.192257881 CET	50224	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.197309971 CET	4378	50224	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.197446108 CET	50224	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.198112011 CET	50224	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.202893972 CET	4378	50224	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.476265907 CET	4378	50222	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.476366997 CET	50222	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.476502895 CET	50222	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.479331970 CET	50225	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.481312990 CET	4378	50222	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.484241962 CET	4378	50225	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.484345913 CET	50225	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.484590054 CET	50225	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.489456892 CET	4378	50225	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.777977943 CET	4378	50223	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.778120995 CET	50223	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.778261900 CET	50223	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.783267975 CET	4378	50223	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.834230900 CET	4378	50224	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.834336996 CET	50224	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.834439039 CET	50224	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.839366913 CET	4378	50224	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.845314980 CET	50226	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.850275040 CET	4378	50226	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.850358963 CET	50226	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.850711107 CET	50226	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.855853081 CET	4378	50226	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.895261049 CET	50227	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.900124073 CET	4378	50227	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:35.900235891 CET	50227	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.900487900 CET	50227	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:35.906099081 CET	4378	50227	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.118324041 CET	4378	50225	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.118386030 CET	50225	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.118494034 CET	50225	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.124614000 CET	4378	50225	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.223650932 CET	50228	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.229451895 CET	4378	50228	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.229564905 CET	50228	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.229927063 CET	50228	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.234877110 CET	4378	50228	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.468297005 CET	4378	50226	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.468385935 CET	50226	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.468542099 CET	50226	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.473851919 CET	4378	50226	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.536670923 CET	4378	50227	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.536742926 CET	50227	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.536832094 CET	50227	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.539305925 CET	50229	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.542073965 CET	4378	50227	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.544157982 CET	4378	50229	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.544226885 CET	50229	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.544502974 CET	50229	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.549900055 CET	4378	50229	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.583372116 CET	50230	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.588675022 CET	4378	50230	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.588749886 CET	50230	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.589020014 CET	50230	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.594096899 CET	4378	50230	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.852025032 CET	4378	50228	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.852155924 CET	50228	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.852320910 CET	50228	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.857068062 CET	50231	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.857388973 CET	4378	50228	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.862128019 CET	4378	50231	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:36.862238884 CET	50231	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.862947941 CET	50231	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:36.867770910 CET	4378	50231	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.166886091 CET	4378	50229	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.167059898 CET	50229	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.167150021 CET	50229	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.172282934 CET	4378	50229	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.212868929 CET	4378	50230	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.213010073 CET	50230	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.213078976 CET	50230	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.216635942 CET	50232	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.217931986 CET	4378	50230	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.221707106 CET	4378	50232	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.221801996 CET	50232	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.224842072 CET	50232	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.229645014 CET	4378	50232	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.286386013 CET	50233	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.291279078 CET	4378	50233	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.291374922 CET	50233	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.291589975 CET	50233	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.296786070 CET	4378	50233	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.485820055 CET	4378	50231	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.486103058 CET	50231	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.486224890 CET	50231	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.490988970 CET	4378	50231	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.598309040 CET	50234	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.603123903 CET	4378	50234	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.603199959 CET	50234	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.603482008 CET	50234	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.608787060 CET	4378	50234	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.855129957 CET	4378	50232	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.855200052 CET	50232	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.855305910 CET	50232	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.860197067 CET	4378	50232	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.918797016 CET	4378	50233	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.918864965 CET	50233	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.918937922 CET	50233	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.921519995 CET	50235	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.924726009 CET	4378	50233	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.928237915 CET	4378	50235	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.928309917 CET	50235	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.928503036 CET	50235	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.933971882 CET	4378	50235	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.973423004 CET	50236	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.978497982 CET	4378	50236	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:37.978643894 CET	50236	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.978827953 CET	50236	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:37.986414909 CET	4378	50236	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.234849930 CET	4378	50234	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.235014915 CET	50234	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.235332966 CET	50234	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.238315105 CET	50237	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.240134001 CET	4378	50234	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.243217945 CET	4378	50237	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.243324041 CET	50237	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.243685961 CET	50237	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.248481989 CET	4378	50237	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.559041023 CET	4378	50235	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.559149981 CET	50235	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.559230089 CET	50235	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.564253092 CET	4378	50235	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.611605883 CET	4378	50236	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.611722946 CET	50236	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.611854076 CET	50236	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.614723921 CET	50238	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.616650105 CET	4378	50236	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.619776011 CET	4378	50238	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.619844913 CET	50238	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.620126009 CET	50238	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.624973059 CET	4378	50238	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.676620007 CET	50239	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.681756020 CET	4378	50239	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.681960106 CET	50239	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.682156086 CET	50239	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.687228918 CET	4378	50239	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.889703035 CET	4378	50237	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:38.889812946 CET	50237	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.889899015 CET	50237	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:38.895113945 CET	4378	50237	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.004744053 CET	50240	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.010402918 CET	4378	50240	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.010559082 CET	50240	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.010809898 CET	50240	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.016731024 CET	4378	50240	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.265106916 CET	4378	50238	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.265189886 CET	50238	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.265269041 CET	50238	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.270318031 CET	4378	50238	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.325309992 CET	4378	50239	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.325561047 CET	50239	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.325742006 CET	50239	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.328315973 CET	50241	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.330532074 CET	4378	50239	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.333374023 CET	4378	50241	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.333463907 CET	50241	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.333673954 CET	50241	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.338953018 CET	4378	50241	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.379595041 CET	50242	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.384592056 CET	4378	50242	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.384722948 CET	50242	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.384932995 CET	50242	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.389951944 CET	4378	50242	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.633076906 CET	4378	50240	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.633209944 CET	50240	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.633282900 CET	50240	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.635596037 CET	50243	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.638226032 CET	4378	50240	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.640464067 CET	4378	50243	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.640544891 CET	50243	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.641102076 CET	50243	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.645947933 CET	4378	50243	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.967026949 CET	4378	50241	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:39.967160940 CET	50241	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.967241049 CET	50241	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:39.972129107 CET	4378	50241	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.005660057 CET	4378	50242	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.005758047 CET	50242	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.005848885 CET	50242	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.008568048 CET	50244	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.010601044 CET	4378	50242	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.013902903 CET	4378	50244	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.013988018 CET	50244	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.014199018 CET	50244	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.019376040 CET	4378	50244	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.082803011 CET	50245	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.087641954 CET	4378	50245	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.087733030 CET	50245	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.088006020 CET	50245	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.092873096 CET	4378	50245	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.288552046 CET	4378	50243	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.288764954 CET	50243	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.288902998 CET	50243	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.293803930 CET	4378	50243	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.395287991 CET	50246	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.400192976 CET	4378	50246	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.400305986 CET	50246	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.400674105 CET	50246	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.405997992 CET	4378	50246	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.666526079 CET	4378	50244	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.666619062 CET	50244	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.666726112 CET	50244	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.674150944 CET	4378	50244	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.711045027 CET	4378	50245	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.711163998 CET	50245	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.711236954 CET	50245	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.714482069 CET	50247	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.716043949 CET	4378	50245	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.719286919 CET	4378	50247	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.719405890 CET	50247	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.719592094 CET	50247	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.724373102 CET	4378	50247	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.770370960 CET	50248	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.775507927 CET	4378	50248	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:40.775573015 CET	50248	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.775831938 CET	50248	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:40.780904055 CET	4378	50248	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.016552925 CET	4378	50246	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.016668081 CET	50246	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.016767025 CET	50246	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.019639969 CET	50249	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.021586895 CET	4378	50246	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.024523020 CET	4378	50249	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.024601936 CET	50249	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.025027037 CET	50249	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.030411005 CET	4378	50249	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.360780954 CET	4378	50247	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.360905886 CET	50247	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.360960960 CET	50247	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.366214991 CET	4378	50247	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.422508001 CET	4378	50248	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.422619104 CET	50248	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.422734976 CET	50248	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.425534010 CET	50250	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.427503109 CET	4378	50248	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.430385113 CET	4378	50250	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.430461884 CET	50250	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.430721045 CET	50250	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.436420918 CET	4378	50250	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.473721027 CET	50251	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.478559971 CET	4378	50251	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.478732109 CET	50251	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.478878975 CET	50251	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.483670950 CET	4378	50251	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.657835960 CET	4378	50249	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.657948017 CET	50249	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.658050060 CET	50249	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.663360119 CET	4378	50249	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.770522118 CET	50252	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.775377989 CET	4378	50252	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:41.775499105 CET	50252	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.775783062 CET	50252	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:41.781172991 CET	4378	50252	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.051995039 CET	4378	50250	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.052078009 CET	50250	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.052165985 CET	50250	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.057003021 CET	4378	50250	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.119775057 CET	4378	50251	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.119894981 CET	50251	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.120054960 CET	50251	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.122939110 CET	50253	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.124816895 CET	4378	50251	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.127747059 CET	4378	50253	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.127835989 CET	50253	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.128135920 CET	50253	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.133013964 CET	4378	50253	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.163126945 CET	50254	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.168222904 CET	4378	50254	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.168301105 CET	50254	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.168574095 CET	50254	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.430692911 CET	4378	50252	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.430756092 CET	50252	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.430850983 CET	50252	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.431148052 CET	4378	50254	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.433717966 CET	50255	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.439661026 CET	4378	50252	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.441936016 CET	4378	50255	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.442007065 CET	50255	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.442266941 CET	50255	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.448817015 CET	4378	50255	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.753547907 CET	4378	50253	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.753674984 CET	50253	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.761476040 CET	50253	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.766452074 CET	4378	50253	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.879906893 CET	50256	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.884886980 CET	4378	50256	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:42.885066032 CET	50256	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.885713100 CET	50256	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:42.890779972 CET	4378	50256	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.055399895 CET	4378	50254	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.055474043 CET	50254	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.055584908 CET	50254	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.058279991 CET	50257	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.060436010 CET	4378	50254	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.063486099 CET	4378	50257	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.063657045 CET	50257	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.064017057 CET	50257	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.069127083 CET	4378	50257	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.093456030 CET	4378	50255	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.093542099 CET	50255	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.094990969 CET	50255	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.099791050 CET	4378	50255	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.208143950 CET	50258	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.213270903 CET	4378	50258	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.213376045 CET	50258	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.213649035 CET	50258	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.218427896 CET	4378	50258	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.506107092 CET	4378	50256	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.506234884 CET	50256	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.506453991 CET	50256	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.511054993 CET	50259	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.511185884 CET	4378	50256	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.516191006 CET	4378	50259	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.516273975 CET	50259	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.516855955 CET	50259	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.521610975 CET	4378	50259	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.691514015 CET	4378	50257	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.691622972 CET	50257	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.691689968 CET	50257	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.696516991 CET	4378	50257	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.801472902 CET	50260	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.807596922 CET	4378	50260	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.807710886 CET	50260	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.808015108 CET	50260	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.813656092 CET	4378	50260	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.843293905 CET	4378	50258	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.843421936 CET	50258	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.843542099 CET	50258	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.846538067 CET	50261	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.848341942 CET	4378	50258	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.851342916 CET	4378	50261	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:43.851425886 CET	50261	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.851669073 CET	50261	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:43.856566906 CET	4378	50261	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.137579918 CET	4378	50259	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.137670040 CET	50259	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.137790918 CET	50259	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.142860889 CET	4378	50259	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.254755020 CET	50262	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.259710073 CET	4378	50262	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.259824991 CET	50262	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.260036945 CET	50262	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.264925957 CET	4378	50262	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.451817036 CET	4378	50260	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.451927900 CET	50260	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.452007055 CET	50260	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.454910994 CET	50263	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.457494974 CET	4378	50260	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.460117102 CET	4378	50263	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.460215092 CET	50263	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.460737944 CET	50263	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.465563059 CET	4378	50263	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.473833084 CET	4378	50261	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.473896980 CET	50261	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.473969936 CET	50261	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.479753017 CET	4378	50261	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.582762003 CET	50264	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.587616920 CET	4378	50264	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.587682962 CET	50264	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.587982893 CET	50264	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.592755079 CET	4378	50264	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.892237902 CET	4378	50262	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.892474890 CET	50262	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.892607927 CET	50262	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.895603895 CET	50265	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.897617102 CET	4378	50262	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.900495052 CET	4378	50265	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:44.900593042 CET	50265	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.900811911 CET	50265	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:44.905766964 CET	4378	50265	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.103020906 CET	4378	50263	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.103121042 CET	50263	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.103236914 CET	50263	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.108622074 CET	4378	50263	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.207844973 CET	50266	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.212670088 CET	4378	50266	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.212788105 CET	50266	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.213027000 CET	50266	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.218018055 CET	4378	50266	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.220500946 CET	4378	50264	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.220585108 CET	50264	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.220633030 CET	50264	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.223777056 CET	50267	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.225791931 CET	4378	50264	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.229150057 CET	4378	50267	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.229257107 CET	50267	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.242331028 CET	50267	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.247797012 CET	4378	50267	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.528810024 CET	4378	50265	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.528920889 CET	50265	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.529331923 CET	50265	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.534106016 CET	4378	50265	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.647825003 CET	50268	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.652836084 CET	4378	50268	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.652964115 CET	50268	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.654510975 CET	50268	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.659626007 CET	4378	50268	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.837059021 CET	4378	50266	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.837153912 CET	50266	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.837244987 CET	50266	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.840117931 CET	50269	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.842067957 CET	4378	50266	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.845005989 CET	4378	50269	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.845089912 CET	50269	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.845355988 CET	50269	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.850146055 CET	4378	50269	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.855151892 CET	4378	50267	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.855209112 CET	50267	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.855259895 CET	50267	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.860095024 CET	4378	50267	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.973529100 CET	50270	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.978995085 CET	4378	50270	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:45.979201078 CET	50270	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.980034113 CET	50270	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:45.985146999 CET	4378	50270	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.277734041 CET	4378	50268	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.277827024 CET	50268	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.277904987 CET	50268	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.280554056 CET	50271	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.284632921 CET	4378	50268	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.286919117 CET	4378	50271	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.287003040 CET	50271	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.287293911 CET	50271	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.293607950 CET	4378	50271	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.466742039 CET	4378	50269	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.466840029 CET	50269	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.467073917 CET	50269	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.472553968 CET	4378	50269	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.582890987 CET	50272	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.587824106 CET	4378	50272	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.587979078 CET	50272	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.593337059 CET	50272	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.598268986 CET	4378	50272	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.617130041 CET	4378	50270	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.617240906 CET	50270	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.617327929 CET	50270	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.620028019 CET	50273	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.622476101 CET	4378	50270	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.625013113 CET	4378	50273	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.625104904 CET	50273	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.625375032 CET	50273	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.630170107 CET	4378	50273	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.938261032 CET	4378	50271	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:46.938329935 CET	50271	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.938433886 CET	50271	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:46.943489075 CET	4378	50271	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.051688910 CET	50274	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.057271957 CET	4378	50274	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.057413101 CET	50274	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.057653904 CET	50274	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.063229084 CET	4378	50274	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.229737997 CET	4378	50272	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.229816914 CET	50272	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.229899883 CET	50272	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.232470036 CET	50275	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.234904051 CET	4378	50272	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.238163948 CET	4378	50275	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.238248110 CET	50275	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.238609076 CET	50275	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.245304108 CET	4378	50275	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.260274887 CET	4378	50273	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.260340929 CET	50273	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.260431051 CET	50273	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.265688896 CET	4378	50273	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.364151955 CET	50276	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.369581938 CET	4378	50276	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.369649887 CET	50276	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.369884014 CET	50276	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.376241922 CET	4378	50276	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.694964886 CET	4378	50274	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.695046902 CET	50274	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.695167065 CET	50274	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.698240042 CET	50277	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.700119019 CET	4378	50274	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.703048944 CET	4378	50277	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.703134060 CET	50277	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.703423977 CET	50277	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.708475113 CET	4378	50277	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.878072977 CET	4378	50275	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.878194094 CET	50275	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.878274918 CET	50275	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.883246899 CET	4378	50275	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.988969088 CET	50278	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.994718075 CET	4378	50278	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:47.994905949 CET	50278	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:47.995203972 CET	50278	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.000068903 CET	4378	50278	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.006577015 CET	4378	50276	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.006653070 CET	50276	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.006731033 CET	50276	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.009790897 CET	50279	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.011857986 CET	4378	50276	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.015906096 CET	4378	50279	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.015988111 CET	50279	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.016247988 CET	50279	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.021574020 CET	4378	50279	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.340378046 CET	4378	50277	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.340524912 CET	50277	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.340667963 CET	50277	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.345592022 CET	4378	50277	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.457954884 CET	50280	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.463109016 CET	4378	50280	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.463181973 CET	50280	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.463440895 CET	50280	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.468317986 CET	4378	50280	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.622013092 CET	4378	50278	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.622102976 CET	50278	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.622181892 CET	50278	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.624841928 CET	50281	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.626981020 CET	4378	50278	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.629805088 CET	4378	50281	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.629895926 CET	50281	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.630177975 CET	50281	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.635370016 CET	4378	50281	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.659507990 CET	4378	50279	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.659593105 CET	50279	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.659714937 CET	50279	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.664510965 CET	4378	50279	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.770937920 CET	50282	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.779911995 CET	4378	50282	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:48.780075073 CET	50282	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.780739069 CET	50282	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:48.785569906 CET	4378	50282	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.110234022 CET	4378	50280	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.110300064 CET	50280	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.110445023 CET	50280	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.114448071 CET	50283	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.116028070 CET	4378	50280	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.120148897 CET	4378	50283	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.120249033 CET	50283	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.120795012 CET	50283	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.125715971 CET	4378	50283	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.251198053 CET	4378	50281	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.251301050 CET	50281	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.251753092 CET	50281	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.256535053 CET	4378	50281	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.368279934 CET	50284	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.373215914 CET	4378	50284	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.373311043 CET	50284	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.373682976 CET	50284	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.378503084 CET	4378	50284	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.416847944 CET	4378	50282	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.416922092 CET	50282	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.417005062 CET	50282	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.419960022 CET	50285	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.421977043 CET	4378	50282	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.426429033 CET	4378	50285	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.426502943 CET	50285	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.426729918 CET	50285	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.433523893 CET	4378	50285	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.748013973 CET	4378	50283	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.748127937 CET	50283	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.748302937 CET	50283	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.753293991 CET	4378	50283	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.864084959 CET	50286	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.869585991 CET	4378	50286	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.869668961 CET	50286	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.870420933 CET	50286	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.876771927 CET	4378	50286	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.994807005 CET	4378	50284	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:49.994895935 CET	50284	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.995076895 CET	50284	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.998282909 CET	50287	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:49.999932051 CET	4378	50284	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.003411055 CET	4378	50287	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.003493071 CET	50287	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.003735065 CET	50287	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.008634090 CET	4378	50287	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.049479008 CET	4378	50285	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.049565077 CET	50285	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.049649000 CET	50285	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.054635048 CET	4378	50285	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.160926104 CET	50288	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.165955067 CET	4378	50288	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.166049957 CET	50288	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.166501999 CET	50288	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.171323061 CET	4378	50288	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.499042988 CET	4378	50286	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.499157906 CET	50286	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.499245882 CET	50286	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.502314091 CET	50289	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.504278898 CET	4378	50286	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.507802010 CET	4378	50289	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.507874966 CET	50289	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.508096933 CET	50289	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.512903929 CET	4378	50289	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.626986027 CET	4378	50287	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.627084017 CET	50287	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.627167940 CET	50287	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.632184029 CET	4378	50287	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.739084005 CET	50290	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.743972063 CET	4378	50290	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.744049072 CET	50290	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.744302988 CET	50290	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.749424934 CET	4378	50290	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.789158106 CET	4378	50288	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.789237022 CET	50288	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.789309025 CET	50288	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.792432070 CET	50291	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.794112921 CET	4378	50288	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.797902107 CET	4378	50291	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:50.797966003 CET	50291	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.798294067 CET	50291	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:50.803128004 CET	4378	50291	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.128092051 CET	4378	50289	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.128350973 CET	50289	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.128452063 CET	50289	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.133263111 CET	4378	50289	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.239444971 CET	50292	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.244390011 CET	4378	50292	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.244486094 CET	50292	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.244772911 CET	50292	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.249967098 CET	4378	50292	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.376014948 CET	4378	50290	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.376081944 CET	50290	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.376158953 CET	50290	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.378700972 CET	50293	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.381288052 CET	4378	50290	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.383789062 CET	4378	50293	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.383934021 CET	50293	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.384145021 CET	50293	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.389594078 CET	4378	50293	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.453484058 CET	4378	50291	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.453605890 CET	50291	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.453706026 CET	50291	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.458857059 CET	4378	50291	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.567342043 CET	50294	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.572578907 CET	4378	50294	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.572683096 CET	50294	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.573004961 CET	50294	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.578047991 CET	4378	50294	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.866293907 CET	4378	50292	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.866385937 CET	50292	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.866456032 CET	50292	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.869072914 CET	50295	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.871329069 CET	4378	50292	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.874638081 CET	4378	50295	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:51.874716997 CET	50295	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.874897003 CET	50295	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:51.879728079 CET	4378	50295	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.013118029 CET	4378	50293	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.013221979 CET	50293	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.013339996 CET	50293	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.018543959 CET	4378	50293	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.230292082 CET	4378	50294	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.230381966 CET	50294	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.281827927 CET	50294	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.287120104 CET	4378	50294	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.309046984 CET	50297	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.309097052 CET	50296	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.314053059 CET	4378	50297	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.314112902 CET	4378	50296	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.314112902 CET	50297	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.314151049 CET	50296	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.318850040 CET	50297	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.319061995 CET	50296	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.323664904 CET	4378	50297	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.323898077 CET	4378	50296	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.510320902 CET	4378	50295	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.510396004 CET	50295	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.510485888 CET	50295	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.517630100 CET	4378	50295	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.614259958 CET	50298	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.620193005 CET	4378	50298	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.620266914 CET	50298	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.620526075 CET	50298	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.627804041 CET	4378	50298	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.938353062 CET	4378	50296	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.938467026 CET	50296	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.938545942 CET	50296	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.941730976 CET	50299	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.942538977 CET	4378	50297	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.942600965 CET	50297	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.942637920 CET	50297	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.943386078 CET	4378	50296	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.946721077 CET	4378	50299	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.946798086 CET	50299	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.947036028 CET	50299	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:52.947551012 CET	4378	50297	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:52.952125072 CET	4378	50299	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.051527977 CET	50300	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.058659077 CET	4378	50300	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.058758974 CET	50300	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.058945894 CET	50300	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.063999891 CET	4378	50300	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.246062994 CET	4378	50298	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.246140003 CET	50298	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.246262074 CET	50298	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.249418974 CET	50301	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.251063108 CET	4378	50298	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.254415989 CET	4378	50301	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.254492044 CET	50301	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.254683971 CET	50301	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.260323048 CET	4378	50301	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.564410925 CET	4378	50299	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.564523935 CET	50299	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.564614058 CET	50299	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.569536924 CET	4378	50299	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.676575899 CET	50302	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.681452990 CET	4378	50302	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.681560040 CET	50302	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.681830883 CET	50302	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.687025070 CET	4378	50302	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.695041895 CET	4378	50300	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.695178032 CET	50300	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.695178032 CET	50300	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.698065042 CET	50303	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.700328112 CET	4378	50300	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.702903986 CET	4378	50303	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:53.702986002 CET	50303	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.703231096 CET	50303	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:53.708340883 CET	4378	50303	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.002310038 CET	4378	50301	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.002448082 CET	50301	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.002659082 CET	50301	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.013623953 CET	4378	50301	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.114367008 CET	50304	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.119344950 CET	4378	50304	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.119478941 CET	50304	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.119807005 CET	50304	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.124762058 CET	4378	50304	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.303462029 CET	4378	50302	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.303594112 CET	50302	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.303680897 CET	50302	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.306785107 CET	50305	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.308739901 CET	4378	50302	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.311918974 CET	4378	50305	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.312037945 CET	50305	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.312309027 CET	50305	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.317936897 CET	4378	50305	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.346540928 CET	4378	50303	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.346671104 CET	50303	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.346765995 CET	50303	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.352016926 CET	4378	50303	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.457859039 CET	50306	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.462745905 CET	4378	50306	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.462904930 CET	50306	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.463187933 CET	50306	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.468414068 CET	4378	50306	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.749385118 CET	4378	50304	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.749447107 CET	50304	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.749566078 CET	50304	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.754509926 CET	4378	50304	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.805161953 CET	50307	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.810215950 CET	4378	50307	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.810357094 CET	50307	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.810513973 CET	50307	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.816078901 CET	4378	50307	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.941651106 CET	4378	50305	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:54.941781998 CET	50305	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.944510937 CET	50305	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:54.949307919 CET	4378	50305	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.091439962 CET	50308	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.096286058 CET	4378	50308	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.096398115 CET	50308	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.096780062 CET	50308	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.101903915 CET	4378	50308	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.113564014 CET	4378	50306	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.113620043 CET	50306	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.113681078 CET	50306	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.116137981 CET	50309	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.118678093 CET	4378	50306	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.120929003 CET	4378	50309	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.120986938 CET	50309	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.121278048 CET	50309	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.126172066 CET	4378	50309	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.461158037 CET	4378	50307	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.461318016 CET	50307	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.461477995 CET	50307	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.466636896 CET	4378	50307	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.567225933 CET	50310	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.572463036 CET	4378	50310	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.572566032 CET	50310	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.572774887 CET	50310	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.577850103 CET	4378	50310	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.722723961 CET	4378	50308	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.722795010 CET	50308	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.722922087 CET	50308	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.725739956 CET	50311	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.727653980 CET	4378	50308	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.730628967 CET	4378	50311	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.730704069 CET	50311	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.730988026 CET	50311	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.736246109 CET	4378	50311	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.748999119 CET	4378	50309	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.749087095 CET	50309	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.749141932 CET	50309	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.753942966 CET	4378	50309	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.864115000 CET	50312	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.869287968 CET	4378	50312	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:55.869398117 CET	50312	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.869640112 CET	50312	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:55.875032902 CET	4378	50312	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.233169079 CET	4378	50310	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.233221054 CET	50310	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.233309984 CET	50310	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.235539913 CET	50313	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.238419056 CET	4378	50310	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.240454912 CET	4378	50313	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.240516901 CET	50313	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.240786076 CET	50313	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.245762110 CET	4378	50313	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.370189905 CET	4378	50311	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.370316982 CET	50311	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.371675968 CET	50311	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.376538992 CET	4378	50311	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.489339113 CET	50314	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.492055893 CET	4378	50312	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.492130041 CET	50312	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.492248058 CET	50312	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.494332075 CET	4378	50314	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.494395018 CET	50314	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.494683027 CET	50314	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.495270014 CET	50315	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.497220039 CET	4378	50312	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.499717951 CET	4378	50314	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.500262976 CET	4378	50315	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.500330925 CET	50315	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.500700951 CET	50315	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.505844116 CET	4378	50315	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.855904102 CET	4378	50313	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.855976105 CET	50313	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.856059074 CET	50313	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.860975981 CET	4378	50313	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.973516941 CET	50316	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.978364944 CET	4378	50316	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:56.978504896 CET	50316	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.978715897 CET	50316	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:56.983594894 CET	4378	50316	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.111987114 CET	4378	50314	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.112129927 CET	50314	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.112253904 CET	50314	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.115447044 CET	50317	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.117072105 CET	4378	50314	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.120342016 CET	4378	50317	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.120446920 CET	50317	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.120759010 CET	50317	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.123413086 CET	4378	50315	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.123492002 CET	50315	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.123538971 CET	50315	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.125731945 CET	4378	50317	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.128387928 CET	4378	50315	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.239097118 CET	50318	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.244260073 CET	4378	50318	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.244357109 CET	50318	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.244590998 CET	50318	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.250267982 CET	4378	50318	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.602479935 CET	4378	50316	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.602555990 CET	50316	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.602650881 CET	50316	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.607846022 CET	4378	50316	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.621808052 CET	50319	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.626760960 CET	4378	50319	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.626868010 CET	50319	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.631844044 CET	50319	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.637687922 CET	4378	50319	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.753129005 CET	4378	50317	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.753242016 CET	50317	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.753350019 CET	50317	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.759999037 CET	4378	50317	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.864803076 CET	50320	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.869656086 CET	4378	50320	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.869846106 CET	50320	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.870357037 CET	50320	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.875149012 CET	4378	50318	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.875283003 CET	50318	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.875441074 CET	50318	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.876656055 CET	4378	50320	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.878700018 CET	50321	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.880300045 CET	4378	50318	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.884018898 CET	4378	50321	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:57.884092093 CET	50321	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.884341002 CET	50321	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:57.889456034 CET	4378	50321	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.260082960 CET	4378	50319	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.260180950 CET	50319	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.260268927 CET	50319	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.265364885 CET	4378	50319	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.364659071 CET	50322	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.369647026 CET	4378	50322	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.369765997 CET	50322	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.370364904 CET	50322	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.375332117 CET	4378	50322	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.494528055 CET	4378	50320	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.494643927 CET	50320	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.494729042 CET	50320	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.497891903 CET	50323	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.500166893 CET	4378	50320	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.503125906 CET	4378	50323	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.503206968 CET	50323	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.503510952 CET	50323	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.507926941 CET	4378	50321	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.508006096 CET	50321	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.508080959 CET	50321	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.509583950 CET	4378	50323	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.514738083 CET	4378	50321	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.614923000 CET	50324	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.619946957 CET	4378	50324	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.620049953 CET	50324	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.624252081 CET	50324	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.629579067 CET	4378	50324	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.993769884 CET	4378	50322	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:58.993912935 CET	50322	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.994056940 CET	50322	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.998673916 CET	50325	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:58.999064922 CET	4378	50322	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.003855944 CET	4378	50325	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.003961086 CET	50325	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.004163027 CET	50325	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.009217024 CET	4378	50325	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.119674921 CET	4378	50323	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.119833946 CET	50323	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.122009039 CET	50323	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.127269030 CET	4378	50323	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.239669085 CET	50326	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.245004892 CET	4378	50326	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.245146036 CET	50326	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.245704889 CET	50326	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.249207973 CET	4378	50324	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.249294996 CET	50324	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.249383926 CET	50324	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.250720978 CET	4378	50326	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.253108978 CET	50327	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.254364967 CET	4378	50324	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.258065939 CET	4378	50327	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.258152008 CET	50327	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.258433104 CET	50327	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.263329983 CET	4378	50327	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.626440048 CET	4378	50325	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.626549006 CET	50325	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.626631975 CET	50325	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.632287979 CET	4378	50325	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.739094973 CET	50328	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.743937969 CET	4378	50328	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.744055033 CET	50328	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.744330883 CET	50328	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.749413967 CET	4378	50328	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.866458893 CET	4378	50326	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.866556883 CET	50326	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.866647959 CET	50326	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.869587898 CET	50329	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.871470928 CET	4378	50326	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.874440908 CET	4378	50329	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.874540091 CET	50329	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.874775887 CET	50329	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.880111933 CET	4378	50329	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.883126974 CET	4378	50327	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.883219957 CET	50327	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.883289099 CET	50327	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:34:59.889508963 CET	4378	50327	79.124.58.130	192.168.2.9
Nov 4, 2024 16:34:59.997070074 CET	50330	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.002134085 CET	4378	50330	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.002384901 CET	50330	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.003556967 CET	50330	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.008518934 CET	4378	50330	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.624073982 CET	4378	50328	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.624139071 CET	50328	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.624278069 CET	50328	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.626559973 CET	50331	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.627067089 CET	4378	50329	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.627118111 CET	50329	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.627163887 CET	50329	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.627204895 CET	4378	50328	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.627290964 CET	50328	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.630269051 CET	4378	50328	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.631808043 CET	4378	50331	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.631884098 CET	50331	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.632081985 CET	50331	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.632153034 CET	4378	50329	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.632441044 CET	4378	50330	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.632556915 CET	50330	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.632556915 CET	50330	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.634512901 CET	50332	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.636960030 CET	4378	50331	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.637588978 CET	4378	50330	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.639372110 CET	4378	50332	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.639445066 CET	50332	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.639626026 CET	50332	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.644623995 CET	4378	50332	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.739619970 CET	50333	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.744601965 CET	4378	50333	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:00.744775057 CET	50333	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.745606899 CET	50333	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:00.750854015 CET	4378	50333	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.249429941 CET	4378	50331	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.249627113 CET	50331	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.249855042 CET	50331	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.254720926 CET	4378	50331	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.269588947 CET	4378	50332	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.269932032 CET	50332	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.270364046 CET	50332	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.275394917 CET	4378	50332	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.364689112 CET	50334	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.369689941 CET	4378	50334	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.369821072 CET	50334	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.370451927 CET	50334	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.375624895 CET	4378	50334	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.379451036 CET	4378	50333	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.379543066 CET	50333	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.379709005 CET	50333	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.380511045 CET	50335	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.384005070 CET	50336	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.384588957 CET	4378	50333	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.385381937 CET	4378	50335	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.385493994 CET	50335	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.386081934 CET	50335	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.389008045 CET	4378	50336	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.389132977 CET	50336	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.389333010 CET	50336	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.390976906 CET	4378	50335	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.394181013 CET	4378	50336	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.996268988 CET	4378	50334	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:01.996427059 CET	50334	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:01.996624947 CET	50334	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.001060963 CET	50337	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.001545906 CET	4378	50334	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.006177902 CET	4378	50337	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.006278038 CET	50337	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.006824017 CET	50337	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.008146048 CET	4378	50335	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.008215904 CET	50335	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.008281946 CET	50335	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.010654926 CET	4378	50336	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.010718107 CET	50336	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.010838985 CET	50336	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.010986090 CET	50338	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.011612892 CET	4378	50337	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.013313055 CET	4378	50335	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.015708923 CET	4378	50336	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.015904903 CET	4378	50338	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.015971899 CET	50338	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.016201973 CET	50338	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.021364927 CET	4378	50338	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.129769087 CET	50339	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.134800911 CET	4378	50339	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.134908915 CET	50339	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.135648966 CET	50339	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.140506983 CET	4378	50339	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.627777100 CET	4378	50337	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.627893925 CET	50337	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.632713079 CET	4378	50338	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.632807016 CET	50338	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.643754005 CET	50337	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.644093990 CET	50338	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.649127007 CET	4378	50337	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.649152994 CET	4378	50338	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.762357950 CET	4378	50339	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.762491941 CET	50339	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.764935017 CET	50339	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.771043062 CET	4378	50339	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.780555964 CET	50340	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.780750990 CET	50341	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.784960032 CET	50342	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.785609961 CET	4378	50340	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.785759926 CET	50340	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.786000967 CET	4378	50341	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.786052942 CET	50341	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.788908005 CET	50341	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.789850950 CET	4378	50342	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.789918900 CET	50342	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.792601109 CET	50340	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.793878078 CET	4378	50341	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.796371937 CET	50342	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:02.797408104 CET	4378	50340	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:02.801862955 CET	4378	50342	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.413837910 CET	4378	50340	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.413944006 CET	50340	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.413984060 CET	4378	50341	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.414045095 CET	50341	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.414119005 CET	50341	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.414129019 CET	50340	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.417397022 CET	50343	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.417475939 CET	50344	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.418940067 CET	4378	50341	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.418958902 CET	4378	50340	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.422451019 CET	4378	50343	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.422470093 CET	4378	50344	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.422523975 CET	50343	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.422544003 CET	50344	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.422748089 CET	50343	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.422848940 CET	50344	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.427807093 CET	4378	50343	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.427825928 CET	4378	50344	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.430094957 CET	4378	50342	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.430162907 CET	50342	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.430227995 CET	50342	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.435197115 CET	4378	50342	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.535855055 CET	50345	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.540857077 CET	4378	50345	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:03.540931940 CET	50345	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.541141987 CET	50345	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:03.546116114 CET	4378	50345	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.035990000 CET	4378	50343	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.036078930 CET	50343	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.036196947 CET	50343	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.041127920 CET	4378	50343	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.052922010 CET	4378	50344	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.053064108 CET	50344	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.053555965 CET	50344	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.058598042 CET	4378	50344	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.145802021 CET	50346	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.150780916 CET	4378	50346	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.150926113 CET	50346	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.151073933 CET	50346	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.156366110 CET	4378	50346	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.161030054 CET	50347	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.165961027 CET	4378	50347	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.166035891 CET	50347	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.166299105 CET	50347	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.172955990 CET	4378	50347	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.174120903 CET	4378	50345	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:04.174196005 CET	50345	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.174268007 CET	50345	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.177071095 CET	50348	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:04.179352999 CET	4378	50345	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.176043034 CET	50348	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.245677948 CET	4378	50346	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.245698929 CET	4378	50347	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.245748043 CET	50346	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.245753050 CET	50347	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.245851040 CET	50346	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.245883942 CET	4378	50346	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.245894909 CET	4378	50347	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.245937109 CET	50346	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.245943069 CET	50347	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.245954990 CET	4378	50346	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.245965004 CET	4378	50347	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.245975971 CET	4378	50348	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.245996952 CET	50346	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.246001959 CET	50347	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.246005058 CET	4378	50348	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.246043921 CET	50348	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.246057987 CET	50348	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.246241093 CET	50347	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.246618032 CET	50348	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.249435902 CET	50350	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.249469042 CET	50349	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.254961967 CET	4378	50346	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.254987001 CET	4378	50347	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.254997015 CET	4378	50348	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.257035971 CET	4378	50350	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.257076025 CET	4378	50349	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.257107973 CET	50350	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.257132053 CET	50349	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.257406950 CET	50350	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.257611990 CET	50349	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.262713909 CET	4378	50350	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.262725115 CET	4378	50349	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.873495102 CET	4378	50350	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.873562098 CET	50350	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.873640060 CET	50350	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.874866009 CET	4378	50348	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.874927998 CET	50348	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.875015020 CET	50348	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.878843069 CET	4378	50350	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.879478931 CET	4378	50349	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.879534006 CET	50349	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.879576921 CET	50349	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.879791021 CET	4378	50348	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.884526968 CET	4378	50349	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.989345074 CET	50351	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.989345074 CET	50352	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.989423037 CET	50353	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.994297028 CET	4378	50351	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.994316101 CET	4378	50352	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.994328976 CET	4378	50353	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.994410038 CET	50352	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.994410038 CET	50351	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.994441986 CET	50353	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.994803905 CET	50352	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.994803905 CET	50351	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.994829893 CET	50353	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:05.999644041 CET	4378	50352	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.999739885 CET	4378	50351	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:05.999752998 CET	4378	50353	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.608511925 CET	4378	50352	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.608628988 CET	50352	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.608706951 CET	50352	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.611346960 CET	50354	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.613625050 CET	4378	50352	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.616170883 CET	4378	50354	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.616234064 CET	50354	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.616693974 CET	50354	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.617651939 CET	4378	50353	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.617702007 CET	50353	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.617762089 CET	50353	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.619792938 CET	50355	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.621854067 CET	4378	50354	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.622528076 CET	4378	50353	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.624053955 CET	4378	50351	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.624119997 CET	50351	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.624156952 CET	50351	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.624721050 CET	4378	50355	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.624787092 CET	50355	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.625013113 CET	50355	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.626288891 CET	50356	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.629189014 CET	4378	50351	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.629734993 CET	4378	50355	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.631233931 CET	4378	50356	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:06.631323099 CET	50356	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.631510019 CET	50356	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:06.636938095 CET	4378	50356	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.231381893 CET	4378	50354	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.231539011 CET	50354	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.231719971 CET	50354	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.236550093 CET	4378	50354	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.253082037 CET	4378	50355	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.253245115 CET	50355	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.253484011 CET	50355	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.258258104 CET	4378	50355	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.271570921 CET	4378	50356	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.271699905 CET	50356	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.271965027 CET	50356	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.276812077 CET	4378	50356	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.348867893 CET	50357	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.355000973 CET	4378	50357	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.355159998 CET	50357	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.355891943 CET	50357	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.360693932 CET	4378	50357	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.364520073 CET	50358	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.370213985 CET	4378	50358	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.370336056 CET	50358	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.370814085 CET	50358	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.375603914 CET	4378	50358	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.380273104 CET	50359	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.385260105 CET	4378	50359	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.385410070 CET	50359	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.385730028 CET	50359	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.390628099 CET	4378	50359	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.978833914 CET	4378	50357	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:07.978936911 CET	50357	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.980618954 CET	50357	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:07.985605001 CET	4378	50357	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.019498110 CET	4378	50358	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.019644976 CET	50358	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.019766092 CET	4378	50359	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.019825935 CET	50359	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.046386003 CET	50358	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.046725035 CET	50359	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.049853086 CET	50360	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.050918102 CET	50362	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.050951958 CET	50361	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.051255941 CET	4378	50358	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.051528931 CET	4378	50359	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.054794073 CET	4378	50360	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.054874897 CET	50360	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.055783987 CET	4378	50362	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.055794954 CET	4378	50361	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.055835009 CET	50362	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.055862904 CET	50361	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.056049109 CET	50360	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.056243896 CET	50362	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.056408882 CET	50361	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.060952902 CET	4378	50360	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.061064005 CET	4378	50362	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.061096907 CET	4378	50361	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.671401978 CET	4378	50361	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.671623945 CET	50361	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.671727896 CET	50361	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.676744938 CET	4378	50361	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.681715965 CET	4378	50360	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.681807995 CET	50360	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.681895971 CET	50360	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.686791897 CET	4378	50360	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.698020935 CET	4378	50362	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.698096037 CET	50362	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.698184013 CET	50362	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.703145027 CET	4378	50362	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.786112070 CET	50363	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.786715984 CET	50364	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.791208982 CET	4378	50363	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.791318893 CET	50363	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.791546106 CET	4378	50364	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.791606903 CET	50364	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.791907072 CET	50364	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.791961908 CET	50363	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.796720982 CET	4378	50364	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.796930075 CET	4378	50363	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.801700115 CET	50365	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.806581020 CET	4378	50365	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:08.806658030 CET	50365	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.806962967 CET	50365	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:08.811743975 CET	4378	50365	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.419538021 CET	4378	50363	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.419609070 CET	50363	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.419670105 CET	50363	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.421940088 CET	4378	50364	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.422003031 CET	50364	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.422055006 CET	50364	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.422317982 CET	50366	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.424312115 CET	50367	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.424557924 CET	4378	50363	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.426975965 CET	4378	50364	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.427192926 CET	4378	50366	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.427267075 CET	50366	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.427495956 CET	50366	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.429359913 CET	4378	50367	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.429455996 CET	50367	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.429766893 CET	50367	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.432538986 CET	4378	50366	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.434598923 CET	4378	50367	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.454215050 CET	4378	50365	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.454313040 CET	50365	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.454374075 CET	50365	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.457664013 CET	50368	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.459366083 CET	4378	50365	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.462785006 CET	4378	50368	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:09.462922096 CET	50368	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.463118076 CET	50368	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:09.468180895 CET	4378	50368	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.053755999 CET	4378	50366	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.053927898 CET	50366	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.054018021 CET	50366	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.054527998 CET	4378	50367	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.054620981 CET	50367	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.054666996 CET	50367	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.058846951 CET	4378	50366	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.059392929 CET	4378	50367	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.114445925 CET	4378	50368	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.114514112 CET	50368	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.114619970 CET	50368	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.119409084 CET	4378	50368	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.161067963 CET	50369	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.161144018 CET	50370	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.165981054 CET	4378	50369	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.166049004 CET	4378	50370	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.166079998 CET	50369	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.166110992 CET	50370	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.166311979 CET	50369	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.166392088 CET	50370	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.171087027 CET	4378	50369	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.171117067 CET	4378	50370	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.223555088 CET	50371	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.228585958 CET	4378	50371	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.228702068 CET	50371	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.228970051 CET	50371	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.234360933 CET	4378	50371	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.800373077 CET	4378	50369	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.800592899 CET	50369	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.800822020 CET	50369	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.805627108 CET	50372	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.809146881 CET	4378	50369	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.812073946 CET	4378	50372	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.812203884 CET	50372	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.812753916 CET	50372	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.818147898 CET	4378	50372	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.849551916 CET	4378	50370	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.849698067 CET	50370	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.849919081 CET	50370	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.854796886 CET	50373	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.854883909 CET	4378	50370	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.857806921 CET	4378	50371	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.857881069 CET	50371	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.857992887 CET	50371	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.859821081 CET	4378	50373	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.859924078 CET	50373	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.860465050 CET	50373	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.861193895 CET	50374	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.863425016 CET	4378	50371	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.865374088 CET	4378	50373	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.879477024 CET	4378	50374	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:10.879570007 CET	50374	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.879986048 CET	50374	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:10.885056973 CET	4378	50374	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.464229107 CET	4378	50372	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.464363098 CET	50372	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.464423895 CET	50372	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.471884012 CET	4378	50372	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.485073090 CET	4378	50373	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.485178947 CET	50373	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.485287905 CET	50373	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.490103960 CET	4378	50373	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.512665033 CET	4378	50374	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.512794018 CET	50374	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.512890100 CET	50374	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.517791033 CET	4378	50374	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.582900047 CET	50375	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.589972019 CET	4378	50375	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.590092897 CET	50375	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.590306997 CET	50375	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.595156908 CET	4378	50375	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.598203897 CET	50376	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.603477955 CET	4378	50376	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.603677988 CET	50376	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.603756905 CET	50376	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.608764887 CET	4378	50376	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.629589081 CET	50377	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.634900093 CET	4378	50377	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:11.634979010 CET	50377	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.635216951 CET	50377	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:11.640743971 CET	4378	50377	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.273974895 CET	4378	50375	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.274039984 CET	50375	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.274132013 CET	50375	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.276571035 CET	50378	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.279062033 CET	4378	50375	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.281567097 CET	4378	50378	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.281653881 CET	50378	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.282063007 CET	50378	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.285990000 CET	4378	50376	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.286045074 CET	50376	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.286134005 CET	50376	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.286976099 CET	4378	50378	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.288573980 CET	50379	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.290421009 CET	4378	50377	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.290487051 CET	50377	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.290549040 CET	50377	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.290997982 CET	4378	50376	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.293086052 CET	50380	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.293744087 CET	4378	50379	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.293801069 CET	50379	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.294017076 CET	50379	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.295675039 CET	4378	50377	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.298253059 CET	4378	50380	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.298600912 CET	50380	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.298600912 CET	50380	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.299501896 CET	4378	50379	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.303567886 CET	4378	50380	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.920480967 CET	4378	50379	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.920710087 CET	50379	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.920808077 CET	50379	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.921845913 CET	4378	50378	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.921915054 CET	50378	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.921974897 CET	50378	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.926716089 CET	4378	50379	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.927448034 CET	4378	50378	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.927464962 CET	4378	50380	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:12.927541018 CET	50380	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.927623034 CET	50380	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:12.933042049 CET	4378	50380	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.036102057 CET	50381	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.036539078 CET	50382	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.036797047 CET	50383	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.041496038 CET	4378	50381	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.041601896 CET	50381	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.041645050 CET	4378	50382	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.041913986 CET	50382	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.041937113 CET	4378	50383	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.042045116 CET	50383	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.042121887 CET	50381	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.042794943 CET	50382	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.042922020 CET	50383	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.047566891 CET	4378	50381	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.047991991 CET	4378	50382	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.048002958 CET	4378	50383	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.678700924 CET	4378	50383	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.678802967 CET	50383	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.678900957 CET	50383	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.681545019 CET	50384	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.684820890 CET	4378	50383	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.686824083 CET	4378	50384	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.686901093 CET	50384	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.687203884 CET	50384	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.690730095 CET	4378	50381	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.690857887 CET	50381	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.690913916 CET	50381	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.690995932 CET	4378	50382	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.691093922 CET	50382	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.691167116 CET	50382	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.693325996 CET	4378	50384	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.694927931 CET	50385	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.695166111 CET	50386	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.695856094 CET	4378	50381	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.696008921 CET	4378	50382	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.704745054 CET	4378	50385	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.704777002 CET	4378	50386	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.704848051 CET	50385	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.704864979 CET	50386	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.705080986 CET	50385	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.705144882 CET	50386	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:13.717756987 CET	4378	50385	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:13.717793941 CET	4378	50386	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.368865967 CET	4378	50384	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.368994951 CET	50384	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.369083881 CET	50384	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.373979092 CET	4378	50384	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.376418114 CET	4378	50385	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.376503944 CET	50385	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.376584053 CET	50385	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.381536007 CET	4378	50385	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.382590055 CET	4378	50386	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.382652044 CET	50386	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.382725000 CET	50386	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.388539076 CET	4378	50386	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.473678112 CET	50387	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.478692055 CET	4378	50387	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.478790045 CET	50387	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.479053974 CET	50387	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.484148026 CET	4378	50387	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.489170074 CET	50388	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.489312887 CET	50389	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.494091034 CET	4378	50388	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.494169950 CET	50388	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.494184017 CET	4378	50389	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.494256020 CET	50389	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.494374037 CET	50388	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.494530916 CET	50389	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:14.499613047 CET	4378	50388	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:14.499742031 CET	4378	50389	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.121501923 CET	4378	50387	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.121584892 CET	50387	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.121637106 CET	50387	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.124303102 CET	50390	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.126923084 CET	4378	50387	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.129210949 CET	4378	50390	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.129298925 CET	50390	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.129535913 CET	50390	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.130202055 CET	4378	50388	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.130245924 CET	50388	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.130304098 CET	50388	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.132671118 CET	50391	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.134516001 CET	4378	50390	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.135184050 CET	4378	50388	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.137546062 CET	4378	50391	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.137670994 CET	50391	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.137846947 CET	50391	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.142080069 CET	4378	50389	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.142163038 CET	50389	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.142196894 CET	50389	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.142893076 CET	4378	50391	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.144622087 CET	50392	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.147636890 CET	4378	50389	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.149912119 CET	4378	50392	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.150015116 CET	50392	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.150254011 CET	50392	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.155114889 CET	4378	50392	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.744718075 CET	4378	50390	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.744811058 CET	50390	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.744875908 CET	50390	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.749700069 CET	4378	50390	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.761897087 CET	4378	50391	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.761996031 CET	50391	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.762110949 CET	50391	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.767417908 CET	4378	50391	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.787220955 CET	4378	50392	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.787352085 CET	50392	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.787529945 CET	50392	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.794028044 CET	4378	50392	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.848553896 CET	50393	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.856883049 CET	4378	50393	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.857024908 CET	50393	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.857428074 CET	50393	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.862390041 CET	4378	50393	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.879851103 CET	50394	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.884872913 CET	4378	50394	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.884987116 CET	50394	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.885324001 CET	50394	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.890630960 CET	4378	50394	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.895603895 CET	50395	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.900687933 CET	4378	50395	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:15.900934935 CET	50395	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.901421070 CET	50395	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:15.907064915 CET	4378	50395	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191720963 CET	4378	50393	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191751003 CET	4378	50394	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191762924 CET	4378	50395	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191798925 CET	4378	50393	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191813946 CET	4378	50394	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191826105 CET	4378	50395	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191945076 CET	4378	50393	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191956043 CET	4378	50394	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191966057 CET	4378	50395	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.191967010 CET	50394	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.191994905 CET	50393	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.191994905 CET	50393	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.191996098 CET	50395	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.191996098 CET	50393	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.192013979 CET	50394	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.192042112 CET	50393	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.192042112 CET	50395	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.192348957 CET	50394	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.192590952 CET	50395	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.196602106 CET	50396	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.196701050 CET	50397	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.196830034 CET	50398	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.200196028 CET	4378	50393	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.200207949 CET	4378	50394	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.200218916 CET	4378	50395	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.205940008 CET	4378	50396	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.205971956 CET	4378	50397	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.205982924 CET	4378	50398	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.206063032 CET	50396	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.206103086 CET	50397	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.206542969 CET	50398	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.206547022 CET	50397	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.206571102 CET	50398	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.209800959 CET	50396	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.211908102 CET	4378	50397	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.211918116 CET	4378	50398	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.214633942 CET	4378	50396	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.862876892 CET	4378	50398	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.862987041 CET	50398	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.863111019 CET	4378	50397	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.863130093 CET	50398	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.863183975 CET	50397	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.863261938 CET	50397	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.863558054 CET	4378	50396	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.863619089 CET	50396	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.863704920 CET	50396	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.867948055 CET	4378	50398	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.868432045 CET	4378	50397	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.869019032 CET	4378	50396	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.973853111 CET	50399	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.973897934 CET	50400	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.974384069 CET	50401	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.978832006 CET	4378	50399	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.978862047 CET	4378	50400	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.978904963 CET	50399	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.978933096 CET	50400	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.979299068 CET	50400	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.979306936 CET	50399	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.979309082 CET	4378	50401	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.979372978 CET	50401	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.979541063 CET	50401	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:17.984338999 CET	4378	50400	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.984409094 CET	4378	50399	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:17.984491110 CET	4378	50401	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.602397919 CET	4378	50401	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.602494001 CET	50401	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.604556084 CET	50401	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.605653048 CET	4378	50400	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.605711937 CET	50400	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.605973005 CET	50400	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.609428883 CET	4378	50401	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.610025883 CET	50403	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.610037088 CET	50402	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.610801935 CET	4378	50400	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.614972115 CET	4378	50403	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.615005970 CET	4378	50402	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.615092993 CET	50402	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.615109921 CET	50403	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.615696907 CET	50403	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.616343021 CET	50402	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.621901035 CET	4378	50403	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.623035908 CET	4378	50402	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.628725052 CET	4378	50399	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.628777981 CET	50399	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.628873110 CET	50399	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.632112980 CET	50404	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.635101080 CET	4378	50399	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.638068914 CET	4378	50404	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:18.638143063 CET	50404	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.638437033 CET	50404	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:18.643335104 CET	4378	50404	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.249814034 CET	4378	50403	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.250000954 CET	50403	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.256927967 CET	50403	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.261944056 CET	4378	50403	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.266941071 CET	4378	50404	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.267024040 CET	50404	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.267093897 CET	50404	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.267555952 CET	4378	50402	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.267606020 CET	50402	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.267683983 CET	50402	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.271985054 CET	4378	50404	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.272521973 CET	4378	50402	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.364267111 CET	50405	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.370647907 CET	4378	50405	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.370806932 CET	50405	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.371018887 CET	50405	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.375988960 CET	4378	50405	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.379931927 CET	50407	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.379942894 CET	50406	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.384888887 CET	4378	50407	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.384942055 CET	4378	50406	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.384994984 CET	50407	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.385025978 CET	50406	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.385314941 CET	50406	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.385341883 CET	50407	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.390189886 CET	4378	50406	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.390201092 CET	4378	50407	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.998832941 CET	4378	50405	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:19.999129057 CET	50405	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:19.999190092 CET	50405	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.002542019 CET	50408	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.004705906 CET	4378	50405	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.007602930 CET	4378	50408	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.007819891 CET	50408	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.007903099 CET	4378	50406	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.007987976 CET	50406	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.008141041 CET	50406	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.008476019 CET	50408	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.012687922 CET	50409	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.013732910 CET	4378	50406	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.013756037 CET	4378	50408	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.017573118 CET	4378	50409	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.017757893 CET	50409	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.017985106 CET	50409	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.018008947 CET	4378	50407	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.018105030 CET	50407	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.018186092 CET	50407	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.020773888 CET	50410	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.022804022 CET	4378	50409	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.023092031 CET	4378	50407	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.025664091 CET	4378	50410	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.025790930 CET	50410	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.026014090 CET	50410	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.030997992 CET	4378	50410	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.637558937 CET	4378	50408	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.637718916 CET	50408	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.637809038 CET	50408	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.639575005 CET	4378	50409	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.639687061 CET	50409	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.639714956 CET	50409	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.642586946 CET	4378	50408	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.644598007 CET	4378	50409	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.651251078 CET	4378	50410	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.651349068 CET	50410	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.651423931 CET	50410	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.656234980 CET	4378	50410	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.754884958 CET	50411	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.755115986 CET	50413	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.755115986 CET	50412	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.759943962 CET	4378	50411	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.760056019 CET	4378	50412	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.760059118 CET	50411	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.760109901 CET	50412	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.760370016 CET	50411	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.760441065 CET	50412	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.760512114 CET	4378	50413	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.760571003 CET	50413	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.760786057 CET	50413	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:20.765161037 CET	4378	50411	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.765362978 CET	4378	50412	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:20.765615940 CET	4378	50413	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.381608009 CET	4378	50413	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.381691933 CET	50413	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.381784916 CET	50413	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.383246899 CET	4378	50412	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.383296967 CET	50412	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.383385897 CET	50412	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.385587931 CET	50414	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.386054993 CET	50415	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.386620045 CET	4378	50413	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.388662100 CET	4378	50411	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.388772011 CET	50411	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.388772011 CET	50411	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.388955116 CET	4378	50412	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.390604019 CET	4378	50414	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.390666008 CET	50414	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.391098976 CET	4378	50415	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.391160011 CET	50415	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.391283989 CET	50414	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.391444921 CET	50415	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.391485929 CET	50416	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.393671036 CET	4378	50411	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.396384001 CET	4378	50414	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.396414042 CET	4378	50415	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.396755934 CET	4378	50416	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:21.396858931 CET	50416	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.397001982 CET	50416	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:21.402323961 CET	4378	50416	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.012204885 CET	4378	50415	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.012270927 CET	50415	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.012448072 CET	50415	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.017339945 CET	4378	50415	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.024919033 CET	4378	50414	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.024991989 CET	50414	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.025051117 CET	50414	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.026576996 CET	4378	50416	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.026657104 CET	50416	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.026695967 CET	50416	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.029906988 CET	4378	50414	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.031513929 CET	4378	50416	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.129885912 CET	50417	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.130150080 CET	50418	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.130376101 CET	50419	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.134851933 CET	4378	50417	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.134958029 CET	50417	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.135248899 CET	4378	50418	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.135318995 CET	4378	50419	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.135318995 CET	50418	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.135375023 CET	50419	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.135620117 CET	50418	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.135668993 CET	50417	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.135797024 CET	50419	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.140486956 CET	4378	50418	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.140583992 CET	4378	50417	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.140773058 CET	4378	50419	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.750622034 CET	4378	50419	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.750731945 CET	50419	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.750910997 CET	50419	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.755002022 CET	50420	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.755925894 CET	4378	50419	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.760293007 CET	4378	50420	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.760370970 CET	50420	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.760627031 CET	50420	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.763098955 CET	4378	50418	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.763205051 CET	50418	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.763242006 CET	50418	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.764388084 CET	4378	50417	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.764442921 CET	50417	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.764529943 CET	50417	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.765957117 CET	4378	50420	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.766453981 CET	50421	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.766906023 CET	50422	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.769139051 CET	4378	50418	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.769418955 CET	4378	50417	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.771303892 CET	4378	50421	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.771393061 CET	50421	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.771595001 CET	50421	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.771945000 CET	4378	50422	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.772007942 CET	50422	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.772222042 CET	50422	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:22.776810884 CET	4378	50421	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:22.776993036 CET	4378	50422	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.388381004 CET	4378	50420	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.388459921 CET	50420	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.388537884 CET	50420	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.391002893 CET	4378	50421	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.391072035 CET	50421	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.391112089 CET	50421	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.394068003 CET	4378	50420	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.396291971 CET	4378	50421	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.398036003 CET	4378	50422	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.398109913 CET	50422	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.398174047 CET	50422	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.403194904 CET	4378	50422	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.504784107 CET	50423	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.504945040 CET	50425	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.505017042 CET	50424	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.509697914 CET	4378	50423	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.509783030 CET	50423	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.509830952 CET	4378	50425	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.509888887 CET	50425	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.509944916 CET	4378	50424	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.510015965 CET	50424	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.510092974 CET	50423	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.510289907 CET	50425	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.510454893 CET	50424	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:23.515084028 CET	4378	50423	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.517729044 CET	4378	50425	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:23.517741919 CET	4378	50424	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.127748013 CET	4378	50425	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.127953053 CET	50425	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.128217936 CET	50425	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.129861116 CET	4378	50424	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.129968882 CET	50424	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.130036116 CET	50424	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.130583048 CET	4378	50423	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.130634069 CET	50423	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.130697012 CET	50423	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.132004023 CET	50426	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.133043051 CET	4378	50425	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.133335114 CET	50427	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.133452892 CET	50428	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.134861946 CET	4378	50424	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.135907888 CET	4378	50423	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.137110949 CET	4378	50426	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.137224913 CET	50426	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.137423992 CET	50426	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.138142109 CET	4378	50427	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.138200045 CET	50427	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.138329983 CET	4378	50428	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.138359070 CET	50427	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.138386965 CET	50428	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.138582945 CET	50428	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.142863035 CET	4378	50426	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.143194914 CET	4378	50427	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.143491983 CET	4378	50428	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.751220942 CET	4378	50426	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.751317024 CET	50426	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.751374960 CET	50426	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.755470991 CET	4378	50428	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.755557060 CET	50428	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.755625010 CET	50428	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.756527901 CET	4378	50426	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.760663033 CET	4378	50428	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.766448975 CET	4378	50427	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.766544104 CET	50427	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.766629934 CET	50427	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.771440983 CET	4378	50427	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.864687920 CET	50429	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.865123987 CET	50430	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.869765997 CET	4378	50429	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.869863987 CET	50429	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.870137930 CET	50429	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.870330095 CET	4378	50430	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.870408058 CET	50430	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.870621920 CET	50430	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.875076056 CET	4378	50429	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.875473022 CET	4378	50430	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.879622936 CET	50431	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.884546041 CET	4378	50431	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:24.884625912 CET	50431	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.884845018 CET	50431	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:24.889794111 CET	4378	50431	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.492135048 CET	4378	50430	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.492206097 CET	50430	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.492281914 CET	50430	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.497113943 CET	50432	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.497143030 CET	4378	50430	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.498079062 CET	4378	50429	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.498136997 CET	50429	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.498184919 CET	50429	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.500727892 CET	50433	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.502055883 CET	4378	50432	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.502137899 CET	50432	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.502458096 CET	50432	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.503170013 CET	4378	50429	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.505836964 CET	4378	50433	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.505909920 CET	50433	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.506092072 CET	50433	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.507468939 CET	4378	50432	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.511228085 CET	4378	50433	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.513515949 CET	4378	50431	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.513592005 CET	50431	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.513648987 CET	50431	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.518429995 CET	50434	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.518460989 CET	4378	50431	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.523370981 CET	4378	50434	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:25.523447037 CET	50434	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.523730040 CET	50434	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:25.528683901 CET	4378	50434	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.125366926 CET	4378	50433	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.126117945 CET	4378	50432	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.126190901 CET	50433	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.126271963 CET	50433	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.126282930 CET	50432	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.126282930 CET	50432	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.131125927 CET	4378	50433	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.131138086 CET	4378	50432	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.143853903 CET	4378	50434	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.148077011 CET	50434	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.148077011 CET	50434	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.153070927 CET	4378	50434	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.239264965 CET	50435	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.239322901 CET	50436	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.244431019 CET	4378	50435	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.244527102 CET	4378	50436	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.244637012 CET	50435	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.244894981 CET	50435	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.244895935 CET	50436	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.244910002 CET	50436	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.249809980 CET	4378	50435	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.249819994 CET	4378	50436	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.254650116 CET	50437	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.259555101 CET	4378	50437	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.261841059 CET	50437	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.262092113 CET	50437	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.267201900 CET	4378	50437	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.865326881 CET	4378	50435	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.865396023 CET	50435	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.865436077 CET	50435	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.865807056 CET	50438	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.866282940 CET	4378	50436	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.866337061 CET	50436	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.866369009 CET	50436	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.866569996 CET	50439	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.870242119 CET	4378	50435	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.870659113 CET	4378	50438	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.870724916 CET	50438	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.871005058 CET	50438	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.871170044 CET	4378	50436	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.871339083 CET	4378	50439	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.871391058 CET	50439	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.871588945 CET	50439	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.875808001 CET	4378	50438	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.876421928 CET	4378	50439	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.882925987 CET	4378	50437	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.883008003 CET	50437	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.883049011 CET	50437	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.883407116 CET	50440	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.888025999 CET	4378	50437	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.888192892 CET	4378	50440	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:26.888273954 CET	50440	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.888420105 CET	50440	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:26.893389940 CET	4378	50440	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:27.499547958 CET	4378	50439	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:27.499645948 CET	50439	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:27.510283947 CET	4378	50438	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:27.510565996 CET	50438	4378	192.168.2.9	79.124.58.130
Nov 4, 2024 16:35:27.512690067 CET	4378	50440	79.124.58.130	192.168.2.9
Nov 4, 2024 16:35:27.512753963 CET	50440	4378	192.168.2.9	79.124.58.130

Target ID:	0
Start time:	10:33:21
Start date:	04/11/2024
Path:	C:\Users\user\Desktop\iFD9jPLjXC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\iFD9jPLjXC.exe"
Imagebase:	0x400000
File size:	7'680 bytes
MD5 hash:	732BBA29E4283036D0FCE29331D71577
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000000.00000000.1367522575.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:33:33
Start date:	04/11/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	10:33:34
Start date:	04/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	10:33:39
Start date:	04/11/2024
Path:	C:\Users\user\Desktop\iFD9jPLjXC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\iFD9jPLjXC.exe"
Imagebase:	0x400000
File size:	7'680 bytes
MD5 hash:	732BBA29E4283036D0FCE29331D71577
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000005.00000000.1547329773.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000005.00000002.2607738021.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	10:33:42
Start date:	04/11/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -windowstyle hidden -Command "& 'C:\Users\user\Desktop\iFD9jPLjXC.exe'"
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: conhost.exePID: 7260, Parent PID: 7236

General

Target ID:	7
Start time:	10:33:42
Start date:	04/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	10:33:42
Start date:	04/11/2024
Path:	C:\Users\user\Desktop\iFD9jPLjXC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\iFD9jPLjXC.exe"
Imagebase:	0x400000
File size:	7'680 bytes
MD5 hash:	732BBA29E4283036D0FCE29331D71577
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000008.00000000.1578335832.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000008.00000002.2607686416.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	38.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	17.5%
Total number of Nodes:	114
Total number of Limit Nodes:	3

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0040146A Relevance: 22.8, APIs: 15, Instructions: 289
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000,00010000,00003000,00000004,?,?,?,?,?,?,00401BC3,0040300F,0040306B,00000202,?,000003E8), ref: 00401494
CreateEventA.KERNEL32(00000000,00000000,00000001,00000000,00000000,00010000,00003000,00000004,?,?,?,?,?,?,00401BC3,0040300F), ref: 004014A4
GetUserNameExA.SECUR32(00000002,?,?,00000000,00000000,00000001,00000000,00000000,00010000,00003000,00000004,?,?), ref: 004014BF

Part of subcall function 00401C2E: socket.WSOCK32(00000002,00000001,00000006,?,?,?,?), ref: 00401C4D
Part of subcall function 00401C2E: setsockopt.WSOCK32(?,00000006,00000001,?,00000004,?,?,00000004,00000002,00000001,00000006,?,?,?,?), ref: 00401C77
Part of subcall function 00401C2E: inet_addr.WSOCK32(00000000,00000000,?,00000002,?,00403000,00403075,?,?,00000006,00000001,?,00000004,?,?,00000004), ref: 00401CBC
Part of subcall function 00401C2E: htons.WSOCK32(?,00000000,00000000,?,00000002,?,00403000,00403075,?,?,00000006,00000001,?,00000004,?,?), ref: 00401CDD
Part of subcall function 00401C2E: ioctlsocket.WSOCK32(?,8004667E,?,?,00000000,00000000,?,00000002,?,00403000,00403075,?,?,00000006,00000001,?), ref: 00401CFF
Part of subcall function 00401C2E: connect.WSOCK32(?,?,00000010,?,8004667E,?,?,00000000,00000000,?,00000002,?,00403000,00403075,?,?), ref: 00401D0D
Part of subcall function 00401C2E: select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010,?,8004667E,?), ref: 00401D33
Part of subcall function 00401C2E: ioctlsocket.WSOCK32(?,8004667E,?,00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010), ref: 00401D50

GetVolumeInformationA.KERNEL32(00000000,00000000,00000000,?,00000000,00000000,00000000,00000000,00403075,?,00000032,?,?), ref: 0040150C

Part of subcall function 004019AD: WaitForSingleObject.KERNEL32(?,000000FF,?,?), ref: 004019C8
Part of subcall function 004019AD: SetEvent.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 00401A25

select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,0000003C,00000000), ref: 00401566

Part of subcall function 004019AD: select.WSOCK32(00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 004019F0
Part of subcall function 004019AD: send.WSOCK32(?,?,?,00000000,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 00401A03

CloseHandle.KERNEL32(?,?,?,?,?,0000000A,00000002,?,?,00000000,00000000,00000001,00000000,00000000,00010000,00003000), ref: 0040185E
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,0000000A,00000002,?,?,00000000,00000000,00000001,00000000), ref: 0040186D
ExitProcess.KERNEL32(00000000), ref: 0040187D

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: select$EventVirtualioctlsocket$AllocCloseCreateExitFreeHandleInformationNameObjectProcessSingleUserVolumeWaitconnecthtonsinet_addrsendsetsockoptsocket
String ID:
API String ID: 1318156763-0
Opcode ID: 6d508a0f77d53cff8d3e45683c36eb44aa79ec33d4e798442360411c9835d309
Instruction ID: bbffc66e5c7ffa652bc1eb9c33fb21750f01b9076fe66eeaa3a4aca29229b1d3
Opcode Fuzzy Hash: 6d508a0f77d53cff8d3e45683c36eb44aa79ec33d4e798442360411c9835d309
Instruction Fuzzy Hash: 68B1B871A40309BAEB219F50CC02FEEB7B9BB04704F10417BF6097A1E1D7B96A94CB59

Function 00401031 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 67
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExA.ADVAPI32(?,?,00000000,00000000,00000000,000F003F,00000000,?,?,?,?,?,?,?,?,0040101C), ref: 00401060
GetModuleFileNameA.KERNEL32(00000000,?,00000100,?,?,00000000,00000000,00000000,000F003F,00000000,?,?), ref: 00401073
wsprintfA.USER32 ref: 0040108B
RegSetValueExA.ADVAPI32(?,?,00000000,?,?,?,?), ref: 004010B5
RegOpenKeyExA.ADVAPI32(?,?,00000000,000F003F,?,?,?,?,?,?,?,0040101C,80000001,Software\\Microsoft\\Windows\\CurrentVersion\\Run,socks5,00000001), ref: 004010CD
RegDeleteValueA.ADVAPI32(?,?,?,?,00000000,000F003F,?,?,?,?,?,?,?,0040101C,80000001,Software\\Microsoft\\Windows\\CurrentVersion\\Run), ref: 004010D8
RegCloseKey.ADVAPI32(?,?,?,?,?,00000000,000F003F,?,?,?,?,?,?,?,0040101C,80000001), ref: 004010E0

Strings

powershell.exe -windowstyle hidden -Command "& '%s'", xrefs: 0040107F

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: Value$CloseCreateDeleteFileModuleNameOpenwsprintf
String ID: powershell.exe -windowstyle hidden -Command "& '%s'"
API String ID: 1744295022-1821757466
Opcode ID: fdbce37f371b4441aa8a3e650baf4e02924b1e1aaf9ec20a2d128210f2519b20
Instruction ID: da474709eb26fb5714bd3c76322e74f8595bc295cb584bc0b34793c5a59033c4
Opcode Fuzzy Hash: fdbce37f371b4441aa8a3e650baf4e02924b1e1aaf9ec20a2d128210f2519b20
Instruction Fuzzy Hash: EC110A76640208BAEB11EF81CD42FEE776CEB44704F10406AFA04B60E1DBB5AB549B68

Function 00401C2E Relevance: 13.6, APIs: 9, Instructions: 110
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

socket.WSOCK32(00000002,00000001,00000006,?,?,?,?), ref: 00401C4D
setsockopt.WSOCK32(?,00000006,00000001,?,00000004,?,?,00000004,00000002,00000001,00000006,?,?,?,?), ref: 00401C77
inet_ntoa.WSOCK32(00000000,?,00000002,?,00403000,00403075,?,?,00000006,00000001,?,00000004,?,?,00000004,00000002), ref: 00401CB6
inet_addr.WSOCK32(00000000,00000000,?,00000002,?,00403000,00403075,?,?,00000006,00000001,?,00000004,?,?,00000004), ref: 00401CBC
htons.WSOCK32(?,00000000,00000000,?,00000002,?,00403000,00403075,?,?,00000006,00000001,?,00000004,?,?), ref: 00401CDD
ioctlsocket.WSOCK32(?,8004667E,?,?,00000000,00000000,?,00000002,?,00403000,00403075,?,?,00000006,00000001,?), ref: 00401CFF
connect.WSOCK32(?,?,00000010,?,8004667E,?,?,00000000,00000000,?,00000002,?,00403000,00403075,?,?), ref: 00401D0D
select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010,?,8004667E,?), ref: 00401D33
ioctlsocket.WSOCK32(?,8004667E,?,00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010), ref: 00401D50

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: ioctlsocket$connecthtonsinet_addrinet_ntoaselectsetsockoptsocket
String ID:
API String ID: 983927830-0
Opcode ID: 44d9bddc88b868e19a6587a4e4f9218af8d47d8d0636409a41e9c91609fb06c7
Instruction ID: 3da05dab749adc0824459bad4dae381b054e1d7957fa21fd4983f135862404fa
Opcode Fuzzy Hash: 44d9bddc88b868e19a6587a4e4f9218af8d47d8d0636409a41e9c91609fb06c7
Instruction Fuzzy Hash: EA310171950209BADF10EFA5CD46FEE7B7DEB04708F10403AF611B60E1E7B99A049B69

Function 004019AD Relevance: 6.1, APIs: 4, Instructions: 53
synchronizationnetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WaitForSingleObject.KERNEL32(?,000000FF,?,?), ref: 004019C8
select.WSOCK32(00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 004019F0
send.WSOCK32(?,?,?,00000000,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 00401A03
SetEvent.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 00401A25

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: EventObjectSingleWaitselectsend
String ID:
API String ID: 3746265427-0
Opcode ID: 58ab6f447b6ed9ca5310716a95241dca7274d8ab234d3ea4d936545e78857079
Instruction ID: f520780259ba0a303ee1fe91c66d2faddea0671fb2dfeafc5fc36e4d417c99ce
Opcode Fuzzy Hash: 58ab6f447b6ed9ca5310716a95241dca7274d8ab234d3ea4d936545e78857079
Instruction Fuzzy Hash: C0115E31640209ABDF209E55DC06FDF3668AB40365F100137B910B51E1D7B8AD50DBA9

Function 00401000 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 16
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00401031: RegCreateKeyExA.ADVAPI32(?,?,00000000,00000000,00000000,000F003F,00000000,?,?,?,?,?,?,?,?,0040101C), ref: 00401060
Part of subcall function 00401031: GetModuleFileNameA.KERNEL32(00000000,?,00000100,?,?,00000000,00000000,00000000,000F003F,00000000,?,?), ref: 00401073
Part of subcall function 00401031: wsprintfA.USER32 ref: 0040108B
Part of subcall function 00401031: RegSetValueExA.ADVAPI32(?,?,00000000,?,?,?,?), ref: 004010B5
Part of subcall function 00401031: RegCloseKey.ADVAPI32(?,?,?,?,?,00000000,000F003F,?,?,?,?,?,?,?,0040101C,80000001), ref: 004010E0

CreateThread.KERNEL32(00000000,00000000,00401B79,00000000,00000000,00000000), ref: 0040102B

Strings

Software\\Microsoft\\Windows\\CurrentVersion\\Run, xrefs: 0040100D
socks5, xrefs: 00401008

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: Create$CloseFileModuleNameThreadValuewsprintf
String ID: Software\\Microsoft\\Windows\\CurrentVersion\\Run$socks5
API String ID: 277307019-2545829411
Opcode ID: cf697da2617ab0347418e0f29c076db7c08a4dcd0572fcaa18f92ca93c849f9f
Instruction ID: 1483a93459bf94501396be5ed0da8a1cb6e4d76a7219c0368f29bbba111e4fa3
Opcode Fuzzy Hash: cf697da2617ab0347418e0f29c076db7c08a4dcd0572fcaa18f92ca93c849f9f
Instruction Fuzzy Hash: 69D048343D530034F83429624C83F8824090B00F4AFB0006A37043C4EA85FE3180005E

Function 00401B79 Relevance: 4.5, APIs: 3, Instructions: 31
sleepnetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000003E8,?,?), ref: 00401B9A
WSAStartup.WSOCK32(00000202,?,000003E8,?,?), ref: 00401BAB
Sleep.KERNEL32(0002BF20,0040300F,0040306B,00000202,?,000003E8,?,?), ref: 00401BDB

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: Sleep$Startup
String ID:
API String ID: 3152138391-0
Opcode ID: 084a2d97175f52e3c16b9ccebaa0c4652f674e1541dc7530800f6325029e8f40
Instruction ID: 5180cccb262e5aaded7f6767353c698c11b0ebe877813b9923098971f205a182
Opcode Fuzzy Hash: 084a2d97175f52e3c16b9ccebaa0c4652f674e1541dc7530800f6325029e8f40
Instruction Fuzzy Hash: 5DE0395164134876D5206AB78C4BEAF7A6C5A40B49F10013F7919B10FAFBBCAB04456E

Function 00401C0F Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

shutdown.WSOCK32(?,00000002,?,?,?,?,00401830,?,?,?,?,0000000A,00000002,?,?,00000000), ref: 00401C1A
closesocket.WSOCK32(?,?,00000002,?,?,?,?,00401830,?,?,?,?,0000000A,00000002,?,?), ref: 00401C22

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: closesocketshutdown
String ID:
API String ID: 572888783-0
Opcode ID: 6e4acbc54aa0ad7d579ce4890f7b1c7f6b62aa958536362b714b561787b487b0
Instruction ID: fbecee67bb8fba84921c4314e932484626e28807aee03a801a345db67e388b3c
Opcode Fuzzy Hash: 6e4acbc54aa0ad7d579ce4890f7b1c7f6b62aa958536362b714b561787b487b0
Instruction Fuzzy Hash: 1BC0802220010876D6113A57DC07D8F7F1CDBD17ECF00C037FA08640B145758C5181F4

Function 0040161B Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,0000003C,00000000), ref: 00401566

Part of subcall function 004019AD: WaitForSingleObject.KERNEL32(?,000000FF,?,?), ref: 004019C8
Part of subcall function 004019AD: SetEvent.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 00401A25

CloseHandle.KERNEL32(?,?,?,?,?,0000000A,00000002,?,?,00000000,00000000,00000001,00000000,00000000,00010000,00003000), ref: 0040185E
VirtualFree.KERNEL32(?,00000000,00008000,?,?,?,?,?,0000000A,00000002,?,?,00000000,00000000,00000001,00000000), ref: 0040186D
ExitProcess.KERNEL32(00000000), ref: 0040187D

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: CloseEventExitFreeHandleObjectProcessSingleVirtualWaitselect
String ID:
API String ID: 1456646865-0
Opcode ID: 72724868b13c99a76407fa31ff93421f84496aa833f1b7e878eb452a4975f704
Instruction ID: 2438ceddd74ffa4cdfe5bc4a6a951b7035832373fe88b063ec0b7ccf5b4d187d
Opcode Fuzzy Hash: 72724868b13c99a76407fa31ff93421f84496aa833f1b7e878eb452a4975f704
Instruction Fuzzy Hash: A311DB71984218EEEF269A90CC45BED76BDAB44708F5040B7E209B90E0C7B95F94CF5A

Non-executed Functions

Function 004010F3 Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 293
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ioctlsocket.WSOCK32(?,8004667E,00000001,?,?,00000001,?,?,00000004,?,?,00000004,?,?,00000004,?), ref: 004011C4
connect.WSOCK32(?,00000017,0000001C,?,?,00000010,?,?,00000002,?,8004667E,00000001,?,?,00000001,?), ref: 0040120A
connect.WSOCK32(?,00000002,00000010,?,?,00000002,?,?,00000004,?,8004667E,00000001,?,?,00000001,?), ref: 00401282
select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,00000001,00000000,?,00000002,00000010,?,?,00000002), ref: 004012A7
ioctlsocket.WSOCK32(?,8004667E,00000000,00000000,00000000,?,00000000,?,?,00000000,?,00000001,00000000,?,00000002,00000010), ref: 004012C4
WSAIoctl.WS2_32(?,98000004,00000001,0000000C,00000000,00000000,?,00000000,00000000), ref: 004012FB
select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,00000001,00000000,00403075,00000032,00000005,0000000A,00403075,00000032), ref: 00401399
recv.WSOCK32(?,?,0000FFFA,00000000,00000000,?,00000000,00000000,?,?,00000000,?,00000001,00000000,00403075,00000032), ref: 004013B2
LocalFree.KERNEL32(?,?,?,00000003,?,00403075,00000032,?,00000003,?,00403075,00000032,00000005,0000000A,00403075,00000032), ref: 00401459

Strings

`, xrefs: 004012D0

Memory Dump Source

Source File: 00000000.00000002.2607739857.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2607703079.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607777411.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607832092.0000000000403000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2607870116.0000000000404000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_iFD9jPLjXC.jbxd

Yara matches

Similarity

API ID: connectioctlsocketselect$FreeIoctlLocalrecv
String ID: `
API String ID: 3066282071-1850852036
Opcode ID: 6ca844d213eeb6f2275984a97160e92bd2559d353b0a479cc22394595804d0f5
Instruction ID: 64fe681de91eec89505d86f2c9f86f3b62d708f57b3aa067c7741132328bad3a
Opcode Fuzzy Hash: 6ca844d213eeb6f2275984a97160e92bd2559d353b0a479cc22394595804d0f5
Instruction Fuzzy Hash: 1EB10C72940248BAEB11EAE1CC42FEEB7BCAB04704F54452AB711F60E1D779A644CB69

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report iFD9jPLjXC.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: SystemBC

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2scmmshx.13o.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_sbfvzsov.mys.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vx3nagyt.vt3.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_zeoa2sns.mso.ps1

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\590aee7bdd69b59b.customDesusertions-ms (copy)

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\590aee7bdd69b59b.customDesusertions-ms~RF3a1ce4.TMP (copy)

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\M5F0DIJ8OF00YGHZZHXL.temp

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\WJCO6WSJ9K8O1CXOXO51.temp

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Windows Analysis Report
iFD9jPLjXC.exe

Function 0040146A Relevance: 22.8, APIs: 15, Instructions: 289
memoryCOMMON

Function 00401031 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 67
registryCOMMON

Function 00401C2E Relevance: 13.6, APIs: 9, Instructions: 110
networkCOMMON

Function 004019AD Relevance: 6.1, APIs: 4, Instructions: 53
synchronizationnetworkCOMMON

Function 00401000 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 16
threadCOMMON

Function 00401B79 Relevance: 4.5, APIs: 3, Instructions: 31
sleepnetworkCOMMON

Function 00401C0F Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Function 0040161B Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 004010F3 Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 293
networkCOMMON