Windows Analysis Report
njrat.exe

AI detected suspicious sample

Source: Yara match	File source: njrat.exe, type: SAMPLE
Source: Yara match	File source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: njrat.exe PID: 4124, type: MEMORYSTR
Source: Yara match	File source: C:\rundll32.exe, type: DROPPED
Source: Yara match	File source: C:\Windows\rundll32.exe, type: DROPPED

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\rundll32.exe	Joe Sandbox ML: detected
Source: C:\Windows\rundll32.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: njrat.exe

Joe Sandbox ML: detected

Source: njrat.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\njrat.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Creates autorun.inf (USB autostart)

Source: njrat.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Spreading

Source: C:\Windows\rundll32.exe

File created: C:\autorun.inf

Suricata IDS alerts for network traffic

Source: njrat.exe, 00000000.00000002.1628891032.0000000002C81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: njrat.exe, 00000000.00000002.1628891032.0000000002C81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: njrat.exe, 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: njrat.exe, 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003203000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003203000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: njrat.exe	Binary or memory string: autorun.inf
Source: njrat.exe	Binary or memory string: [autorun]
Source: autorun.inf.2.dr	Binary or memory string: [autorun]
Source: rundll32.exe.2.dr	Binary or memory string: autorun.inf
Source: rundll32.exe.2.dr	Binary or memory string: [autorun]
Source: rundll32.exe.0.dr	Binary or memory string: autorun.inf
Source: rundll32.exe.0.dr	Binary or memory string: [autorun]

Networking

Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49709 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49716 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49716 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49714 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49712 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49709 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49714 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49705 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49708 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49715 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49708 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49715 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49709 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49709 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49712 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49705 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49714 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49715 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49706 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49706 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49715 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49704 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49704 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49714 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49712 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49708 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49712 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49706 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49708 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49707 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49729 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49705 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49705 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49706 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49712 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49704 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49716 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49704 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49705 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49729 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49711 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49711 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49711 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49716 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49716 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49750 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49711 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49750 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49750 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49761 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49761 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49739 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49794 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49794 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49783 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49783 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49761 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49739 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49739 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49794 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49783 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49839 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49839 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49832 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49832 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49811 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49850 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49850 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49811 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49811 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49804 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49832 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49718 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49850 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49707 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49804 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49839 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49718 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49867 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49804 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49896 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49896 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49896 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49867 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49890 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49890 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49867 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49890 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49707 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49718 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49718 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49710 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49718 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49907 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49707 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49907 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49707 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49856 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49710 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49856 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49710 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49710 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49941 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49772 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49873 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49907 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49941 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49873 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49856 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49873 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49822 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49822 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49772 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49941 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49822 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49964 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49970 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49964 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49970 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49970 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49935 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49935 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49935 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49993 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49993 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49881 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49881 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49913 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49999 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49772 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49999 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49976 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49976 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49999 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49947 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:49993 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49881 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49913 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:49993 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49913 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49976 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49993 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50023 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50019 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50025 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50025 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50024 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49919 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50024 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49919 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50022 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50025 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50022 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49947 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50017 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50022 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49964 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50017 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50024 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:50017 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50026 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50019 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50027 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:50017 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49919 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50026 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50017 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50019 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50026 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50033 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50034 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50031 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50033 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50027 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50020 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50020 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50030 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50033 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50028 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50030 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50020 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50031 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50027 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50031 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50035 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50035 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50023 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50023 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50038 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50038 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50028 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50038 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50028 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49947 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50032 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50032 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50044 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50035 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50030 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50032 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50034 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50043 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50042 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50042 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49958 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50043 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50042 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50034 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50011 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50040 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50040 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50044 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49958 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49929 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50011 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49929 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50043 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50011 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49958 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49929 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50037 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50037 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.10:50044 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2838486 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf) : 192.168.2.10:50044 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50041 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50041 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50036 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50036 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50037 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50029 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50029 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50041 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50029 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50036 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:49987 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:49987 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:49987 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50005 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50005 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50005 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50021 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50021 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.10:50021 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.10:50039 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.10:50039 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50021 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49804 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49970 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49896 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50030 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49890 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50025 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49772 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50040 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50039 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49947 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49811 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50034 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49822 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50043 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50027 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49929 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49964 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49907 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50011 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49881 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49913 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50031 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49987 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49993 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49958 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49794 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50022 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49873 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49761 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:50023 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49750 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49999 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49976 -> 167.71.56.116:22764
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.10:49832 -> 167.71.56.116:22764

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\rundll32.exe

Network Connect: 167.71.56.116 22764

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

IPs: 167.71.56.116

Source: global traffic

TCP traffic: 192.168.2.10:49704 -> 167.71.56.116:22764

Source: Joe Sandbox View

IP Address: 167.71.56.116 167.71.56.116

Source: Joe Sandbox View

ASN Name: DIGITALOCEAN-ASNUS DIGITALOCEAN-ASNUS

Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116
Source: unknown	TCP traffic detected without corresponding DNS query: 167.71.56.116

Source: njrat.exe, rundll32.exe.2.dr, rundll32.exe.0.dr

String found in binary or memory: https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: njrat.exe, kl.cs	.Net Code: VKCodeToUnicode
Source: rundll32.exe.0.dr, kl.cs	.Net Code: VKCodeToUnicode
Source: rundll32.exe.2.dr, kl.cs	.Net Code: VKCodeToUnicode

E-Banking Fraud

Protects its processes via BreakOnTermination flag

Source: Yara match	File source: njrat.exe, type: SAMPLE
Source: Yara match	File source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: njrat.exe PID: 4124, type: MEMORYSTR
Source: Yara match	File source: C:\rundll32.exe, type: DROPPED
Source: Yara match	File source: C:\Windows\rundll32.exe, type: DROPPED

Operating System Destruction

Source: C:\Windows\rundll32.exe

Process information set: 01 00 00 00

Malicious sample detected (through community Yara rule)

System Summary

Source: njrat.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: njrat.exe, type: SAMPLE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: njrat.exe, type: SAMPLE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: C:\rundll32.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: C:\rundll32.exe, type: DROPPED	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: C:\rundll32.exe, type: DROPPED	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: C:\Windows\rundll32.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: C:\Windows\rundll32.exe, type: DROPPED	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: C:\Windows\rundll32.exe, type: DROPPED	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen

Source: C:\Windows\rundll32.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\rundll32.exe	Code function: 2_2_0117BEF2 NtSetInformationProcess,	2_2_0117BEF2
Source: C:\Windows\rundll32.exe	Code function: 2_2_0117BED0 NtSetInformationProcess,	2_2_0117BED0
Source: C:\Windows\rundll32.exe	Code function: 2_2_02BB01C2 NtQuerySystemInformation,	2_2_02BB01C2
Source: C:\Windows\rundll32.exe	Code function: 2_2_02BB0187 NtQuerySystemInformation,	2_2_02BB0187

Source: C:\Users\user\Desktop\njrat.exe	File created: C:\Windows\rundll32.exe			Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	File created: C:\Windows\rundll32.exe\:Zone.Identifier:$DATA			Jump to behavior

Source: njrat.exe, 00000000.00000002.1627803724.0000000000BFE000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: OriginalFilenamemscorwks.dllT vs njrat.exe

Source: njrat.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: njrat.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: njrat.exe, type: SAMPLE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: njrat.exe, type: SAMPLE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: C:\rundll32.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: C:\rundll32.exe, type: DROPPED	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: C:\rundll32.exe, type: DROPPED	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: C:\Windows\rundll32.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: C:\Windows\rundll32.exe, type: DROPPED	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: C:\Windows\rundll32.exe, type: DROPPED	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi

Source: classification engine

Classification label: mal100.spre.troj.spyw.evad.winEXE@9/8@0/1

Source: C:\Windows\rundll32.exe	Code function: 2_2_0117BBA2 AdjustTokenPrivileges,		2_2_0117BBA2
Source: C:\Windows\rundll32.exe	Code function: 2_2_0117BB6B AdjustTokenPrivileges,		2_2_0117BB6B

Source: C:\Users\user\Desktop\njrat.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\njrat.exe.log

Source: C:\Windows\rundll32.exe	Mutant created: NULL
Source: C:\Windows\rundll32.exe	Mutant created: \Sessions\1\BaseNamedObjects\872de6721af0b6833a743205be97e089
Source: C:\Windows\rundll32.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\.net clr networking
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6168:120:WilError_03

Source: njrat.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: njrat.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%

Source: C:\Users\user\Desktop\njrat.exe

File read: C:\Users\user\Desktop\desktop.ini

Source: C:\Users\user\Desktop\njrat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: C:\Users\user\Desktop\njrat.exe

Process created: C:\Windows\rundll32.exe "C:\Windows\rundll32.exe"

Source: njrat.exe

ReversingLabs: Detection: 94%

Source: C:\Users\user\Desktop\njrat.exe

File read: C:\Users\user\Desktop\njrat.exe

Source: unknown	Process created: C:\Users\user\Desktop\njrat.exe "C:\Users\user\Desktop\njrat.exe"
Source: C:\Users\user\Desktop\njrat.exe	Process created: C:\Windows\rundll32.exe "C:\Windows\rundll32.exe"
Source: C:\Windows\rundll32.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Windows\rundll32.exe" "rundll32.exe" ENABLE
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\rundll32.exe "C:\Windows\rundll32.exe" ..
Source: unknown	Process created: C:\Windows\rundll32.exe "C:\Windows\rundll32.exe" ..
Source: unknown	Process created: C:\Windows\rundll32.exe "C:\Windows\rundll32.exe" ..
Source: C:\Users\user\Desktop\njrat.exe	Process created: C:\Windows\rundll32.exe "C:\Windows\rundll32.exe"	Jump to behavior
Source: C:\Windows\rundll32.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Windows\rundll32.exe" "rundll32.exe" ENABLE	Jump to behavior

Source: C:\Users\user\Desktop\njrat.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ifmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasmontr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mfc42u.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: authfwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcmonitor.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3cfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3api.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: onex.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappprxy.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: hnetmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netshell.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netsetupapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netiohlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: httpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: activeds.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: polstore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshwfp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2pnetsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2p.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rpcnsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: whhelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlancfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wshelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: peerdistsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wcmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mobilenetworking.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ktmw32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprmsg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: msasn1.dll	Jump to behavior

Source: C:\Windows\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{674B6698-EE92-11D0-AD71-00C04FD8FDFF}\InprocServer32

Source: C:\Windows\rundll32.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Source: njrat.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: C:\Users\user\Desktop\njrat.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

.NET source code contains potential unpacker

Source: njrat.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

Source: njrat.exe, OK.cs	.Net Code: Plugin System.Reflection.Assembly.Load(byte[])
Source: rundll32.exe.0.dr, OK.cs	.Net Code: Plugin System.Reflection.Assembly.Load(byte[])
Source: rundll32.exe.2.dr, OK.cs	.Net Code: Plugin System.Reflection.Assembly.Load(byte[])

Source: C:\Users\user\Desktop\njrat.exe

Code function: 0_2_00FF0FE0 push ecx; iretd

0_2_00FF0FE4

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Users\user\Desktop\njrat.exe

Executable created and started: C:\Windows\rundll32.exe

Creates an autostart registry key pointing to binary in C:\Windows

Source: C:\Windows\rundll32.exe	File created: C:\rundll32.exe			Jump to dropped file
Source: C:\Users\user\Desktop\njrat.exe	File created: C:\Windows\rundll32.exe			Jump to dropped file

Source: C:\Users\user\Desktop\njrat.exe

File created: C:\Windows\rundll32.exe

Jump to dropped file

Boot Survival

Source: C:\Windows\rundll32.exe

Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089

Creates autostart registry keys with suspicious names

Source: C:\Windows\rundll32.exe

Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089

Source: C:\Windows\rundll32.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089	Jump to behavior
Source: C:\Windows\rundll32.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089	Jump to behavior
Source: C:\Windows\rundll32.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089	Jump to behavior
Source: C:\Windows\rundll32.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089	Jump to behavior

Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\rundll32.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Users\user\Desktop\njrat.exe	Memory allocated: 1010000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Memory allocated: 2C80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\njrat.exe	Memory allocated: 4C80000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\njrat.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\rundll32.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\rundll32.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\rundll32.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\rundll32.exe	Window / User API: threadDelayed 3220	Jump to behavior
Source: C:\Windows\rundll32.exe	Window / User API: threadDelayed 777	Jump to behavior
Source: C:\Windows\rundll32.exe	Window / User API: threadDelayed 4360	Jump to behavior
Source: C:\Windows\rundll32.exe	Window / User API: foregroundWindowGot 440	Jump to behavior
Source: C:\Windows\rundll32.exe	Window / User API: foregroundWindowGot 1266	Jump to behavior

Source: C:\Users\user\Desktop\njrat.exe TID: 5024	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\rundll32.exe TID: 6816	Thread sleep time: -777000s >= -30000s	Jump to behavior
Source: C:\Windows\rundll32.exe TID: 6816	Thread sleep time: -4360000s >= -30000s	Jump to behavior
Source: C:\Windows\rundll32.exe TID: 5576	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\rundll32.exe TID: 6368	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\rundll32.exe TID: 3648	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\njrat.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\rundll32.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\rundll32.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\rundll32.exe	Thread delayed: delay time: 922337203685477

Source: rundll32.exe, 00000002.00000002.4024884411.00000000010DC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: rundll32.exe, 00000002.00000002.4024884411.00000000010DC000.00000004.00000020.00020000.00000000.sdmp, netsh.exe, 00000004.00000003.1698395183.0000000000A61000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\njrat.exe

Memory allocated: page read and write | page guard

System process connects to network (likely due to code injection or exploit)

HIPS / PFW / Operating System Protection Evasion

Source: C:\Windows\rundll32.exe

Network Connect: 167.71.56.116 22764

.NET source code references suspicious native API functions

Source: njrat.exe, kl.cs	Reference to suspicious API methods: MapVirtualKey(a, 0u)
Source: njrat.exe, kl.cs	Reference to suspicious API methods: GetAsyncKeyState(num2)
Source: njrat.exe, OK.cs	Reference to suspicious API methods: capGetDriverDescriptionA(wDriver, ref lpszName, 100, ref lpszVer, 100)

Source: C:\Users\user\Desktop\njrat.exe

Process created: C:\Windows\rundll32.exe "C:\Windows\rundll32.exe"

Source: rundll32.exe, 00000002.00000002.4027999538.0000000003367000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Managerx<
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003367000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program managerL.dl(Xr
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003517000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000002.00000002.4027999538.0000000003367000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000002.00000002.4027999538.0000000003203000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003367000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program managerL.dl4o
Source: rundll32.exe, 00000002.00000002.4027999538.00000000035B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program managerx<
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003517000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000002.00000002.4027999538.0000000003367000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000002.00000002.4027999538.0000000003203000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@9dl
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003517000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000002.00000002.4027999538.0000000003367000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000002.00000002.4027999538.0000000003203000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program managerL.dl
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003367000.00000004.00000800.00020000.00000000.sdmp, rundll32.exe, 00000002.00000002.4027999538.0000000003203000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program manager
Source: rundll32.exe, 00000002.00000002.4027999538.0000000003367000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program managerL.dld
Source: rundll32.exe, 00000002.00000002.4024218280.000000000108C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Rh Program Manager<

Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\rundll32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Windows\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Modifies the windows firewall

Lowering of HIPS / PFW / Operating System Security Settings

Source: C:\Windows\rundll32.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Windows\rundll32.exe" "rundll32.exe" ENABLE

Uses netsh to modify the Windows network and firewall settings

Source: C:\Windows\rundll32.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Windows\rundll32.exe" "rundll32.exe" ENABLE

Stealing of Sensitive Information

Source: Yara match	File source: njrat.exe, type: SAMPLE
Source: Yara match	File source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: njrat.exe PID: 4124, type: MEMORYSTR
Source: Yara match	File source: C:\rundll32.exe, type: DROPPED
Source: Yara match	File source: C:\Windows\rundll32.exe, type: DROPPED

Remote Access Functionality

Source: Yara match	File source: njrat.exe, type: SAMPLE
Source: Yara match	File source: 0.0.njrat.exe.680000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: njrat.exe PID: 4124, type: MEMORYSTR
Source: Yara match	File source: C:\rundll32.exe, type: DROPPED
Source: Yara match	File source: C:\Windows\rundll32.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	11 Replication Through Removable Media	1 Native API	21 Registry Run Keys / Startup Folder	1 Access Token Manipulation	121 Masquerading	1 Input Capture	11 Security Software Discovery	Remote Services	1 Input Capture	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	112 Process Injection	21 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	21 Registry Run Keys / Startup Folder	31 Virtualization/Sandbox Evasion	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	1 Access Token Manipulation	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	112 Process Injection	LSA Secrets	1 Peripheral Device Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Rundll32	DCSync	12 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Software Packing	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 DLL Side-Loading	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
njrat.exe	95%	ReversingLabs	ByteCode-MSIL.Backdoor.njRAT
njrat.exe	100%	Avira	TR/ATRAPS.Gen
njrat.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\rundll32.exe	100%	Avira	TR/ATRAPS.Gen
C:\Windows\rundll32.exe	100%	Avira	TR/ATRAPS.Gen
C:\rundll32.exe	100%	Joe Sandbox ML
C:\Windows\rundll32.exe	100%	Joe Sandbox ML
C:\Windows\rundll32.exe	95%	ReversingLabs	ByteCode-MSIL.Backdoor.njRAT
C:\rundll32.exe	95%	ReversingLabs	ByteCode-MSIL.Backdoor.njRAT

Name	Source	Malicious	Antivirus Detection	Reputation
https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0	njrat.exe, rundll32.exe.2.dr, rundll32.exe.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
167.71.56.116	unknown	United States		14061	DIGITALOCEAN-ASNUS	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1575625
Start date and time:	2024-12-16 07:19:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	njrat.exe
Detection:	MAL
Classification:	mal100.spre.troj.spyw.evad.winEXE@9/8@0/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 175 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 172.202.163.200, 13.107.246.63
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: njrat.exe

Simulations

Behavior and APIs

Time	Type	Description
01:21:24	API Interceptor	310373x Sleep call for process: rundll32.exe modified
07:20:51	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089 "C:\Windows\rundll32.exe" ..
07:20:59	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089 "C:\Windows\rundll32.exe" ..
07:21:07	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 872de6721af0b6833a743205be97e089 "C:\Windows\rundll32.exe" ..

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
167.71.56.116	lz3EbiqoK4.exe	Get hash	malicious	Quasar	Browse
	lz3EbiqoK4.exe	Get hash	malicious	Quasar	Browse
	SecuriteInfo.com.Trojan.Inject5.1262.5931.28554.exe	Get hash	malicious	XWorm	Browse
	SecuriteInfo.com.Trojan.Inject5.1262.5931.28554.exe	Get hash	malicious	XWorm	Browse
	X.exe	Get hash	malicious	XWorm	Browse
	SecuriteInfo.com.Trojan.MulDrop23.34226.5725.23706.exe	Get hash	malicious	XWorm	Browse
	WinScanGuard_v.2.1.bat	Get hash	malicious	Quasar	Browse
	Shadow-Stealer.bat	Get hash	malicious	Quasar	Browse
	OvA6x5v34G.exe	Get hash	malicious	AsyncRAT	Browse
	zUYpYikG7T.exe	Get hash	malicious	njRat	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DIGITALOCEAN-ASNUS	http://18.224.21.137/FFmnpShhHMMWeIqsVa2rJ69xinQlZ-7450	Get hash	malicious	Unknown	Browse	167.99.100.230
	1.elf	Get hash	malicious	Unknown	Browse	157.230.180.170
	arm6.elf	Get hash	malicious	Unknown	Browse	159.203.164.19
	m68k.elf	Get hash	malicious	Unknown	Browse	159.89.214.105
	armv5l.elf	Get hash	malicious	Mirai	Browse	167.175.208.40
	https://fsharetv.io	Get hash	malicious	Unknown	Browse	104.248.224.96
	main_x86_64.elf	Get hash	malicious	Mirai	Browse	134.122.52.106
	main_x86.elf	Get hash	malicious	Mirai	Browse	134.122.52.106
	rebirth.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse	167.174.212.248
	FEDEX234598765.html	Get hash	malicious	WinSearchAbuse	Browse	68.183.112.81

Process:	C:\Users\user\Desktop\njrat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	525
Entropy (8bit):	5.259753436570609
Encrypted:	false
SSDEEP:	12:Q3LaJU2C9XAn10Ug+9pfu9t0U29xtUz1B0U2uk71K6xhk7v:MLF2CpI3zffup29Iz52Ve
MD5:	260E01CC001F9C4643CA7A62F395D747
SHA1:	492AD0ACE3A9C8736909866EEA168962D418BE5A
SHA-256:	4BC52CCF866F489772A6919A0CC2C55B1432729D6BDF29E17E5853ABDFAB6030
SHA-512:	01AF7D75257E3DBD460E328F5C057D0367B83D3D9397E89CA3AE54AB9B2842D62352D8CCB4BE98ACE0C5667846759D32C199DE39ECCD0CF9CD6A83267D27E7C4
Malicious:	true
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System\bec14584c93014efbc76285c35d1e891\System.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7d443c6c007fe8696f9aa6ff1da53ef7\Microsoft.VisualBasic.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\2cdaeaf53e3d49038cf7cb0ce9d805d3\System.Drawing.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d0e5535854cce87ea7f2d69d0594b7a8\System.Windows.Forms.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\rundll32.exe.log

Process:	C:\Windows\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	525
Entropy (8bit):	5.259753436570609
Encrypted:	false
SSDEEP:	12:Q3LaJU2C9XAn10Ug+9pfu9t0U29xtUz1B0U2uk71K6xhk7v:MLF2CpI3zffup29Iz52Ve
MD5:	260E01CC001F9C4643CA7A62F395D747
SHA1:	492AD0ACE3A9C8736909866EEA168962D418BE5A
SHA-256:	4BC52CCF866F489772A6919A0CC2C55B1432729D6BDF29E17E5853ABDFAB6030
SHA-512:	01AF7D75257E3DBD460E328F5C057D0367B83D3D9397E89CA3AE54AB9B2842D62352D8CCB4BE98ACE0C5667846759D32C199DE39ECCD0CF9CD6A83267D27E7C4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System\bec14584c93014efbc76285c35d1e891\System.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7d443c6c007fe8696f9aa6ff1da53ef7\Microsoft.VisualBasic.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\2cdaeaf53e3d49038cf7cb0ce9d805d3\System.Drawing.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d0e5535854cce87ea7f2d69d0594b7a8\System.Windows.Forms.ni.dll",0..

C:\Windows\rundll32.exe

Process:	C:\Users\user\Desktop\njrat.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	37888
Entropy (8bit):	5.574096498834187
Encrypted:	false
SSDEEP:	768:HXGD2mUbCv/cPDYjM/cA8rM+rMRa8NuEx2t:H2DSbW0rEMUAP+gRJNbx
MD5:	4699BEC8CD50AA7F2CECF0DF8F0C26A0
SHA1:	C7C6C85FC26189CF4C68D45B5F8009A7A456497D
SHA-256:	D6471589756F94A0908A7EC9F0E0E98149882CE6C1CF3DA9852DC88FCC3D513D
SHA-512:	5701A107E8AF1C89574274C8B585DDD87AE88332284FC18090BBCCCF5D11B65486CCF70450D4451FEC7C75474A62518DD3C5E2BEDDA98487085276AC51D7AC0E
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: C:\Windows\rundll32.exe, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: C:\Windows\rundll32.exe, Author: unknown Rule: njrat1, Description: Identify njRat, Source: C:\Windows\rundll32.exe, Author: Brian Wallace @botnet_hunter Rule: MALWARE_Win_NjRAT, Description: Detects NjRAT / Bladabindi, Source: C:\Windows\rundll32.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...t~.`................................. ........@.. ....................................@.................................T...W.......@............................................................................ ............... ..H............text........ ...................... ..`.rsrc...@...........................@..@.reloc..............................@..B........................H........e...E..........................................................&.(......*..(.......s.........s.........s.........s...........0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0.............(....(.....+.....0............(.....+...0................(.....+...0............(.....+...0.. ...................,.(...+.+.+....+....0...........................*..(..........0..&........~..............,.(...+.

C:\Windows\rundll32.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\njrat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\autorun.inf

Process:	C:\Windows\rundll32.exe
File Type:	Microsoft Windows Autorun file
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.379951872150053
Encrypted:	false
SSDEEP:	3:It1KV2MSL4A30x:e1K4kd
MD5:	76CD2CF9A91B0F8E9C64EEEB5B96F6B5
SHA1:	1AA533AD7D138C037D26EF86EAAB78CAC8A2C45B
SHA-256:	BEDB23DE84D310F7550A126DCC8C613718743F78D7EC908C999216417CA41642
SHA-512:	FE9594CE5DAD0EC3AA38BF2DA71233C645B9800057EF7E8C7A6B8F92BF8FB78742813334D241AE4C914FC27419E1020E2ECEF63FF860E9F7DE1CE2FAA7511C79
Malicious:	true
Preview:	[autorun]..open=C:\rundll32.exe..shellexecute=C:\..

C:\rundll32.exe

Process:	C:\Windows\rundll32.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	37888
Entropy (8bit):	5.574096498834187
Encrypted:	false
SSDEEP:	768:HXGD2mUbCv/cPDYjM/cA8rM+rMRa8NuEx2t:H2DSbW0rEMUAP+gRJNbx
MD5:	4699BEC8CD50AA7F2CECF0DF8F0C26A0
SHA1:	C7C6C85FC26189CF4C68D45B5F8009A7A456497D
SHA-256:	D6471589756F94A0908A7EC9F0E0E98149882CE6C1CF3DA9852DC88FCC3D513D
SHA-512:	5701A107E8AF1C89574274C8B585DDD87AE88332284FC18090BBCCCF5D11B65486CCF70450D4451FEC7C75474A62518DD3C5E2BEDDA98487085276AC51D7AC0E
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: C:\rundll32.exe, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: C:\rundll32.exe, Author: unknown Rule: njrat1, Description: Identify njRat, Source: C:\rundll32.exe, Author: Brian Wallace @botnet_hunter Rule: MALWARE_Win_NjRAT, Description: Detects NjRAT / Bladabindi, Source: C:\rundll32.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...t~.`................................. ........@.. ....................................@.................................T...W.......@............................................................................ ............... ..H............text........ ...................... ..`.rsrc...@...........................@..@.reloc..............................@..B........................H........e...E..........................................................&.(......*..(.......s.........s.........s.........s...........0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0.............(....(.....+.....0............(.....+...0................(.....+...0............(.....+...0.. ...................,.(...+.+.+....+....0...........................*..(..........0..&........~..............,.(...+.

C:\rundll32.exe:Zone.Identifier

Process:	C:\Windows\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

\Device\ConDrv

Process:	C:\Windows\SysWOW64\netsh.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	313
Entropy (8bit):	4.971939296804078
Encrypted:	false
SSDEEP:	6:/ojfKsUTGN8Ypox42k9L+DbGMKeQE+vigqAZs2E+AYeDPO+Yswyha:wjPIGNrkHk9iaeIM6ADDPOHyha
MD5:	689E2126A85BF55121488295EE068FA1
SHA1:	09BAAA253A49D80C18326DFBCA106551EBF22DD6
SHA-256:	D968A966EF474068E41256321F77807A042F1965744633D37A203A705662EC25
SHA-512:	C3736A8FC7E6573FA1B26FE6A901C05EE85C55A4A276F8F569D9EADC9A58BEC507D1BB90DBF9EA62AE79A6783178C69304187D6B90441D82E46F5F56172B5C5C
Malicious:	false
Preview:	..IMPORTANT: Command executed successfully...However, "netsh firewall" is deprecated;..use "netsh advfirewall firewall" instead...For more information on using "netsh advfirewall firewall" commands..instead of "netsh firewall", see KB article 947709..at https://go.microsoft.com/fwlink/?linkid=121488 .....Ok.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.574096498834187
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.80% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01%
File name:	njrat.exe
File size:	37'888 bytes
MD5:	4699bec8cd50aa7f2cecf0df8f0c26a0
SHA1:	c7c6c85fc26189cf4c68d45b5f8009a7a456497d
SHA256:	d6471589756f94a0908a7ec9f0e0e98149882ce6c1cf3da9852dc88fcc3d513d
SHA512:	5701a107e8af1c89574274c8b585ddd87ae88332284fc18090bbcccf5d11b65486ccf70450d4451fec7c75474a62518dd3c5e2bedda98487085276ac51d7ac0e
SSDEEP:	768:HXGD2mUbCv/cPDYjM/cA8rM+rMRa8NuEx2t:H2DSbW0rEMUAP+gRJNbx
TLSH:	68033B4D7FE18168D5FD067B05B2D41207BAE04B6E23D91E8EF1649A37636C18B50EF2
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...t~.`................................. ........@.. ....................................@................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40abae
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x609A7E74 [Tue May 11 12:54:12 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xab54	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0x240	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xe000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x8bb4	0x8c00	2365695a090ee63e6f0a6d671a879c74	False	0.46353236607142856	data	5.605750029883583	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0x240	0x400	f7ce2f7b506ce16c06c85a549ef2cd98	False	0.3134765625	data	4.968771659524424	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xe000	0xc	0x200	14e8c9d445c6e20e65bc602fcc627817	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xc058	0x1e7	XML 1.0 document, ASCII text, with CRLF line terminators			0.5338809034907598

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50021	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49804	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49970	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49896	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50030	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49890	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50025	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49772	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50040	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50039	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49947	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49811	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50034	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49822	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50043	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50027	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49929	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49964	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49907	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50011	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49881	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49913	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50031	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49987	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49993	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49958	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49794	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50022	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49873	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49761	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	50023	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49750	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49999	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49976	167.71.56.116	22764	TCP
2024-12-16T07:20:39.042367+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.10	49832	167.71.56.116	22764	TCP
2024-12-16T07:20:55.395232+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49704	167.71.56.116	22764	TCP
2024-12-16T07:20:55.395232+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49704	167.71.56.116	22764	TCP
2024-12-16T07:20:55.515194+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49704	167.71.56.116	22764	TCP
2024-12-16T07:20:55.515194+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49704	167.71.56.116	22764	TCP
2024-12-16T07:20:59.530673+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49705	167.71.56.116	22764	TCP
2024-12-16T07:20:59.530673+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49705	167.71.56.116	22764	TCP
2024-12-16T07:20:59.650567+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49705	167.71.56.116	22764	TCP
2024-12-16T07:20:59.650567+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49705	167.71.56.116	22764	TCP
2024-12-16T07:21:00.886438+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49705	167.71.56.116	22764	TCP
2024-12-16T07:21:04.436217+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49706	167.71.56.116	22764	TCP
2024-12-16T07:21:04.436217+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49706	167.71.56.116	22764	TCP
2024-12-16T07:21:04.556324+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49706	167.71.56.116	22764	TCP
2024-12-16T07:21:04.556324+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49706	167.71.56.116	22764	TCP
2024-12-16T07:21:08.728520+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49707	167.71.56.116	22764	TCP
2024-12-16T07:21:08.728520+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49707	167.71.56.116	22764	TCP
2024-12-16T07:21:08.848338+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49707	167.71.56.116	22764	TCP
2024-12-16T07:21:08.848338+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49707	167.71.56.116	22764	TCP
2024-12-16T07:21:09.026848+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49707	167.71.56.116	22764	TCP
2024-12-16T07:21:13.025137+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49708	167.71.56.116	22764	TCP
2024-12-16T07:21:13.025137+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49708	167.71.56.116	22764	TCP
2024-12-16T07:21:13.147958+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49708	167.71.56.116	22764	TCP
2024-12-16T07:21:13.147958+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49708	167.71.56.116	22764	TCP
2024-12-16T07:21:17.338255+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49709	167.71.56.116	22764	TCP
2024-12-16T07:21:17.338255+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49709	167.71.56.116	22764	TCP
2024-12-16T07:21:17.458139+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49709	167.71.56.116	22764	TCP
2024-12-16T07:21:17.458139+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49709	167.71.56.116	22764	TCP
2024-12-16T07:21:21.650261+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49710	167.71.56.116	22764	TCP
2024-12-16T07:21:21.650261+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49710	167.71.56.116	22764	TCP
2024-12-16T07:21:21.770095+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49710	167.71.56.116	22764	TCP
2024-12-16T07:21:21.770095+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49710	167.71.56.116	22764	TCP
2024-12-16T07:21:25.948375+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49711	167.71.56.116	22764	TCP
2024-12-16T07:21:25.948375+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49711	167.71.56.116	22764	TCP
2024-12-16T07:21:26.068304+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49711	167.71.56.116	22764	TCP
2024-12-16T07:21:26.068304+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49711	167.71.56.116	22764	TCP
2024-12-16T07:21:30.245703+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49712	167.71.56.116	22764	TCP
2024-12-16T07:21:30.245703+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49712	167.71.56.116	22764	TCP
2024-12-16T07:21:30.365965+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49712	167.71.56.116	22764	TCP
2024-12-16T07:21:30.365965+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49712	167.71.56.116	22764	TCP
2024-12-16T07:21:32.401798+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49712	167.71.56.116	22764	TCP
2024-12-16T07:21:34.541844+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49714	167.71.56.116	22764	TCP
2024-12-16T07:21:34.541844+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49714	167.71.56.116	22764	TCP
2024-12-16T07:21:34.664749+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49714	167.71.56.116	22764	TCP
2024-12-16T07:21:34.664749+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49714	167.71.56.116	22764	TCP
2024-12-16T07:21:38.838710+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49715	167.71.56.116	22764	TCP
2024-12-16T07:21:38.838710+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49715	167.71.56.116	22764	TCP
2024-12-16T07:21:38.958450+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49715	167.71.56.116	22764	TCP
2024-12-16T07:21:38.958450+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49715	167.71.56.116	22764	TCP
2024-12-16T07:21:43.147869+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49716	167.71.56.116	22764	TCP
2024-12-16T07:21:43.147869+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49716	167.71.56.116	22764	TCP
2024-12-16T07:21:43.267795+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49716	167.71.56.116	22764	TCP
2024-12-16T07:21:43.267795+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49716	167.71.56.116	22764	TCP
2024-12-16T07:21:44.995589+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49716	167.71.56.116	22764	TCP
2024-12-16T07:21:47.448387+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49718	167.71.56.116	22764	TCP
2024-12-16T07:21:47.448387+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49718	167.71.56.116	22764	TCP
2024-12-16T07:21:47.568274+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49718	167.71.56.116	22764	TCP
2024-12-16T07:21:47.568274+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49718	167.71.56.116	22764	TCP
2024-12-16T07:21:49.261603+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49718	167.71.56.116	22764	TCP
2024-12-16T07:21:51.744181+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49729	167.71.56.116	22764	TCP
2024-12-16T07:21:51.744181+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49729	167.71.56.116	22764	TCP
2024-12-16T07:21:56.040815+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49739	167.71.56.116	22764	TCP
2024-12-16T07:21:56.040815+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49739	167.71.56.116	22764	TCP
2024-12-16T07:21:56.371345+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49739	167.71.56.116	22764	TCP
2024-12-16T07:21:56.495622+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49739	167.71.56.116	22764	TCP
2024-12-16T07:21:56.806745+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49739	167.71.56.116	22764	TCP
2024-12-16T07:21:57.646190+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49739	167.71.56.116	22764	TCP
2024-12-16T07:22:00.338486+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49750	167.71.56.116	22764	TCP
2024-12-16T07:22:00.338486+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49750	167.71.56.116	22764	TCP
2024-12-16T07:22:00.897206+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49750	167.71.56.116	22764	TCP
2024-12-16T07:22:04.650640+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49761	167.71.56.116	22764	TCP
2024-12-16T07:22:04.650640+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49761	167.71.56.116	22764	TCP
2024-12-16T07:22:05.609385+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49761	167.71.56.116	22764	TCP
2024-12-16T07:22:08.807345+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49772	167.71.56.116	22764	TCP
2024-12-16T07:22:08.807345+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49772	167.71.56.116	22764	TCP
2024-12-16T07:22:10.731334+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49772	167.71.56.116	22764	TCP
2024-12-16T07:22:12.853536+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49783	167.71.56.116	22764	TCP
2024-12-16T07:22:12.853536+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49783	167.71.56.116	22764	TCP
2024-12-16T07:22:13.701358+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49783	167.71.56.116	22764	TCP
2024-12-16T07:22:13.821901+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49783	167.71.56.116	22764	TCP
2024-12-16T07:22:13.942258+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49783	167.71.56.116	22764	TCP
2024-12-16T07:22:14.182071+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49783	167.71.56.116	22764	TCP
2024-12-16T07:22:14.302287+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49783	167.71.56.116	22764	TCP
2024-12-16T07:22:16.776610+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49794	167.71.56.116	22764	TCP
2024-12-16T07:22:16.776610+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49794	167.71.56.116	22764	TCP
2024-12-16T07:22:17.739105+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49794	167.71.56.116	22764	TCP
2024-12-16T07:22:18.700098+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49794	167.71.56.116	22764	TCP
2024-12-16T07:22:18.820035+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49794	167.71.56.116	22764	TCP
2024-12-16T07:22:18.940057+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49794	167.71.56.116	22764	TCP
2024-12-16T07:22:20.588199+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49804	167.71.56.116	22764	TCP
2024-12-16T07:22:20.588199+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49804	167.71.56.116	22764	TCP
2024-12-16T07:22:21.668936+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49804	167.71.56.116	22764	TCP
2024-12-16T07:22:22.636613+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49804	167.71.56.116	22764	TCP
2024-12-16T07:22:24.465152+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49811	167.71.56.116	22764	TCP
2024-12-16T07:22:24.465152+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49811	167.71.56.116	22764	TCP
2024-12-16T07:22:24.825929+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49811	167.71.56.116	22764	TCP
2024-12-16T07:22:24.945952+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49811	167.71.56.116	22764	TCP
2024-12-16T07:22:26.507872+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49811	167.71.56.116	22764	TCP
2024-12-16T07:22:26.627650+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49811	167.71.56.116	22764	TCP
2024-12-16T07:22:28.088013+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49822	167.71.56.116	22764	TCP
2024-12-16T07:22:28.088013+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49822	167.71.56.116	22764	TCP
2024-12-16T07:22:28.459864+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49822	167.71.56.116	22764	TCP
2024-12-16T07:22:29.302221+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49822	167.71.56.116	22764	TCP
2024-12-16T07:22:29.422905+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49822	167.71.56.116	22764	TCP
2024-12-16T07:22:31.622048+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49832	167.71.56.116	22764	TCP
2024-12-16T07:22:31.622048+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49832	167.71.56.116	22764	TCP
2024-12-16T07:22:32.341755+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49832	167.71.56.116	22764	TCP
2024-12-16T07:22:33.180690+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49832	167.71.56.116	22764	TCP
2024-12-16T07:22:35.072266+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:35.072266+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:35.494668+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:36.214300+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:36.334033+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:36.453811+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:36.573689+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:36.749505+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:36.869488+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49839	167.71.56.116	22764	TCP
2024-12-16T07:22:38.449641+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49850	167.71.56.116	22764	TCP
2024-12-16T07:22:38.449641+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49850	167.71.56.116	22764	TCP
2024-12-16T07:22:39.447790+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49850	167.71.56.116	22764	TCP
2024-12-16T07:22:39.567571+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49850	167.71.56.116	22764	TCP
2024-12-16T07:22:39.944015+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49850	167.71.56.116	22764	TCP
2024-12-16T07:22:40.423309+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49850	167.71.56.116	22764	TCP
2024-12-16T07:22:41.761821+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:41.761821+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:42.558409+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:42.678199+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:42.889436+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:43.009402+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:43.297478+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:43.418626+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:43.904689+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49856	167.71.56.116	22764	TCP
2024-12-16T07:22:44.994355+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49867	167.71.56.116	22764	TCP
2024-12-16T07:22:44.994355+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49867	167.71.56.116	22764	TCP
2024-12-16T07:22:45.593482+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49867	167.71.56.116	22764	TCP
2024-12-16T07:22:45.713332+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49867	167.71.56.116	22764	TCP
2024-12-16T07:22:45.833028+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49867	167.71.56.116	22764	TCP
2024-12-16T07:22:45.993533+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49867	167.71.56.116	22764	TCP
2024-12-16T07:22:46.844548+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49867	167.71.56.116	22764	TCP
2024-12-16T07:22:46.964550+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49867	167.71.56.116	22764	TCP
2024-12-16T07:22:48.168840+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49873	167.71.56.116	22764	TCP
2024-12-16T07:22:48.168840+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49873	167.71.56.116	22764	TCP
2024-12-16T07:22:49.009113+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49873	167.71.56.116	22764	TCP
2024-12-16T07:22:49.609284+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49873	167.71.56.116	22764	TCP
2024-12-16T07:22:49.849466+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49873	167.71.56.116	22764	TCP
2024-12-16T07:22:49.969446+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49873	167.71.56.116	22764	TCP
2024-12-16T07:22:51.275849+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49881	167.71.56.116	22764	TCP
2024-12-16T07:22:51.275849+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49881	167.71.56.116	22764	TCP
2024-12-16T07:22:51.516167+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49881	167.71.56.116	22764	TCP
2024-12-16T07:22:51.636147+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49881	167.71.56.116	22764	TCP
2024-12-16T07:22:52.484081+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49881	167.71.56.116	22764	TCP
2024-12-16T07:22:53.425484+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49881	167.71.56.116	22764	TCP
2024-12-16T07:22:54.351618+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49890	167.71.56.116	22764	TCP
2024-12-16T07:22:54.351618+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49890	167.71.56.116	22764	TCP
2024-12-16T07:22:55.071841+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49890	167.71.56.116	22764	TCP
2024-12-16T07:22:56.151980+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49890	167.71.56.116	22764	TCP
2024-12-16T07:22:56.271918+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49890	167.71.56.116	22764	TCP
2024-12-16T07:22:56.391792+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49890	167.71.56.116	22764	TCP
2024-12-16T07:22:57.353077+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49896	167.71.56.116	22764	TCP
2024-12-16T07:22:57.353077+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49896	167.71.56.116	22764	TCP
2024-12-16T07:22:58.441356+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49896	167.71.56.116	22764	TCP
2024-12-16T07:22:59.402412+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49896	167.71.56.116	22764	TCP
2024-12-16T07:23:00.332874+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49907	167.71.56.116	22764	TCP
2024-12-16T07:23:00.332874+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49907	167.71.56.116	22764	TCP
2024-12-16T07:23:00.935187+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49907	167.71.56.116	22764	TCP
2024-12-16T07:23:01.175331+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49907	167.71.56.116	22764	TCP
2024-12-16T07:23:01.340483+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49907	167.71.56.116	22764	TCP
2024-12-16T07:23:02.182361+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49907	167.71.56.116	22764	TCP
2024-12-16T07:23:03.275191+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49913	167.71.56.116	22764	TCP
2024-12-16T07:23:03.275191+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49913	167.71.56.116	22764	TCP
2024-12-16T07:23:03.514906+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49913	167.71.56.116	22764	TCP
2024-12-16T07:23:03.875020+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49913	167.71.56.116	22764	TCP
2024-12-16T07:23:03.995035+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49913	167.71.56.116	22764	TCP
2024-12-16T07:23:04.837801+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49913	167.71.56.116	22764	TCP
2024-12-16T07:23:05.317263+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49913	167.71.56.116	22764	TCP
2024-12-16T07:23:06.154308+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:06.154308+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:06.634363+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:06.874244+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:06.994641+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:07.114992+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:07.354908+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:07.834615+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:07.954532+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49919	167.71.56.116	22764	TCP
2024-12-16T07:23:09.043642+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49929	167.71.56.116	22764	TCP
2024-12-16T07:23:09.043642+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49929	167.71.56.116	22764	TCP
2024-12-16T07:23:09.772849+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49929	167.71.56.116	22764	TCP
2024-12-16T07:23:11.853029+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49935	167.71.56.116	22764	TCP
2024-12-16T07:23:11.853029+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49935	167.71.56.116	22764	TCP
2024-12-16T07:23:12.452503+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49935	167.71.56.116	22764	TCP
2024-12-16T07:23:12.572359+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49935	167.71.56.116	22764	TCP
2024-12-16T07:23:13.566176+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49935	167.71.56.116	22764	TCP
2024-12-16T07:23:13.686250+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49935	167.71.56.116	22764	TCP
2024-12-16T07:23:14.618513+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49941	167.71.56.116	22764	TCP
2024-12-16T07:23:14.618513+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49941	167.71.56.116	22764	TCP
2024-12-16T07:23:14.858119+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49941	167.71.56.116	22764	TCP
2024-12-16T07:23:15.342029+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49941	167.71.56.116	22764	TCP
2024-12-16T07:23:16.486441+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49941	167.71.56.116	22764	TCP
2024-12-16T07:23:16.606548+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49941	167.71.56.116	22764	TCP
2024-12-16T07:23:17.352776+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49947	167.71.56.116	22764	TCP
2024-12-16T07:23:17.352776+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49947	167.71.56.116	22764	TCP
2024-12-16T07:23:17.592759+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49947	167.71.56.116	22764	TCP
2024-12-16T07:23:18.073612+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49947	167.71.56.116	22764	TCP
2024-12-16T07:23:18.933831+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49947	167.71.56.116	22764	TCP
2024-12-16T07:23:20.072635+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49958	167.71.56.116	22764	TCP
2024-12-16T07:23:20.072635+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49958	167.71.56.116	22764	TCP
2024-12-16T07:23:20.794248+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49958	167.71.56.116	22764	TCP
2024-12-16T07:23:22.754793+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49964	167.71.56.116	22764	TCP
2024-12-16T07:23:22.754793+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49964	167.71.56.116	22764	TCP
2024-12-16T07:23:23.595590+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49964	167.71.56.116	22764	TCP
2024-12-16T07:23:24.075950+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49964	167.71.56.116	22764	TCP
2024-12-16T07:23:24.557204+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49964	167.71.56.116	22764	TCP
2024-12-16T07:23:25.402624+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49970	167.71.56.116	22764	TCP
2024-12-16T07:23:25.402624+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49970	167.71.56.116	22764	TCP
2024-12-16T07:23:25.642753+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49970	167.71.56.116	22764	TCP
2024-12-16T07:23:26.514981+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49970	167.71.56.116	22764	TCP
2024-12-16T07:23:27.357398+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49970	167.71.56.116	22764	TCP
2024-12-16T07:23:28.040965+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49976	167.71.56.116	22764	TCP
2024-12-16T07:23:28.040965+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49976	167.71.56.116	22764	TCP
2024-12-16T07:23:29.121619+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49976	167.71.56.116	22764	TCP
2024-12-16T07:23:30.637001+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49987	167.71.56.116	22764	TCP
2024-12-16T07:23:30.637001+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49987	167.71.56.116	22764	TCP
2024-12-16T07:23:31.480718+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49987	167.71.56.116	22764	TCP
2024-12-16T07:23:31.600953+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49987	167.71.56.116	22764	TCP
2024-12-16T07:23:32.320468+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49987	167.71.56.116	22764	TCP
2024-12-16T07:23:33.213343+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49993	167.71.56.116	22764	TCP
2024-12-16T07:23:33.213343+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49993	167.71.56.116	22764	TCP
2024-12-16T07:23:33.333119+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	49993	167.71.56.116	22764	TCP
2024-12-16T07:23:33.333119+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	49993	167.71.56.116	22764	TCP
2024-12-16T07:23:34.294856+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49993	167.71.56.116	22764	TCP
2024-12-16T07:23:34.655345+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49993	167.71.56.116	22764	TCP
2024-12-16T07:23:35.257162+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49993	167.71.56.116	22764	TCP
2024-12-16T07:23:35.812591+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	49999	167.71.56.116	22764	TCP
2024-12-16T07:23:35.812591+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	49999	167.71.56.116	22764	TCP
2024-12-16T07:23:36.172358+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49999	167.71.56.116	22764	TCP
2024-12-16T07:23:37.491833+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	49999	167.71.56.116	22764	TCP
2024-12-16T07:23:38.369163+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50005	167.71.56.116	22764	TCP
2024-12-16T07:23:38.369163+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50005	167.71.56.116	22764	TCP
2024-12-16T07:23:38.609795+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50005	167.71.56.116	22764	TCP
2024-12-16T07:23:38.730089+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50005	167.71.56.116	22764	TCP
2024-12-16T07:23:38.850114+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50005	167.71.56.116	22764	TCP
2024-12-16T07:23:39.331961+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50005	167.71.56.116	22764	TCP
2024-12-16T07:23:40.300352+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50005	167.71.56.116	22764	TCP
2024-12-16T07:23:40.900471+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50011	167.71.56.116	22764	TCP
2024-12-16T07:23:40.900471+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50011	167.71.56.116	22764	TCP
2024-12-16T07:23:41.260021+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50011	167.71.56.116	22764	TCP
2024-12-16T07:23:41.622084+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50011	167.71.56.116	22764	TCP
2024-12-16T07:23:42.943995+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50011	167.71.56.116	22764	TCP
2024-12-16T07:23:43.415718+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50017	167.71.56.116	22764	TCP
2024-12-16T07:23:43.415718+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50017	167.71.56.116	22764	TCP
2024-12-16T07:23:43.535648+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	50017	167.71.56.116	22764	TCP
2024-12-16T07:23:43.535648+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	50017	167.71.56.116	22764	TCP
2024-12-16T07:23:43.796704+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50017	167.71.56.116	22764	TCP
2024-12-16T07:23:43.916820+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50017	167.71.56.116	22764	TCP
2024-12-16T07:23:44.339718+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50017	167.71.56.116	22764	TCP
2024-12-16T07:23:44.819908+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50017	167.71.56.116	22764	TCP
2024-12-16T07:23:45.917651+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50019	167.71.56.116	22764	TCP
2024-12-16T07:23:45.917651+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50019	167.71.56.116	22764	TCP
2024-12-16T07:23:46.417678+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50019	167.71.56.116	22764	TCP
2024-12-16T07:23:46.537525+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50019	167.71.56.116	22764	TCP
2024-12-16T07:23:46.657354+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50019	167.71.56.116	22764	TCP
2024-12-16T07:23:46.923578+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50019	167.71.56.116	22764	TCP
2024-12-16T07:23:48.400289+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50020	167.71.56.116	22764	TCP
2024-12-16T07:23:48.400289+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50020	167.71.56.116	22764	TCP
2024-12-16T07:23:49.021966+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50020	167.71.56.116	22764	TCP
2024-12-16T07:23:49.269682+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50020	167.71.56.116	22764	TCP
2024-12-16T07:23:49.392581+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50020	167.71.56.116	22764	TCP
2024-12-16T07:23:49.634559+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50020	167.71.56.116	22764	TCP
2024-12-16T07:23:50.479098+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50020	167.71.56.116	22764	TCP
2024-12-16T07:23:50.869178+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50021	167.71.56.116	22764	TCP
2024-12-16T07:23:50.869178+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50021	167.71.56.116	22764	TCP
2024-12-16T07:23:51.396806+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50021	167.71.56.116	22764	TCP
2024-12-16T07:23:52.368226+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50021	167.71.56.116	22764	TCP
2024-12-16T07:23:53.321874+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50022	167.71.56.116	22764	TCP
2024-12-16T07:23:53.321874+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50022	167.71.56.116	22764	TCP
2024-12-16T07:23:54.113619+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50022	167.71.56.116	22764	TCP
2024-12-16T07:23:54.954402+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50022	167.71.56.116	22764	TCP
2024-12-16T07:23:55.775081+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50023	167.71.56.116	22764	TCP
2024-12-16T07:23:55.775081+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50023	167.71.56.116	22764	TCP
2024-12-16T07:23:56.856148+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50023	167.71.56.116	22764	TCP
2024-12-16T07:23:57.701914+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50023	167.71.56.116	22764	TCP
2024-12-16T07:23:58.213224+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50024	167.71.56.116	22764	TCP
2024-12-16T07:23:58.213224+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50024	167.71.56.116	22764	TCP
2024-12-16T07:23:58.693682+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50024	167.71.56.116	22764	TCP
2024-12-16T07:23:59.654483+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50024	167.71.56.116	22764	TCP
2024-12-16T07:23:59.774338+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50024	167.71.56.116	22764	TCP
2024-12-16T07:23:59.894820+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50024	167.71.56.116	22764	TCP
2024-12-16T07:24:00.014678+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50024	167.71.56.116	22764	TCP
2024-12-16T07:24:00.786254+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50025	167.71.56.116	22764	TCP
2024-12-16T07:24:00.786254+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50025	167.71.56.116	22764	TCP
2024-12-16T07:24:01.984862+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50025	167.71.56.116	22764	TCP
2024-12-16T07:24:02.584657+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50025	167.71.56.116	22764	TCP
2024-12-16T07:24:02.707096+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50025	167.71.56.116	22764	TCP
2024-12-16T07:24:03.212090+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50026	167.71.56.116	22764	TCP
2024-12-16T07:24:03.212090+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50026	167.71.56.116	22764	TCP
2024-12-16T07:24:03.452869+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50026	167.71.56.116	22764	TCP
2024-12-16T07:24:03.572756+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50026	167.71.56.116	22764	TCP
2024-12-16T07:24:04.046943+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50026	167.71.56.116	22764	TCP
2024-12-16T07:24:04.411960+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50026	167.71.56.116	22764	TCP
2024-12-16T07:24:05.260292+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50026	167.71.56.116	22764	TCP
2024-12-16T07:24:05.618832+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50027	167.71.56.116	22764	TCP
2024-12-16T07:24:05.618832+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50027	167.71.56.116	22764	TCP
2024-12-16T07:24:06.098137+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50027	167.71.56.116	22764	TCP
2024-12-16T07:24:06.936975+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50027	167.71.56.116	22764	TCP
2024-12-16T07:24:08.033364+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50028	167.71.56.116	22764	TCP
2024-12-16T07:24:08.033364+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50028	167.71.56.116	22764	TCP
2024-12-16T07:24:08.698240+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50028	167.71.56.116	22764	TCP
2024-12-16T07:24:10.462388+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50029	167.71.56.116	22764	TCP
2024-12-16T07:24:10.462388+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50029	167.71.56.116	22764	TCP
2024-12-16T07:24:10.703989+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50029	167.71.56.116	22764	TCP
2024-12-16T07:24:10.824434+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50029	167.71.56.116	22764	TCP
2024-12-16T07:24:11.386056+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50029	167.71.56.116	22764	TCP
2024-12-16T07:24:12.852775+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50030	167.71.56.116	22764	TCP
2024-12-16T07:24:12.852775+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50030	167.71.56.116	22764	TCP
2024-12-16T07:24:13.580439+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50030	167.71.56.116	22764	TCP
2024-12-16T07:24:14.642346+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50030	167.71.56.116	22764	TCP
2024-12-16T07:24:15.120310+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50030	167.71.56.116	22764	TCP
2024-12-16T07:24:15.248400+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50031	167.71.56.116	22764	TCP
2024-12-16T07:24:15.248400+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50031	167.71.56.116	22764	TCP
2024-12-16T07:24:15.487967+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50031	167.71.56.116	22764	TCP
2024-12-16T07:24:15.849016+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50031	167.71.56.116	22764	TCP
2024-12-16T07:24:16.448902+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50031	167.71.56.116	22764	TCP
2024-12-16T07:24:17.288594+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50031	167.71.56.116	22764	TCP
2024-12-16T07:24:17.622155+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50032	167.71.56.116	22764	TCP
2024-12-16T07:24:17.622155+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50032	167.71.56.116	22764	TCP
2024-12-16T07:24:18.271743+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50032	167.71.56.116	22764	TCP
2024-12-16T07:24:18.391590+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50032	167.71.56.116	22764	TCP
2024-12-16T07:24:18.992454+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50032	167.71.56.116	22764	TCP
2024-12-16T07:24:19.112699+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50032	167.71.56.116	22764	TCP
2024-12-16T07:24:19.886395+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50032	167.71.56.116	22764	TCP
2024-12-16T07:24:20.010521+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:20.010521+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:20.251247+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:20.443271+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:20.563187+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:21.132991+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:21.252784+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:21.372461+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:21.492272+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:22.246267+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50033	167.71.56.116	22764	TCP
2024-12-16T07:24:22.370924+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50034	167.71.56.116	22764	TCP
2024-12-16T07:24:22.370924+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50034	167.71.56.116	22764	TCP
2024-12-16T07:24:23.090477+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50034	167.71.56.116	22764	TCP
2024-12-16T07:24:24.756923+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50035	167.71.56.116	22764	TCP
2024-12-16T07:24:24.756923+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50035	167.71.56.116	22764	TCP
2024-12-16T07:24:25.236411+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50035	167.71.56.116	22764	TCP
2024-12-16T07:24:25.447711+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50035	167.71.56.116	22764	TCP
2024-12-16T07:24:25.732901+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50035	167.71.56.116	22764	TCP
2024-12-16T07:24:25.852730+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50035	167.71.56.116	22764	TCP
2024-12-16T07:24:27.103443+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50036	167.71.56.116	22764	TCP
2024-12-16T07:24:27.103443+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50036	167.71.56.116	22764	TCP
2024-12-16T07:24:27.365678+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50036	167.71.56.116	22764	TCP
2024-12-16T07:24:27.846185+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50036	167.71.56.116	22764	TCP
2024-12-16T07:24:27.993642+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50036	167.71.56.116	22764	TCP
2024-12-16T07:24:28.323712+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50036	167.71.56.116	22764	TCP
2024-12-16T07:24:28.460596+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50036	167.71.56.116	22764	TCP
2024-12-16T07:24:29.462208+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50037	167.71.56.116	22764	TCP
2024-12-16T07:24:29.462208+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50037	167.71.56.116	22764	TCP
2024-12-16T07:24:30.544750+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50037	167.71.56.116	22764	TCP
2024-12-16T07:24:30.664722+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50037	167.71.56.116	22764	TCP
2024-12-16T07:24:31.092143+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50037	167.71.56.116	22764	TCP
2024-12-16T07:24:31.682935+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50037	167.71.56.116	22764	TCP
2024-12-16T07:24:31.806118+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50038	167.71.56.116	22764	TCP
2024-12-16T07:24:31.806118+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50038	167.71.56.116	22764	TCP
2024-12-16T07:24:32.046113+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50038	167.71.56.116	22764	TCP
2024-12-16T07:24:33.275586+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50038	167.71.56.116	22764	TCP
2024-12-16T07:24:33.395490+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50038	167.71.56.116	22764	TCP
2024-12-16T07:24:33.818169+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50038	167.71.56.116	22764	TCP
2024-12-16T07:24:34.026351+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50038	167.71.56.116	22764	TCP
2024-12-16T07:24:34.153669+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50039	167.71.56.116	22764	TCP
2024-12-16T07:24:34.153669+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50039	167.71.56.116	22764	TCP
2024-12-16T07:24:36.495757+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50040	167.71.56.116	22764	TCP
2024-12-16T07:24:36.495757+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50040	167.71.56.116	22764	TCP
2024-12-16T07:24:38.837052+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50041	167.71.56.116	22764	TCP
2024-12-16T07:24:38.837052+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50041	167.71.56.116	22764	TCP
2024-12-16T07:24:39.316683+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50041	167.71.56.116	22764	TCP
2024-12-16T07:24:40.106740+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50041	167.71.56.116	22764	TCP
2024-12-16T07:24:40.226914+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50041	167.71.56.116	22764	TCP
2024-12-16T07:24:40.559535+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50041	167.71.56.116	22764	TCP
2024-12-16T07:24:41.165206+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50042	167.71.56.116	22764	TCP
2024-12-16T07:24:41.165206+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50042	167.71.56.116	22764	TCP
2024-12-16T07:24:42.128448+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50042	167.71.56.116	22764	TCP
2024-12-16T07:24:42.248215+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50042	167.71.56.116	22764	TCP
2024-12-16T07:24:43.645053+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50043	167.71.56.116	22764	TCP
2024-12-16T07:24:43.645053+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50043	167.71.56.116	22764	TCP
2024-12-16T07:24:44.207339+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50043	167.71.56.116	22764	TCP
2024-12-16T07:24:44.327249+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.10	50043	167.71.56.116	22764	TCP
2024-12-16T07:24:48.836841+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.10	50044	167.71.56.116	22764	TCP
2024-12-16T07:24:48.836841+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.10	50044	167.71.56.116	22764	TCP
2024-12-16T07:24:48.956801+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.10	50044	167.71.56.116	22764	TCP
2024-12-16T07:24:48.956801+0100	2838486	ETPRO MALWARE njRAT/Bladabindi Variant CnC Activity (inf)	1	192.168.2.10	50044	167.71.56.116	22764	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 07:20:55.106241941 CET	49704	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:55.226144075 CET	22764	49704	167.71.56.116	192.168.2.10
Dec 16, 2024 07:20:55.226476908 CET	49704	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:55.395231962 CET	49704	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:55.515079975 CET	22764	49704	167.71.56.116	192.168.2.10
Dec 16, 2024 07:20:55.515193939 CET	49704	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:55.635507107 CET	22764	49704	167.71.56.116	192.168.2.10
Dec 16, 2024 07:20:57.396070004 CET	22764	49704	167.71.56.116	192.168.2.10
Dec 16, 2024 07:20:57.396222115 CET	49704	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:59.406264067 CET	49704	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:59.407114029 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:59.526479959 CET	22764	49704	167.71.56.116	192.168.2.10
Dec 16, 2024 07:20:59.526880026 CET	22764	49705	167.71.56.116	192.168.2.10
Dec 16, 2024 07:20:59.526978016 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:59.530673027 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:59.650427103 CET	22764	49705	167.71.56.116	192.168.2.10
Dec 16, 2024 07:20:59.650567055 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:20:59.770345926 CET	22764	49705	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:00.886437893 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:01.006422043 CET	22764	49705	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:01.692608118 CET	22764	49705	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:01.695272923 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:03.698580027 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:03.699357033 CET	49706	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:04.010889053 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:04.433037043 CET	22764	49705	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:04.433080912 CET	22764	49706	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:04.433213949 CET	49706	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:04.433872938 CET	22764	49705	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:04.433923960 CET	49705	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:04.436217070 CET	49706	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:04.556246042 CET	22764	49706	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:04.556324005 CET	49706	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:04.676064014 CET	22764	49706	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:06.599356890 CET	22764	49706	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:06.599492073 CET	49706	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:08.604739904 CET	49706	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:08.605496883 CET	49707	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:08.724412918 CET	22764	49706	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:08.725217104 CET	22764	49707	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:08.725284100 CET	49707	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:08.728519917 CET	49707	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:08.848198891 CET	22764	49707	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:08.848337889 CET	49707	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:08.968223095 CET	22764	49707	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:09.026848078 CET	49707	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:09.146545887 CET	22764	49707	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:10.897335052 CET	22764	49707	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:10.897399902 CET	49707	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:12.901849985 CET	49707	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:12.902345896 CET	49708	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:13.021595955 CET	22764	49707	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:13.022015095 CET	22764	49708	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:13.022126913 CET	49708	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:13.025136948 CET	49708	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:13.145152092 CET	22764	49708	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:13.147958040 CET	49708	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:13.267751932 CET	22764	49708	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:15.196213007 CET	22764	49708	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:15.196281910 CET	49708	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:17.214358091 CET	49708	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:17.215065002 CET	49709	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:17.334184885 CET	22764	49708	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:17.334930897 CET	22764	49709	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:17.335031033 CET	49709	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:17.338254929 CET	49709	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:17.458003998 CET	22764	49709	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:17.458138943 CET	49709	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:17.578020096 CET	22764	49709	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:19.525410891 CET	22764	49709	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:19.525528908 CET	49709	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:21.526804924 CET	49709	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:21.527558088 CET	49710	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:21.646567106 CET	22764	49709	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:21.647413015 CET	22764	49710	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:21.647499084 CET	49710	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:21.650260925 CET	49710	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:21.769959927 CET	22764	49710	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:21.770095110 CET	49710	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:21.889827013 CET	22764	49710	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:23.822242022 CET	22764	49710	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:23.822314978 CET	49710	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:25.823628902 CET	49710	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:25.824372053 CET	49711	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:25.943546057 CET	22764	49710	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:25.944154978 CET	22764	49711	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:25.944283009 CET	49711	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:25.948374987 CET	49711	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:26.068142891 CET	22764	49711	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:26.068304062 CET	49711	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:26.188014984 CET	22764	49711	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:28.118130922 CET	22764	49711	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:28.118220091 CET	49711	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:30.120354891 CET	49711	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:30.121433020 CET	49712	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:30.240062952 CET	22764	49711	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:30.241141081 CET	22764	49712	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:30.241339922 CET	49712	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:30.245702982 CET	49712	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:30.365781069 CET	22764	49712	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:30.365964890 CET	49712	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:30.485789061 CET	22764	49712	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:32.401798010 CET	49712	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:32.410419941 CET	22764	49712	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:32.410532951 CET	49712	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:32.521567106 CET	22764	49712	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:32.530316114 CET	22764	49712	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:34.417908907 CET	49714	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:34.538013935 CET	22764	49714	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:34.538189888 CET	49714	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:34.541843891 CET	49714	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:34.661611080 CET	22764	49714	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:34.664748907 CET	49714	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:34.784619093 CET	22764	49714	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:36.707137108 CET	22764	49714	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:36.707205057 CET	49714	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:38.714277983 CET	49714	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:38.715332985 CET	49715	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:38.834013939 CET	22764	49714	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:38.835180998 CET	22764	49715	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:38.835341930 CET	49715	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:38.838710070 CET	49715	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:38.958400011 CET	22764	49715	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:38.958450079 CET	49715	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:39.078195095 CET	22764	49715	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:41.003844023 CET	22764	49715	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:41.004020929 CET	49715	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:43.012226105 CET	49715	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:43.024502039 CET	49716	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:43.132075071 CET	22764	49715	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:43.144325018 CET	22764	49716	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:43.144422054 CET	49716	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:43.147869110 CET	49716	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:43.267668009 CET	22764	49716	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:43.267795086 CET	49716	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:43.387701035 CET	22764	49716	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:44.995589018 CET	49716	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:45.115371943 CET	22764	49716	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:45.316971064 CET	22764	49716	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:45.317092896 CET	49716	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:47.323548079 CET	49716	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:47.324498892 CET	49718	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:47.443260908 CET	22764	49716	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:47.444113016 CET	22764	49718	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:47.444214106 CET	49718	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:47.448386908 CET	49718	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:47.568208933 CET	22764	49718	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:47.568274021 CET	49718	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:47.688205004 CET	22764	49718	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:49.261603117 CET	49718	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:49.381262064 CET	22764	49718	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:49.612060070 CET	22764	49718	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:49.612237930 CET	49718	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:51.620472908 CET	49718	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:51.621494055 CET	49729	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:51.740483046 CET	22764	49718	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:51.741265059 CET	22764	49729	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:51.741336107 CET	49729	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:51.744180918 CET	49729	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:51.863974094 CET	22764	49729	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:51.864089012 CET	49729	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:51.984642029 CET	22764	49729	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:53.910190105 CET	22764	49729	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:53.912712097 CET	49729	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:55.917603970 CET	49729	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:55.918410063 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:56.037257910 CET	22764	49729	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:56.038057089 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:56.038156033 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:56.040815115 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:56.160480976 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:56.160631895 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:56.280383110 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:56.371345043 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:56.490987062 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:56.495621920 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:56.615253925 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:56.806745052 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:56.926441908 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:56.926589966 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:57.046339989 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:57.046453953 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:57.166178942 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:57.166379929 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:57.286252975 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:57.286361933 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:57.406128883 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:57.406199932 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:57.526120901 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:57.526246071 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:57.646115065 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:57.646189928 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:57.766036034 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:57.766148090 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:57.885838032 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:57.886010885 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:58.005790949 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:58.005880117 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:58.125646114 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:58.127773046 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:58.207197905 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:58.207915068 CET	49739	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:21:58.247500896 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:21:58.327620029 CET	22764	49739	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:00.215042114 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:00.334883928 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:00.334984064 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:00.338485956 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:00.458589077 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:00.458652020 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:00.578561068 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:00.897206068 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.017013073 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.020860910 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.140657902 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.144709110 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.264486074 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.264626980 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.384345055 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.384422064 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.504157066 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.504277945 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.624000072 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.624679089 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.744400978 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.746742010 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.866477966 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.866751909 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:01.987647057 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:01.987729073 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:02.107501984 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:02.107637882 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:02.227464914 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:02.227540970 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:02.347306967 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:02.347439051 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:02.467232943 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:02.467365026 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:02.516184092 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:02.516307116 CET	49750	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:02.587059021 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:02.636135101 CET	22764	49750	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:04.527455091 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:04.647290945 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:04.647435904 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:04.650640011 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:04.770447016 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:04.770544052 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:04.890325069 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:04.890409946 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.010102034 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.010159969 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.130001068 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.130134106 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.249802113 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.249969006 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.369654894 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.369767904 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.489449978 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.489615917 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.609322071 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.609385014 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.729130030 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.729224920 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.849478960 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.849605083 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:05.969595909 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:05.969732046 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:06.120821953 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:06.120944023 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:06.361015081 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:06.361080885 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:06.480767012 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:06.480896950 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:06.600655079 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:06.600780964 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:06.720474005 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:06.720614910 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:06.814954042 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:06.815026045 CET	49761	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:06.841217041 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:06.935300112 CET	22764	49761	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:08.684351921 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:08.804111958 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:08.804425955 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:08.807344913 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:08.927083969 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:08.927400112 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:09.047194004 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:09.048576117 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:09.168562889 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:09.168663979 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:09.289113045 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:09.289254904 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:09.409471035 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:09.409656048 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:09.529444933 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:09.529649019 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:09.649586916 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:09.650013924 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:09.769985914 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:09.770163059 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:09.890069008 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:09.890450954 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.010253906 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.010468960 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.130297899 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.130548000 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.250360012 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.250544071 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.370331049 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.370408058 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.490191936 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.490573883 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.610287905 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.611304045 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.731167078 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.731333971 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.851203918 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.851293087 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.971246958 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.971342087 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:10.973223925 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:10.973309994 CET	49772	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:11.091204882 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:11.094060898 CET	22764	49772	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:12.730878115 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:12.850615025 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:12.850720882 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:12.853535891 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:12.973273039 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:12.976731062 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:13.096561909 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:13.099746943 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:13.219496012 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:13.219562054 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:13.339270115 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:13.339376926 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:13.459101915 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:13.460789919 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:13.580595970 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:13.581268072 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:13.701016903 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:13.701358080 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:13.821073055 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:13.821901083 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:13.941644907 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:13.942257881 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:14.061986923 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:14.062067986 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:14.181822062 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:14.182070971 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:14.302062988 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:14.302287102 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:14.421926975 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:14.422137976 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:14.541920900 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:14.542088032 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:14.662126064 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:14.662559986 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:14.782927036 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:14.783114910 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:14.903242111 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:14.903336048 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:15.018207073 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:15.018774033 CET	49783	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:15.023057938 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:15.138530970 CET	22764	49783	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:16.652826071 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:16.772618055 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:16.772742987 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:16.776609898 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:16.896347046 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:16.896467924 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.016294956 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.016434908 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.137176037 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.137300014 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.258054018 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.258194923 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.379488945 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.379622936 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.499339104 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.499423027 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.619141102 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.619321108 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.739044905 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.739104986 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.858788013 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.858913898 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:17.978661060 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:17.978775024 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.098747015 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.098824024 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.218529940 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.218692064 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.339262009 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.339373112 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.460186958 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.460516930 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.580218077 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.580329895 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.700033903 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.700098038 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.819967985 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.820034981 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.939970970 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.940057039 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:18.941688061 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:18.941759109 CET	49794	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:19.059762955 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:19.061470985 CET	22764	49794	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:20.465147972 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:20.584904909 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:20.585092068 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:20.588198900 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:20.708389997 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:20.708545923 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:20.828246117 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:20.828372002 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:20.948196888 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:20.948338985 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:21.068072081 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:21.068279028 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:21.187994003 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:21.188345909 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:21.308300018 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:21.308669090 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:21.429111958 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:21.429164886 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:21.548887014 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:21.548993111 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:21.668760061 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:21.668936014 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:21.788674116 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:21.788753986 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:21.908497095 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:21.908657074 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:22.028354883 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:22.028620958 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:22.148955107 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:22.149147034 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:22.269041061 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:22.269443989 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:22.389247894 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:22.389442921 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:22.509299994 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:22.509491920 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:22.629424095 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:22.636612892 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:22.752660036 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:22.752784014 CET	49804	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:22.756357908 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:22.872591972 CET	22764	49804	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:24.183893919 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:24.462167978 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:24.462253094 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:24.465152025 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:24.584878922 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:24.584944010 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:24.706095934 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:24.706161022 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:24.825848103 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:24.825928926 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:24.945708990 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:24.945951939 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:25.065699100 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:25.065772057 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:25.185471058 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:25.185590982 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:25.305311918 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:25.305442095 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:25.425137043 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:25.425203085 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:25.545007944 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:25.545161963 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:25.664971113 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:25.665196896 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:25.784897089 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:25.784972906 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:25.904798031 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:25.904963970 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:26.024708986 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:26.024893045 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:26.144629002 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:26.144860029 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:26.264692068 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:26.264801025 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:26.387727022 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:26.387811899 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:26.507803917 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:26.507872105 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:26.627556086 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:26.627650023 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:26.631489038 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:26.631568909 CET	49811	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:26.747353077 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:26.751564980 CET	22764	49811	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:27.964876890 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.084738016 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:28.084943056 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.088012934 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.207864046 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:28.208019972 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.327934027 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:28.328006983 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.447781086 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:28.459863901 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.579689026 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:28.579852104 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.700311899 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:28.700442076 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.822227955 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:28.822753906 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:28.942657948 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:28.942723036 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:29.062424898 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:29.062551975 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:29.182298899 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:29.182437897 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:29.302160025 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:29.302221060 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:29.422851086 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:29.422904968 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:29.542618036 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:29.542684078 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:29.662401915 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:29.662558079 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:29.782336950 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:29.782473087 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:29.902291059 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:29.902429104 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:30.022217989 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:30.022362947 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:30.142167091 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:30.142246962 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:30.254869938 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:30.254947901 CET	49822	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:30.262084961 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:30.374821901 CET	22764	49822	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:31.496067047 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:31.615878105 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:31.616051912 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:31.622047901 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:31.741765976 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:31.741936922 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:31.861709118 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:31.861814022 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:31.981623888 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:31.981702089 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:32.101571083 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:32.101706028 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:32.221771955 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:32.221864939 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:32.341648102 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:32.341754913 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:32.461468935 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:32.461530924 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:32.581310987 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:32.581373930 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:32.701102018 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:32.701237917 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:32.820904016 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:32.821089983 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:32.940876961 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:32.941021919 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.060765028 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.060839891 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.180627108 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.180690050 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.300432920 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.300564051 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.420414925 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.420571089 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.540353060 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.540474892 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.660391092 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.660522938 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.780546904 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.780616045 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.787632942 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.787699938 CET	49832	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:33.900656939 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:33.907506943 CET	22764	49832	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:34.949374914 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.069128036 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:35.069210052 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.072266102 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.192001104 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:35.192071915 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.311749935 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:35.311877966 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.431535006 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:35.494668007 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.614423990 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:35.614554882 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.734508038 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:35.734680891 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.854444981 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:35.854840994 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:35.974502087 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:35.974632025 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:36.094343901 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:36.094491959 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:36.214242935 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:36.214299917 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:36.333982944 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:36.334033012 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:36.453727961 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:36.453810930 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:36.573631048 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:36.573688984 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:36.693566084 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:36.749505043 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:36.869343042 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:36.869488001 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:36.989211082 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:37.239299059 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:37.239399910 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:38.324476004 CET	49839	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:38.325944901 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:38.444139004 CET	22764	49839	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:38.445658922 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:38.445775032 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:38.449640989 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:38.569319963 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:38.569472075 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:38.689368963 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:38.692622900 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:38.812355995 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:38.812622070 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:38.932352066 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:38.932698011 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:39.052402020 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:39.052476883 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:39.172220945 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:39.172374010 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:39.292032957 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:39.292114019 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:39.411835909 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:39.447789907 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:39.567461014 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:39.567570925 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:39.687261105 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:39.944015026 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:40.063842058 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:40.063918114 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:40.183634996 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:40.183777094 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:40.303488970 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:40.303570986 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:40.423199892 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:40.423309088 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:40.543028116 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:40.543103933 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:40.616959095 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:40.617050886 CET	49850	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:40.662909031 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:40.736830950 CET	22764	49850	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:41.637156963 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:41.757958889 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:41.758972883 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:41.761821032 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:41.881521940 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:41.884627104 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:42.004966974 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:42.006277084 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:42.127026081 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:42.127116919 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:42.246834040 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:42.246973991 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:42.366606951 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:42.366796017 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:42.488524914 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:42.558408976 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:42.678138018 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:42.678199053 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:42.798079014 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:42.889436007 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:43.009330988 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:43.009402037 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:43.129136086 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:43.297477961 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:43.417171955 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:43.418626070 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:43.538383007 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:43.539730072 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:43.659557104 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:43.664611101 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:43.784420967 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:43.784621954 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:43.904452085 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:43.904689074 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:43.928893089 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:43.929184914 CET	49856	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:44.024916887 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:44.048952103 CET	22764	49856	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:44.872093916 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:44.991785049 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:44.991981983 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:44.994354963 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:45.114023924 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:45.114144087 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:45.233813047 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:45.233992100 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:45.353653908 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:45.353847027 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:45.473555088 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:45.473681927 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:45.593368053 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:45.593482018 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:45.713247061 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:45.713331938 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:45.832969904 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:45.833028078 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:45.952836990 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:45.993532896 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:46.113511086 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:46.114835024 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:46.234684944 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:46.235461950 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:46.355113983 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:46.355180979 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:46.474837065 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:46.479523897 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:46.599220991 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:46.603127003 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:46.723361969 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:46.723454952 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:46.843106031 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:46.844547987 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:46.964279890 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:46.964550018 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:47.084275961 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:47.084444046 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:47.161776066 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:47.161907911 CET	49867	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:47.204273939 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:47.281593084 CET	22764	49867	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:48.046308041 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:48.166044950 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:48.166176081 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:48.168839931 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:48.288856030 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:48.289056063 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:48.408823013 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:48.409128904 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:48.528974056 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:48.529124022 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:48.648859024 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:48.648955107 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:48.769053936 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:48.769323111 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:48.889036894 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:48.889103889 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.009036064 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.009113073 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.129055977 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.129221916 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.248974085 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.249284029 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.369002104 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.369157076 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.489021063 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.489113092 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.609128952 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.609283924 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.729540110 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.729626894 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.849389076 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.849466085 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:49.969309092 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:49.969445944 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:50.089380026 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:50.089514017 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:50.209325075 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:50.209462881 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:50.329457998 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:50.329535961 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:50.335422039 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:50.335541010 CET	49873	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:50.449593067 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:50.455466032 CET	22764	49873	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:51.152501106 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:51.272232056 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:51.272455931 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:51.275849104 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:51.395674944 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:51.396173954 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:51.516060114 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:51.516166925 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:51.635910988 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:51.636147022 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:51.755877018 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:51.756062984 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:51.876799107 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:51.876903057 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:51.996756077 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:51.997484922 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:52.121084929 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:52.121253967 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:52.242695093 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:52.242877007 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:52.363523006 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:52.363770962 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:52.483520985 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:52.484081030 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:52.603885889 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:52.604243994 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:52.808871984 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:52.809164047 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:53.048744917 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:53.049675941 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:53.169691086 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:53.169837952 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:53.289908886 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:53.291342020 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:53.411140919 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:53.425483942 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:53.445465088 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:53.445615053 CET	49881	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:53.546273947 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:53.566267967 CET	22764	49881	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:54.218041897 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:54.337835073 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:54.337912083 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:54.351618052 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:54.471342087 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:54.471479893 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:54.591207981 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:54.591283083 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:54.711692095 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:54.711858988 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:54.831742048 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:54.831916094 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:54.951750994 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:54.951849937 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:55.071700096 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:55.071841002 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:55.191692114 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:55.191962957 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:55.312074900 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:55.312311888 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:55.432243109 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:55.432467937 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:55.552205086 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:55.552412033 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:55.672226906 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:55.672405958 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:55.792133093 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:55.792241096 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:55.912125111 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:55.912203074 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:56.032080889 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:56.032185078 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:56.151915073 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:56.151979923 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:56.271768093 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:56.271918058 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:56.391674995 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:56.391792059 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:56.507967949 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:56.508116007 CET	49890	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:56.511519909 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:56.627824068 CET	22764	49890	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:57.230479002 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:57.350199938 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:57.350629091 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:57.353076935 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:57.472707033 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:57.472884893 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:57.592504025 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:57.596615076 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:57.716418982 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:57.716552973 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:57.836276054 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:57.840661049 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:57.960539103 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:57.960684061 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:58.080590010 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:58.080949068 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:58.200858116 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:58.201373100 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:58.321279049 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:58.321357965 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:58.441284895 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:58.441355944 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:58.561147928 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:58.561487913 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:58.681564093 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:58.682815075 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:58.802490950 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:58.802663088 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:58.922409058 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:58.922486067 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:59.042220116 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:59.042390108 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:59.162183046 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:59.162414074 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:59.282372952 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:59.282450914 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:59.402297020 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:59.402411938 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:59.522903919 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:59.523123026 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:59.523669004 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:59.523768902 CET	49896	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:22:59.642806053 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:22:59.643398046 CET	22764	49896	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:00.208178043 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:00.327955008 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:00.328233957 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:00.332874060 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:00.452563047 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:00.452713966 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:00.572397947 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:00.575160027 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:00.694940090 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:00.695070028 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:00.814974070 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:00.815135002 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:00.934947014 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:00.935187101 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:01.054994106 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:01.055222034 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:01.175112009 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:01.175331116 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:01.295589924 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:01.340482950 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:01.460155964 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:01.460311890 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:01.580059052 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:01.580470085 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:01.700206995 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:01.700467110 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:01.820187092 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:01.820316076 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:01.941682100 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:01.941775084 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:02.061566114 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:02.061703920 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:02.182303905 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:02.182360888 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:02.302042007 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:02.302156925 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:02.422049046 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:02.422120094 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:02.492520094 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:02.492693901 CET	49907	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:02.541836977 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:02.612319946 CET	22764	49907	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:03.152425051 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:03.272171021 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:03.272249937 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:03.275191069 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:03.395015001 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:03.395128012 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:03.514823914 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:03.514905930 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:03.634599924 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:03.634691954 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:03.754436016 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:03.754884005 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:03.874955893 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:03.875020027 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:03.994764090 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:03.995034933 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:04.114716053 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:04.116583109 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:04.236341953 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:04.236624956 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:04.356436014 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:04.358623981 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:04.478385925 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:04.478606939 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:04.598295927 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:04.598382950 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:04.717991114 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:04.718075991 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:04.837733030 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:04.837800980 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:04.957546949 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:04.957623959 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:05.077375889 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:05.077534914 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:05.197233915 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:05.197381973 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:05.317200899 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:05.317262888 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:05.437130928 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:05.437366009 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:05.445727110 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:05.445854902 CET	49913	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:05.557342052 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:05.565561056 CET	22764	49913	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.031830072 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.151624918 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.151796103 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.154308081 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.274149895 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.274290085 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.394292116 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.394495010 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.514373064 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.514435053 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.634258032 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.634362936 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.754242897 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.754309893 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.874160051 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.874243975 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:06.994576931 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:06.994641066 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:07.114881992 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:07.114991903 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:07.234874010 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:07.234932899 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:07.354757071 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:07.354907990 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:07.474534035 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:07.474672079 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:07.594500065 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:07.594713926 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:07.714711905 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:07.714807034 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:07.834541082 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:07.834614992 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:07.954476118 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:07.954531908 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:08.074301958 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:08.074456930 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:08.194382906 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:08.194535971 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:08.314308882 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:08.314398050 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:08.318762064 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:08.318903923 CET	49919	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:08.434114933 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:08.438641071 CET	22764	49919	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:08.871121883 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:09.040834904 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:09.040913105 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:09.043642044 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:09.280277967 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:09.280359983 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:09.400554895 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:09.400717020 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:09.520565033 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:09.520704985 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:09.640477896 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:09.640558004 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:09.760396004 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:09.772849083 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:09.894293070 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:09.894439936 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.015366077 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.015526056 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.135366917 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.135785103 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.255426884 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.255660057 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.375358105 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.375463009 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.495213985 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.495331049 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.616482019 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.618297100 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.738121033 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.738254070 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.858386993 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.858495951 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:10.978239059 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:10.978318930 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:11.098062038 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:11.098162889 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:11.215743065 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:11.215862989 CET	49929	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:11.217891932 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:11.335573912 CET	22764	49929	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:11.730391979 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:11.850155115 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:11.850317001 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:11.853029013 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:11.972671986 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:11.972784042 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:12.092515945 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:12.092773914 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:12.212569952 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:12.212666035 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:12.332518101 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:12.332655907 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:12.452426910 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:12.452502966 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:12.572233915 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:12.572359085 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:12.692202091 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:12.692329884 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:12.812105894 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:12.812191010 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:12.932044983 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:12.932121038 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:13.051860094 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:13.051920891 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:13.171775103 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:13.171899080 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:13.292895079 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:13.292988062 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:13.412985086 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:13.566175938 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:13.686126947 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:13.686249971 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:13.806078911 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:14.013077974 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:14.013210058 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:14.495165110 CET	49935	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:14.496078014 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:14.614886045 CET	22764	49935	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:14.615813971 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:14.615881920 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:14.618513107 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:14.738255024 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:14.738317966 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:14.858068943 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:14.858119011 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:14.977891922 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:14.978009939 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:15.097801924 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:15.098110914 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:15.217768908 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:15.219310999 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:15.341504097 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:15.342029095 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:15.462783098 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:15.463387966 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:15.584943056 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:15.588535070 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:15.708278894 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:15.708570004 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:15.828509092 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:15.832549095 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:15.953380108 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:15.956561089 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:16.076343060 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:16.076401949 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:16.197151899 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:16.197221994 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:16.317123890 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:16.486440897 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:16.606380939 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:16.606548071 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:16.726671934 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:16.776505947 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:16.776623964 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.229509115 CET	49941	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.230459929 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.349312067 CET	22764	49941	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:17.350282907 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:17.350379944 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.352776051 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.472702026 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:17.472826958 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.592628002 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:17.592758894 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.712496042 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:17.712626934 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.832376957 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:17.832487106 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:17.953531981 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:17.953607082 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:18.073518991 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:18.073611975 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:18.193464041 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:18.193559885 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:18.313393116 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:18.313510895 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:18.433378935 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:18.435189009 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:18.555011034 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:18.558585882 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:18.678317070 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:18.678739071 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:18.798583031 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:18.799335957 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:18.919241905 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:18.933830976 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:19.053658009 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:19.054636955 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:19.174475908 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:19.174690962 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:19.294424057 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:19.294536114 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:19.414352894 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:19.414468050 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:19.529119968 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:19.529315948 CET	49947	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:19.534338951 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:19.649923086 CET	22764	49947	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:19.950016022 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.070072889 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:20.070287943 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.072634935 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.192349911 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:20.192430973 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.312143087 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:20.312300920 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.432056904 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:20.432197094 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.552423954 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:20.552556992 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.672308922 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:20.672446012 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.794179916 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:20.794248104 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:20.915200949 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:20.915344000 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:21.035365105 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:21.035496950 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:21.360987902 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:21.362551928 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:21.482364893 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:21.482597113 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:21.603140116 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:21.604635000 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:21.724510908 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:21.725383043 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:21.845062017 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:21.845170975 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:21.964832067 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:21.967459917 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:22.087388992 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:22.091171026 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:22.210896015 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:22.210966110 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:22.230196953 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:22.230283976 CET	49958	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:22.330734015 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:22.350001097 CET	22764	49958	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:22.632138968 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:22.751885891 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:22.751983881 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:22.754792929 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:22.874538898 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:22.874665976 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:22.995331049 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:22.995430946 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:23.116260052 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:23.116386890 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:23.236074924 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:23.236224890 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:23.355921984 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:23.356004953 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:23.475744963 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:23.475846052 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:23.595527887 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:23.595590115 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:23.715393066 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:23.715527058 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:23.835374117 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:23.835525036 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:23.955413103 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:23.955492973 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.075797081 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:24.075949907 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.195969105 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:24.196038961 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.316567898 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:24.316708088 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.437151909 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:24.437261105 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.557148933 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:24.557204008 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.678112030 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:24.678333998 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.798314095 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:24.798441887 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.917943954 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:24.918052912 CET	49964	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:24.918116093 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:25.037956953 CET	22764	49964	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:25.279336929 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:25.399303913 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:25.399435997 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:25.402623892 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:25.522485971 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:25.522708893 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:25.642582893 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:25.642752886 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:25.762615919 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:25.762679100 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:25.882580996 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:25.882715940 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.002454042 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.002757072 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.122437000 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.122680902 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.242377996 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.242680073 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.362365961 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.362453938 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.482208967 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.514981031 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.636461973 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.636660099 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.757508039 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.757641077 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.877434015 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.877655983 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:26.997452021 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:26.997632980 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:27.117515087 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:27.117674112 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:27.237512112 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:27.237585068 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:27.357316017 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:27.357398033 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:27.477643013 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:27.477791071 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:27.576071024 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:27.576189041 CET	49970	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:27.597604990 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:27.695909977 CET	22764	49970	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:27.917826891 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.038398027 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:28.038503885 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.040965080 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.160995960 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:28.161128044 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.281034946 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:28.281116009 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.401217937 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:28.401535034 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.521622896 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:28.521714926 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.641477108 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:28.641587973 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.761406898 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:28.761516094 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:28.881372929 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:28.881612062 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.001382113 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.001595974 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.121529102 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.121618986 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.241477966 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.241553068 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.361267090 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.361407042 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.481261015 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.481334925 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.601078033 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.601205111 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.720937014 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.721020937 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.842127085 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.842259884 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:29.961920023 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:29.962172031 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:30.082266092 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:30.082376003 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:30.198286057 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:30.198376894 CET	49976	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:30.202117920 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:30.318103075 CET	22764	49976	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:30.514553070 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:30.634296894 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:30.634372950 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:30.637001038 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:30.759387970 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:30.759490013 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:30.879275084 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:30.879345894 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:30.999015093 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:30.999099970 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:31.118855953 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:31.119059086 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:31.239367008 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:31.239609957 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:31.360677958 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:31.360910892 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:31.480654955 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:31.480717897 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:31.600878000 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:31.600953102 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:31.720743895 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:31.720911026 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:31.840665102 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:31.840833902 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:31.960586071 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:31.960675955 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:32.080485106 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:32.080591917 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:32.200423956 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:32.200520992 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:32.320336103 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:32.320467949 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:32.440346956 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:32.440417051 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:32.560163021 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:32.560300112 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:32.680063009 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:32.680150032 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:32.792615891 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:32.792728901 CET	49987	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:32.911145926 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.031132936 CET	22764	49987	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.091027975 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:33.210819960 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.211225033 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:33.213342905 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:33.333050966 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.333118916 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:33.453197956 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.453358889 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:33.573075056 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.573229074 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:33.694122076 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.694250107 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:33.814348936 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.814503908 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:33.934282064 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:33.934597969 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:34.054377079 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:34.054481983 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:34.174799919 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:34.174952030 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:34.294696093 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:34.294856071 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:34.414746046 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:34.415205002 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:34.534977913 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:34.535341024 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:34.655206919 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:34.655344963 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:34.775432110 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:34.775609016 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:34.895436049 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:34.895617962 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.015921116 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.016067028 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.136230946 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.136310101 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.256496906 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.257162094 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.377013922 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.377334118 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.403795958 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.404004097 CET	49993	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.497072935 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.523891926 CET	22764	49993	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.688698053 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.809331894 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.809485912 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.812591076 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:35.932250023 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:35.932476044 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:36.052165985 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:36.052462101 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:36.172223091 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:36.172358036 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:36.292218924 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:36.292423010 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:36.412436962 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:36.412532091 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:36.532351971 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:36.532450914 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:36.652245998 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:36.652407885 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:36.772278070 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:36.772413015 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:36.892245054 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:36.892398119 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.012094021 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.012183905 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.131922007 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.132019997 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.251831055 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.251990080 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.371651888 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.371839046 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.491691113 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.491832972 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.611633062 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.611826897 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.731828928 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.732022047 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.852092028 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.852416039 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.972166061 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.972349882 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:37.982224941 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:37.982492924 CET	49999	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:38.092475891 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:38.102196932 CET	22764	49999	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:38.246309042 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:38.366744995 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:38.366822004 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:38.369163036 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:38.488899946 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:38.488965034 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:38.609735012 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:38.609795094 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:38.729685068 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:38.730088949 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:38.849977016 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:38.850114107 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:38.969927073 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:38.970031023 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:39.089816093 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:39.089886904 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:39.209722042 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:39.211283922 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:39.331103086 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:39.331960917 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:39.452174902 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:39.452487946 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:39.573519945 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:39.576520920 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:39.696369886 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:39.696439981 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:39.816111088 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:39.816260099 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:39.936001062 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:39.936501980 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:40.056200981 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:40.060559034 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:40.180524111 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:40.180581093 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:40.300297022 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:40.300352097 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:40.420145988 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:40.420262098 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:40.526890993 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:40.526994944 CET	50005	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:40.539961100 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:40.646708012 CET	22764	50005	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:40.777549028 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:40.897497892 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:40.897614002 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:40.900470972 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.020298004 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.020426989 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.140173912 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.140244961 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.259953022 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.260020971 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.379962921 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.380106926 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.501075029 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.501163960 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.622023106 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.622083902 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.742275000 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.742428064 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.862142086 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.862277985 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:41.982093096 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:41.982182026 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:42.102443933 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:42.102524996 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:42.223221064 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:42.223334074 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:42.343261003 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:42.343384981 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:42.463232040 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:42.463370085 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:42.583292961 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:42.583426952 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:42.703346968 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:42.703476906 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:42.823236942 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:42.823309898 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:42.943907022 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:42.943994999 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:43.059849977 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:43.059917927 CET	50011	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:43.063741922 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:43.180855989 CET	22764	50011	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:43.293364048 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:43.413326025 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:43.413408041 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:43.415718079 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:43.535532951 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:43.535648108 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:43.655572891 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:43.655667067 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:43.775500059 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:43.796704054 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:43.916557074 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:43.916820049 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:44.036992073 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:44.339718103 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:44.459490061 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:44.459559917 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:44.579864025 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:44.579996109 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:44.699820042 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:44.699968100 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:44.819854021 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:44.819907904 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:44.940102100 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:44.940176964 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.060048103 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.060168982 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.179910898 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.182523966 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.302320957 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.303050041 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.422888041 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.426521063 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.546314955 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.546895027 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.573926926 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.574757099 CET	50017	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.666673899 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.694736958 CET	22764	50017	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.792813063 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.912678003 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:45.915131092 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:45.917650938 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:46.037961006 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:46.038948059 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:46.159755945 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:46.159827948 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:46.279925108 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:46.280039072 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:46.399934053 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:46.417678118 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:46.537427902 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:46.537524939 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:46.657269955 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:46.657354116 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:46.777446032 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:46.923578024 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:47.043490887 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:47.043608904 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:47.166057110 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:47.166127920 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:47.285892010 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:47.285959005 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:47.406449080 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:47.406573057 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:47.526242971 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:47.526308060 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:47.646035910 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:47.646162033 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:47.765981913 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:47.766057014 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:47.885797977 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:47.885911942 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.005630016 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.005759954 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.074171066 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.074290991 CET	50019	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.125511885 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.194200993 CET	22764	50019	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.277539968 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.397383928 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.397538900 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.400289059 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.520155907 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.522644997 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.642498970 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.646553993 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.766680002 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.766829014 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:48.886703014 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:48.887813091 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.007680893 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.021965981 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.141763926 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.142283916 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.262073040 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.269681931 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.389496088 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.392580986 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.512433052 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.512517929 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.632355928 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.634558916 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.754316092 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.754549980 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.874310017 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.875802040 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:49.995568037 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:49.998696089 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.118498087 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.118921041 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.238815069 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.238955975 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.359002113 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.359091043 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.478993893 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.479098082 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.558482885 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.558650970 CET	50020	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.598867893 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.678411007 CET	22764	50020	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.745944023 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.865854979 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.866100073 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.869178057 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:50.989047050 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:50.989217043 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:51.109244108 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:51.109361887 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:51.229274988 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:51.229381084 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:51.349221945 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:51.396806002 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:51.516612053 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:51.516937971 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:51.637023926 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:51.637200117 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:51.757039070 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:51.757214069 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:51.877032042 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:51.877192974 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:51.997028112 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:51.997148037 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:52.117079020 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:52.117139101 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:52.236917973 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:52.237051964 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:52.356827974 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:52.368226051 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:52.488147974 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:52.488279104 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:52.608254910 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:52.608407021 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:52.728138924 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:52.729628086 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:52.849559069 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:52.849872112 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:52.969696045 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:52.969867945 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.027978897 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.028043032 CET	50021	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.089653015 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.147793055 CET	22764	50021	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.199307919 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.319220066 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.319343090 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.321873903 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.441596985 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.441701889 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.561510086 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.561676025 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.681674004 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.681979895 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.801939011 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.802057981 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:53.921957016 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:53.922039032 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:54.041845083 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:54.113619089 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:54.233614922 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:54.233774900 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:54.353689909 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:54.353943110 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:54.473799944 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:54.473948956 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:54.594006062 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:54.594118118 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:54.713958025 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:54.714399099 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:54.834255934 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:54.834513903 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:54.954294920 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:54.954401970 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.074184895 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.074280024 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.194117069 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.194211006 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.314057112 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.314407110 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.435229063 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.435328960 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.481215000 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.481374025 CET	50022	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.555241108 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.601186037 CET	22764	50022	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.652707100 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.772497892 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.772669077 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.775080919 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:55.894828081 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:55.894890070 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.014657021 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.014780998 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.134951115 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.135229111 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.255004883 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.255170107 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.374913931 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.375003099 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.494759083 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.494893074 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.614650965 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.614789963 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.734606981 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.734733105 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.855407000 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.856148005 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:56.976226091 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:56.976386070 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.096575022 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:57.096662998 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.219391108 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:57.220376968 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.340271950 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:57.340379953 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.460906029 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:57.461222887 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.581773996 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:57.581990957 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.701822042 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:57.701914072 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.821830034 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:57.823333979 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.934201956 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:57.934336901 CET	50023	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:57.943166971 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.054173946 CET	22764	50023	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.089876890 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:58.209747076 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.209911108 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:58.213223934 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:58.332988977 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.333146095 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:58.453883886 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.453960896 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:58.573731899 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.573875904 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:58.693599939 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.693681955 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:58.813541889 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.813740015 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:58.933465958 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:58.933545113 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:59.053431034 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:59.053517103 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:59.173445940 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:59.173595905 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:59.293505907 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:59.293726921 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:59.414448977 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:59.414599895 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:59.534382105 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:59.534488916 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:59.654419899 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:59.654483080 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:59.774275064 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:59.774338007 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:23:59.894752979 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:23:59.894819975 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:00.014583111 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:00.014678001 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:00.135107994 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:00.135227919 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:00.255085945 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:00.255160093 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:00.505064011 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:00.505135059 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:00.505209923 CET	50024	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:00.629772902 CET	22764	50024	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:00.653310061 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:00.773133039 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:00.773231983 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:00.786253929 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:00.906336069 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:00.906423092 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.026201963 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.026273966 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.146073103 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.146186113 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.265944004 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.266083956 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.385806084 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.385924101 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.505626917 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.505753994 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.625478029 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.625545025 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.745227098 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.745357990 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.865042925 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.865108967 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:01.984802961 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:01.984862089 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.104968071 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.105061054 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.224809885 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.224948883 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.344768047 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.344876051 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.464643955 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.464768887 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.584594011 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.584656954 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.706990004 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.707096100 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.826946020 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.827014923 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.946760893 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.946904898 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:02.950373888 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:02.950493097 CET	50025	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:03.066580057 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:03.070204973 CET	22764	50025	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:03.089839935 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:03.209649086 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:03.209786892 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:03.212090015 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:03.331806898 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:03.331935883 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:03.452748060 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:03.452868938 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:03.572681904 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:03.572756052 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:03.692565918 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:04.046942949 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:04.166724920 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:04.166865110 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:04.286587954 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:04.286750078 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:04.406461000 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:04.411959887 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:04.531732082 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:04.531811953 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:04.651825905 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:04.651915073 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:04.771750927 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:04.772562981 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:04.892297029 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:04.894912004 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.014624119 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.019193888 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.138942003 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.140500069 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.260229111 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.260292053 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.373764992 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.373919010 CET	50026	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.380038977 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.493693113 CET	22764	50026	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.496457100 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.616266012 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.616430044 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.618832111 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.738606930 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.738733053 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.858494997 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.858557940 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:05.978203058 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:05.978274107 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:06.097981930 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:06.098136902 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:06.217797995 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:06.217924118 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:06.337624073 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:06.337768078 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:06.457506895 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:06.457578897 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:06.577323914 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:06.577483892 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:06.697268009 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:06.697401047 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:06.817118883 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:06.817199945 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:06.936916113 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:06.936975002 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.056695938 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.056765079 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.176500082 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.176642895 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.296344042 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.296436071 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.416203022 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.416328907 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.535995960 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.536088943 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.656059027 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.656128883 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.775830984 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.775897026 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.778283119 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.778345108 CET	50027	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:07.896676064 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.898799896 CET	22764	50027	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:07.910840988 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:08.030623913 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:08.030774117 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:08.033364058 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:08.153166056 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:08.153296947 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:08.273143053 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:08.698240042 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:08.818217039 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:08.818276882 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:08.938266993 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:08.938352108 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:09.058115005 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:09.058245897 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:09.463769913 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:09.625585079 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:09.625679970 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:09.625756979 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:09.745592117 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:09.745747089 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:09.865598917 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:09.865690947 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:09.985373974 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:09.985537052 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.105515003 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.105598927 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.225459099 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.226129055 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.231580019 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.232275963 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.339340925 CET	50028	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.340076923 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.345782995 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.352129936 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.459078074 CET	22764	50028	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.459777117 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.459871054 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.462388039 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.582072020 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.582743883 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.702538967 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.703989029 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.823993921 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:10.824434042 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:10.944159031 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:11.386055946 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:11.505930901 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:11.506072044 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:11.625864983 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:11.625926971 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:11.745800972 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:11.745929956 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:11.865737915 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:11.865818977 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:11.985666990 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:11.985753059 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.105973959 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.106132030 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.226205111 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.228511095 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.348347902 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.352495909 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.472583055 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.476497889 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.596494913 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.597018957 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.624383926 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.624490976 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.718044043 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.729475021 CET	50029	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.730400085 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.744348049 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.849298954 CET	22764	50029	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.850301027 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.850385904 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.852775097 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:12.972661018 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:12.976481915 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:13.096417904 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:13.100493908 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:13.220416069 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:13.220535994 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:13.340289116 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:13.340378046 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:13.460383892 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:13.460480928 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:13.580363035 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:13.580439091 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:13.921917915 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:13.922029018 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:14.042231083 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:14.042371988 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:14.162147999 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:14.162300110 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:14.282433033 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:14.282593012 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:14.402461052 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:14.402607918 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:14.522368908 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:14.522430897 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:14.642270088 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:14.642345905 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:14.763602972 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:14.763727903 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:14.883549929 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:14.883690119 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.003499031 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.003618956 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.014694929 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.014832020 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.120310068 CET	50030	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.121001005 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.123420000 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.134556055 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.240144014 CET	22764	50030	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.240751028 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.240828991 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.248399973 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.368091106 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.368165016 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.487912893 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.487967014 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.608979940 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.609131098 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.728955030 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.729108095 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.848953009 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.849015951 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:15.968802929 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:15.968916893 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:16.088877916 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:16.088999987 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:16.208904982 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:16.209070921 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:16.328860998 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:16.328938007 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:16.448836088 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:16.448901892 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:16.568597078 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:16.568759918 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:16.688657999 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:16.688813925 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:16.808659077 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:16.808779955 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:16.928615093 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:16.928744078 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.048515081 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.048595905 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.168381929 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.168462992 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.288527966 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.288594007 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.405714035 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.405862093 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.408364058 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.495814085 CET	50031	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.499452114 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.525644064 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.616152048 CET	22764	50031	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.619235039 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.619337082 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.622154951 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.742036104 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:17.742137909 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:17.862054110 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:18.271743059 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:18.391529083 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:18.391590118 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:18.511442900 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:18.511559963 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:18.631341934 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:18.631474018 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:18.751225948 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:18.751355886 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:18.872070074 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:18.872236013 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:18.992347956 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:18.992454052 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.112593889 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:19.112699032 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.232701063 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:19.236468077 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.356503963 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:19.360486031 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.480278969 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:19.480451107 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.600307941 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:19.600471973 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.720230103 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:19.720328093 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.795978069 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:19.796075106 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.840049028 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:19.886394978 CET	50032	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.887319088 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:19.915802956 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:20.006167889 CET	22764	50032	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:20.007010937 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:20.007113934 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:20.010520935 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:20.130285978 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:20.131345034 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:20.251162052 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:20.251246929 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:20.371040106 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:20.443270922 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:20.563033104 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:20.563186884 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:20.683036089 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:21.132991076 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:21.252732992 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:21.252784014 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:21.372399092 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:21.372461081 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:21.492110014 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:21.492271900 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:21.612047911 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:21.612153053 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:21.731884956 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:21.731960058 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:21.851735115 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:21.851912975 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:21.971708059 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:21.971862078 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.091655970 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.091742992 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.171325922 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.171458960 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.211448908 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.246267080 CET	50033	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.248514891 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.291304111 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.366060019 CET	22764	50033	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.368300915 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.368407965 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.370923996 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.490758896 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.490899086 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.610766888 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.610918045 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.730783939 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.730921984 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.850666046 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.850737095 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:22.970536947 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:22.970675945 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:23.090415955 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:23.090476990 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:23.210808039 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:23.210992098 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:23.331548929 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:23.331626892 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:23.451391935 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:23.451450109 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:23.571111917 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:23.571257114 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:23.691001892 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:23.691148996 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:23.810833931 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:23.810990095 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:23.930927992 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:23.931067944 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.134037018 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.134092093 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.375540972 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.375719070 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.495542049 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.495626926 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.546574116 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.546694040 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.615577936 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.620989084 CET	50034	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.621733904 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.666465044 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.740719080 CET	22764	50034	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.741692066 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.741785049 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.756922960 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.876739979 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.876800060 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:24.996593952 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:24.996670008 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:25.116411924 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:25.116533041 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:25.236277103 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:25.236411095 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:25.356252909 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:25.447710991 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:25.567709923 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:25.732901096 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:25.852669001 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:25.852730036 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:25.972512960 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:25.972693920 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.092447042 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.092514038 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.213215113 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.213284016 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.332990885 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.333045959 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.452719927 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.452887058 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.572571039 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.572647095 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.692321062 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.692452908 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.812347889 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.812463045 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.903516054 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.903664112 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.932365894 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:26.979799032 CET	50035	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:26.980573893 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.023678064 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.100575924 CET	22764	50035	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.100744963 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.100914955 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.103442907 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.223175049 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.223258972 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.343066931 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.365678072 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.486135006 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.486238003 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.606203079 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.606328011 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.726114988 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.726246119 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.846066952 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.846184969 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:27.965970039 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:27.993642092 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:28.113357067 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:28.323712111 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:28.443613052 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:28.460596085 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:28.580454111 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:28.580511093 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:28.706072092 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:28.706204891 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:28.825973034 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:28.826039076 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:28.946005106 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:28.946072102 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.065772057 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.065887928 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.185559988 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.185673952 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.263175964 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.264573097 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.305538893 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.338941097 CET	50036	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.339657068 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.384449959 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.458740950 CET	22764	50036	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.459419012 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.459595919 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.462208033 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.581948042 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.583753109 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.703542948 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.704463959 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.824213028 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.824459076 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:29.944274902 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:29.944468021 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:30.064214945 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:30.064462900 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:30.184292078 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:30.184393883 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:30.304143906 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:30.304214954 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:30.424132109 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:30.424304962 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:30.544121027 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:30.544749975 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:30.664572954 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:30.664721966 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:30.784710884 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.092143059 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.211838007 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.211904049 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.331582069 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.331664085 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.451472998 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.451652050 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.571609020 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.571695089 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.624022961 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.624087095 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.682934999 CET	50037	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.683805943 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.691612005 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.743882895 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.802591085 CET	22764	50037	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.803472042 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.803558111 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.806118011 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:31.926152945 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:31.926280022 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:32.046046972 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:32.046113014 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:32.166220903 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:32.166356087 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:32.286274910 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:32.286426067 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:32.406269073 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:32.406344891 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:32.526158094 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:32.526304007 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:32.646089077 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:32.646230936 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:32.766005039 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:32.766177893 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:32.885894060 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:32.886055946 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:33.005705118 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:33.005776882 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:33.125543118 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:33.125682116 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:33.245625019 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:33.275585890 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:33.395324945 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:33.395489931 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:33.515165091 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:33.818169117 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:33.938077927 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:33.938358068 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:33.966588974 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:33.966795921 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.026350975 CET	50038	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.027050018 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.058176994 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.086709976 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.146105051 CET	22764	50038	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.146863937 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.146943092 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.153669119 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.273367882 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.273427963 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.393346071 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.393400908 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.513189077 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.513267040 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.632997990 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.633122921 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.753376007 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.753462076 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.873202085 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.873289108 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:34.993041039 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:34.993192911 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:35.112988949 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:35.113106966 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:35.232919931 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:35.233063936 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:35.352932930 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:35.353059053 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:35.472971916 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:35.473037958 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:35.592902899 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:35.592968941 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:35.712755919 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:35.712847948 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:35.832720995 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:35.835019112 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:35.954807997 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:35.956468105 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.076323986 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.079433918 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.199276924 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.202524900 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.312463999 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.312551975 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.322244883 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.370193005 CET	50039	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.370955944 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.432404995 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.490248919 CET	22764	50039	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.490737915 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.490835905 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.495757103 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.615899086 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.616044998 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.735774994 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.735857964 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.855659008 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.855741024 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:36.975550890 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:36.975678921 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:37.095520020 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:37.095639944 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:37.215447903 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:37.215573072 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:37.335484028 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:37.335634947 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:37.456932068 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:37.457000971 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:37.576898098 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:37.577060938 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:37.696856022 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:37.696983099 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:37.816762924 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:37.816903114 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:37.936705112 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:37.936855078 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.056668997 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.056741953 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.176497936 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.176614046 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.296350956 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.296520948 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.416213989 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.416412115 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.536258936 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.536432028 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.655267954 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.655348063 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.656171083 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.713947058 CET	50040	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.714826107 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.775018930 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.833712101 CET	22764	50040	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.834486961 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.834636927 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.837052107 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:38.956794977 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:38.956984043 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:39.076850891 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:39.076978922 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:39.196722031 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:39.196770906 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:39.316576004 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:39.316683054 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:39.436525106 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:39.436731100 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:39.556499004 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:39.557121992 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:39.676914930 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:39.677054882 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:39.796905041 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:39.797044992 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:39.916913986 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:39.916996002 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:40.036776066 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:40.106739998 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:40.226706028 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:40.226913929 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:40.346688032 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:40.559535027 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:40.679274082 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:40.679336071 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:40.799544096 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:40.799936056 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:40.919651985 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:40.919812918 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:40.997545004 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:40.997917891 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.039485931 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.042359114 CET	50041	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.043186903 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.117768049 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.162175894 CET	22764	50041	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.162815094 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.162911892 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.165205956 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.285069942 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.286767960 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.406490088 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.408452034 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.528228998 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.528431892 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.648163080 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.648448944 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.768188953 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.768263102 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:41.888030052 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:41.888411045 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:42.008141041 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:42.008423090 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:42.128113031 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:42.128448009 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:42.248131037 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:42.248214960 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:42.367896080 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:43.327702045 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:43.327802896 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:43.520811081 CET	50042	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:43.521848917 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:43.640593052 CET	22764	50042	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:43.641546011 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:43.641632080 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:43.645052910 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:43.764859915 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:43.765057087 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:43.884907007 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:44.207339048 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:44.327124119 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:44.327249050 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:44.447076082 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:44.447305918 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:44.567128897 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:44.567344904 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:44.687144995 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:44.687300920 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:44.807014942 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:44.807085991 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:44.926924944 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:44.927336931 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.047065020 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.047272921 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.166965961 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.167274952 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.287000895 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.287156105 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.407085896 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.407257080 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.528177023 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.528250933 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.647986889 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.648319006 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.768203974 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.768321991 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.812653065 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.812963009 CET	50043	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:45.887955904 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:45.932646990 CET	22764	50043	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:48.715164900 CET	50044	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:48.834881067 CET	22764	50044	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:48.835125923 CET	50044	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:48.836841106 CET	50044	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:48.956732988 CET	22764	50044	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:48.956800938 CET	50044	22764	192.168.2.10	167.71.56.116
Dec 16, 2024 07:24:49.076550007 CET	22764	50044	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:50.999625921 CET	22764	50044	167.71.56.116	192.168.2.10
Dec 16, 2024 07:24:50.999738932 CET	50044	22764	192.168.2.10	167.71.56.116

Target ID:	0
Start time:	01:20:38
Start date:	16/12/2024
Path:	C:\Users\user\Desktop\njrat.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\njrat.exe"
Imagebase:	0x680000
File size:	37'888 bytes
MD5 hash:	4699BEC8CD50AA7F2CECF0DF8F0C26A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, Author: unknown Rule: njrat1, Description: Identify njRat, Source: 00000000.00000000.1562511686.0000000000682000.00000002.00000001.01000000.00000003.sdmp, Author: Brian Wallace @botnet_hunter
Reputation:	low
Has exited:	true

Target ID:	2
Start time:	01:20:44
Start date:	16/12/2024
Path:	C:\Windows\rundll32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\rundll32.exe"
Imagebase:	0xab0000
File size:	37'888 bytes
MD5 hash:	4699BEC8CD50AA7F2CECF0DF8F0C26A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: C:\Windows\rundll32.exe, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: C:\Windows\rundll32.exe, Author: unknown Rule: njrat1, Description: Identify njRat, Source: C:\Windows\rundll32.exe, Author: Brian Wallace @botnet_hunter Rule: MALWARE_Win_NjRAT, Description: Detects NjRAT / Bladabindi, Source: C:\Windows\rundll32.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 95%, ReversingLabs
Reputation:	low
Has exited:	false

Target ID:	4
Start time:	01:20:50
Start date:	16/12/2024
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh firewall add allowedprogram "C:\Windows\rundll32.exe" "rundll32.exe" ENABLE
Imagebase:	0x1160000
File size:	82'432 bytes
MD5 hash:	4E89A1A088BE715D6C946E55AB07C7DF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	5
Start time:	01:20:51
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff620390000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	6
Start time:	01:20:59
Start date:	16/12/2024
Path:	C:\Windows\rundll32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\rundll32.exe" ..
Imagebase:	0x9e0000
File size:	37'888 bytes
MD5 hash:	4699BEC8CD50AA7F2CECF0DF8F0C26A0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true